Tosh

In math we trust.

[quarkslab @quarkslab]

Quarkslab engineers @RobinDavid1, @MihailKirov1 and Kaname just completed the first public security audit of Bitcoin Core, led by @OSTIFofficial and funded by @bitcoinbrink. Details on the blog post: https://t.co/xPkDEV7LDy Congrats to developers for such software masterpiece !

[Synacktiv @Synacktiv]

In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b took a long journey down a rabbit hole to understand its root cause.
https://t.co/q03QTtw373

[Synacktiv @Synacktiv]

Right before #Pwn2Own Ireland 2024, @Creased_ found a vulnerability in Synology TC500 & BC500 security cameras. A blind format string exploit allowed code execution, but Synology patched it, securing the devices in time for the competition.
https://t.co/Q9O781ACDH

[Traceix @usetraceix]

Firefox was hit with a 9.8 CVE.

This CVE is a UAF in Animation timelines. This is a CSS trait that specifies the progress of a CSS animation.

More info👇

[Centre Inria de Paris @inria_paris]

[#Média 🎙] (Ré)écoutez l’émission @ScienceCQFD spéciale #cryptographie avec Anne Canteaut. Retrouvez aussi, dans le reportage de @CelineLoozen, l’intervention de María Naya-Plasencia, André Chailloux et Nicolas Sendrier (équipe COSMIQ @Inria) 🔐💻 : https://t.co/Bg210X4BHh

[Tosh @define__tosh__]

@f4flo_jerome @_SaxX_ Le problème n'est pas forcément le service d'authentification, mais la potentielle fuite de la base de donnée qui contienderait le condensat du mot de passe.

[Tosh @define__tosh__]

@ech0re @rootme_org Congratz!

[Alexandre Cheron @axcheron]

How we applied advanced fuzzing techniques to cURL | Trail of Bits Blog https://t.co/ezWBn9ieF3

[Alex Plaskett @alexjplaskett]

As requested, a thread about remote kernel exploits! Part 1 - Linux and macOS/iOS.
👇

[Synacktiv @Synacktiv]

Ivanti recently disclosed two 0-days vulnerabilities affecting Connect Secure VPN allowing unauthenticated RCE. Based on recent threat reports, @ektoplasma_ provides in-depth analysis of Rust payloads executed on compromised ICS at post-exploitation stage: https://t.co/7iuwSeZUvG

[laxa @l4x4]

I published an advisory on discovering and chaining multiple vulnerabilities to fully compromise and SELinux context escape on Cisco Unified Communications Manager: https://t.co/iebimWm2i5

[Synacktiv @Synacktiv]

Have you ever wondered what the attack surface of Counter Strike: Global Offensive looks like? Our ninjas @myr463 and @v1csec studied it and found a server to client bug! Read more details about this research in our latest blogpost.
https://t.co/QaoheZbQoi

[sam4k @sam4k1]

been on a bit of a hiatus but wanted to share a post i wrote exploring kernel heap exploitation and the new random kmalloc caches feature in the 6.6 kernel 🤓

https://t.co/VKF89klCqy

[0xor0ne @0xor0ne]

Excellent guide by @dhaval_kapil on glibc heap internals and exploitation techniques

https://t.co/AcZoSSBVqa

#heap #glibc #infosec

[0xor0ne @0xor0ne]

Exploiting a use-after-free vulnerability in the Netfilter subsystem in Linux kernel (CVE-2022–32250)
Excellent blog post by @theori_io

https://t.co/6QkBzGViW5

#Linux #exploit #infosec

[Synacktiv @Synacktiv]

Sometimes simple is best. See how @SidewayRE exploited a 9-year-old Linux kernel bug at #Pwn2Own Vancouver 2023!
https://t.co/epmiEQZcD4

[Pierre Bienaimé @PierreBienaime]

Voici ma solution du challenge sstic 2023 https://t.co/AWLmpWgifo

Merci aux concepteurs, c'était fun !

[vic @v1csec]

Do you want to get started in iOS security research? I am giving an iOS training at @hexacon_fr with another @Synacktiv ninja!

See you there :)

[0xor0ne @0xor0ne]

Analysis of CVE-2023-25136: double-free vulnerability in OpenSSH server 9.1

https://t.co/IYjZq7v7aU
https://t.co/9s7AkNWjbe

#openssh

[Emmanuel Fleury @perr0r]

Two links on Web browsers exploitation.
https://t.co/G4up8I773R
https://t.co/M1WnR2qVA5