BugBot

CyberSecurity

[BugBot @BugBot4]

After waiting for 90 days, I am finally disclosing a bug in a popular forum platform that leads to email disclosure & FULL access to the forum's SMTP. https://t.co/3AId0WLphX

[celeste 🔜 vibechella @vmfunc]

the watchers: how openai, the US government, and persona have been secretly running an identity surveillance system since nov 2023.

https://t.co/Zz04WDF8Lz

researched by @vmfunc, @MDLcsgo, @DziurwaF

[BugBot @BugBot4]

@IceSolst You forgot the third alert being their custom logic triggering on the same thing ;)

[BugBot @BugBot4]

@wbmmfq Nooo don't do something new, think of the poor detection engineers!

[BugBot @BugBot4]

@snehalantani When SOC analysts detect a breached device in their environment, they may very well choose to observe a threat before isolating a device, or otherwise taking action.

Given that Huntress is a managed EDR solution, you could very well compare all on-boarded clients as "their env"

[BugBot @BugBot4]

@vxunderground @RiderHomie I wonder how long fdupes will take across all those cats

[BugBot @BugBot4]

@apiratemoo He deserved what he had coming to him, smh

[BugBot @BugBot4]

@SwiftOnSecurity You're right.

[BugBot @BugBot4]

@vxunderground When you accidentally press the termite-disk-wiping button

[Ambionics Security @ambionics]

Iconv, set the charset to RCE: in the first blog post of this series, @cfreal_ will show a new exploitation vector to get RCE in PHP from a file read primitive, using a bug in iconv() (CVE-2024-2961) https://t.co/7GQvKPszrl

[Merill Fernando @merill]

Is your concern about groups vs users accounts for break glass accounts in CA policies?

Here are more things to be concerned about (read to the end, I have an answer).

👉 Someone forgets to exclude the BG user/group from a CA policy

👉 Someone is doing a clean-up and accidentally deletes the BG user/group

👉 Someone removes the GA role from the BG user/group

👉 Someone removes the auth method of the BG account

👉 Your BG uses FIDO2 and someone sets up an auth method policy that blocks the FIDO2 AAGUID (ps. this happened to me)

Anything else you can think of or comment below?

The solution, set up https://t.co/QbUp63ffXf to monitor your tenant for these critical config items. Even if something gets changed years later it will get picked up.

@fabian_bader wrote a bunch of tests for CA including one to check for BG exclusion on each policy.

The best part is you can write your own tenant specific test and have them monitored daily and alert you.

It costs $0 and less than half an hour to set up the automation.

[cts🌸 @gf_256]

im pirating Ableton Live suite 12

the .NFO has an interesting tidbit:

"does not modify any original binaries".

How does it work? lets find out. live reversing thread lets go

[BugBot @BugBot4]

This is a blessing words can't describe.

[Dirk-jan @_dirkjan]

👀 looks like Microsoft started with rolling out the Conditional Access features for controlling device code flow auth that I mentioned in my last blog https://t.co/jDPKPeRhpl. Seems to be in preview, not in all tenants yet.

[BugBot @BugBot4]

@SwiftOnSecurity always deletes their hardest tweets :(

[perfect blue @pb_ctf]

It's finally happening! pbctf 2023 is here

🗓️ Feb 18th, 14:00 UTC to Feb 20th 02:00 UTC (36 hours)

🎁 A $10,000 prize pool

Proudly sponsored by @Zellic_io

https://t.co/EOKVUMmTBP

[Sam Curry @samwcyo]

More car hacking!

Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.

Here's how we found it, and how it works:

[Read Raising Expectations (and Raising Hell) @JPHilllllll]

Since Elon Musk refuses to stop talking about free speech, let’s look at his actual record on the topic.
Thread 🧵

[Joseph Cox @josephfcox]

New: here is the user manual for a mass surveillance tool that U.S. local cops are actively using. Based on location data harvested from ordinary apps installed on peoples' phones. No warrant needed, just login and search https://t.co/QUyLB3RwaZ

[BugBot @BugBot4]

Company is ran by great people! 10/10 recommend

[Zellic @zellic_io]

We are hiring :)
Are you an experienced vulnerability researcher or senior auditooor? We pay what you deserve!

[BugBot @BugBot4]

@ur_ghostess @syndrowm @DefconParrot @defcon @viktoredstrom @patriksletmo @WhNdsSlp It was a good idea and you know it!

[BugBot @BugBot4]

@gf_256 This put all other parties to shame 🙌