d45id

+ InfoSec + BSD & GNU/Linux enthusiast +doing computer stuff +

[m0n1 @m0n1x90]

You can find my documentation about that CVE from my POV in the below blog.

https://t.co/PEptTc2RiT

[Nicolas Krassas @Dinosn]

Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox https://t.co/5crwyh7EXp

[CIQ @CtrlIQ]

Three page-cache privilege escalation vulnerabilities in three weeks. Copy Fail, Dirty Frag, Fragnesia. The pattern is clear.

CIQ's response to Fragnesia was different. Instead of patching what researchers found and moving on, Sultan Alsawaf audited the kernel's networking stack for additional vulnerable code paths and found one. He built a proof-of-concept, confirmed it worked, and posted both the exploit and the fix to the Linux kernel mailing list the same day. The upstream maintainer folded it into the V3 patch within hours.

Nathan Blackham covers the full story: what Fragnesia is, how CIQ found a path the original researchers missed, and what proactive kernel security actually looks like in practice.

Read it here: https://t.co/OGb4YjiEhZ
#LinuxSecurity #EnterpriseLinux #RockyLinux #CVE #CIQ #LinuxKernel

[Nightmare Eclipse @ChaoticEclipse0]

It's confirmed, CVE-2020-17103 patch is ineffective and the vulnerability still exists,
A weaponized PoC can be found here -
https://t.co/7hnamkLsS1

Tested against fully patched Windows 11 and Server 2025 machines.

[Florian Roth ⚡️ @cyb3rops]

Another LPE vector on Linux ...
I lost count ...

https://t.co/LL2BUe112O

[Geek Lite @QingQ77]

在 Linux 上告诉你插着的 USB 线到底能干什么——速率、功耗、PD 协商、充电瓶颈一目了然。

https://t.co/lOsFqVRrgZ

这是 macOS WhatCable 的 Linux 移植，从只看 USB-C 变成覆盖所有 USB 设备。直接读 sysfs，不用 root，就能拿到厂商名、协商速度、功耗、USB 版本、驱动、拓扑。USB-C 端口多一层：端口角色、线缆 e-marker、充电器 PDO、瓶颈诊断。

[Florian Roth ⚡️ @cyb3rops]

If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are useless or shady anyway.
- Set minimumReleaseAge to delay fresh packages. In recent attacks, that delay alone would’ve been enough to avoid pulling malicious versions.
- On Linux, wrap your package manager in bubblewrap. Keeps the junk from touching sensitive files like ~/.ssh

No tools to buy. No pipelines to rebuild. Just small changes that help.

Hacker News post: https://t.co/oINpp9axR5
Config: https://t.co/X4aaQPrBNu

[Florian Roth ⚡️ @cyb3rops]

MongoBleed (CVE-2025-14847) is basically Heartbleed for MongoDB

- unauthenticated memory disclosure
- public POC, trivial to exploit
- leaks creds, tokens, cloud keys straight from RAM
- huge exposed surface on the internet

Good writeups and technical details here:
https://t.co/LgK4RABmJu
https://t.co/DWtByJQ3au
https://t.co/LUwfnF6uXG

Patch fast, rotate secrets, and assume exposed instances were scanned(!)

[d45id @d45id]

Someone Is Trying to ‘Hack’ People Through #Apple #Podcasts #InfoSec https://t.co/HSunoBd3ie

[Yasho @YShahinzadeh]

public program on BugCrowd, tip: in OAuth, check every "login with" seprately. Google, Apple, etc. each might have different implementaion and flaw, btw I'm going to write a blog post for 0-click, the scenario was interesting, happy hacking

[d45id @d45id]

New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel - Ars Technica https://t.co/uBSRIJbZZF

[DFIR Training @DFIRTraining]

TERABYTES OF FORENSIC TEST IMAGES
HUNDREDS OF CTFs
https://t.co/dsUPfRNMxH #DFIR #CTF

[Hunt.io @Huntio]

🚩 Google Project Zero Details ASLR Bypass on Apple Devices

https://t.co/nDmvcpj806

A researcher from Project Zero has unveiled a clever serialization attack that leaks memory addresses on macOS and iOS, undermining Apple’s ASLR.

The exploit leverages how NSDictionary serialization and re-serialization handles the NSNull singleton and uses hash table bucket placement to infer address bits. No memory corruption or timing side channels are needed.

Apple patched this issue via updates released on March 31, 2025.

#AppleSecurity #ASLR #iOS #macOS #ProjectZero #CyberSecurity

[d45id @d45id]

New #Supermicro #BMC flaws can create persistent #backdoors
[CVE-2025-7937] https://t.co/URQpd65tnp

[d45id @d45id]

#AI-Generated “Workslop” Is Destroying Productivity https://t.co/Ht6Vtdwo8J

[d45id @d45id]

史上最强？揭秘11.5T级超大规模僵尸网络AISURU的内幕 #AISURU #DDoS
https://t.co/3eEWOZysrS

[d45id @d45id]

Shai-Hulud: A Persistent Secret Leaking Campaign #malware #npm https://t.co/tOMvywTrDI

[d45id @d45id]

🚨 Neue Phoenix-Rowhammer-Attacke umgeht DDR5-Schutzmechanismen! Forscher von ETH Zürich & Google flippen Bits in Hynix-Chips, ermöglichen Rechteausweitung in <2 Min. Alle getesteten DDR5-Module anfällig. Mehr:
https://t.co/JsyaQjICq2 #Cybersecurity #Rowhammer #DDR5

[0xor0ne @0xor0ne]

DefCon Finals Challenge solved with LLMs

https://t.co/CukMcY6Jb4

Credits @cl4sm

#infosec

[d45id @d45id]

Memory Integrity Enforcement (#MIE) von Apple schützt iPhone 17 & iPhone Air durch Apple-Silicon-Hardware, sichere Allocatoren & EMTE vor Speicherangriffen – ohne Performance-Einbußen. Ein Meilenstein für Speichersicherheit! https://t.co/e00h97HnLB