Top Tweets for #libwebp

over 1 year ago

What is Data Compression and What Role Did it Play in the NSO Group's Android zero-day/zero-click Attack? #compression #libwebp #cybersecurity #mobile #cyberwarrior #NSOGROUP https://t.co/2wEGA8WlSK

0

5

1

3K

SOCRadar®

@socradar

over 2 years ago

📆Today is the anniversary of the first classical paper on #bufferoverflow exploits, dated 1995. On this occasion, let's reflect on the significance of buffer overflows in #cybersecurity, particularly in light of the recent #libwebp #vulnerability. 🔗https://t.co/HVYJ0JQjhI

socradar's tweet photo. 📆Today is the anniversary of the first classical paper on #bufferoverflow exploits, dated 1995. On this occasion, let's reflect on the significance of buffer overflows in #cybersecurity, particularly in light of the recent #libwebp #vulnerability.

🔗https://t.co/HVYJ0JQjhI https://t.co/Wvj2rYatSY

0

2

0

231

almost 3 years ago

The libwebp Vulnerability (zero-click and zero-day) This vulnerability affects nearly every mobile device and browser including ToR and Telegram! #libwebp #androidhacking #CyberSecurity https://t.co/Duco1XASR0

three_cube's tweet photo. The libwebp Vulnerability (zero-click and zero-day) This vulnerability affects nearly every mobile device and browser including ToR and Telegram! #libwebp #androidhacking #CyberSecurity

https://t.co/Duco1XASR0 https://t.co/Gb6kSSDpCN

2

28

8

4

7K

almost 3 years ago

The libwebp Vulnerability (zero-click and zero-day) This vulnerability affects nearly every mobile device and browser including ToR and Telegram! #libwebp #androidhacking #CyberSecurity https://t.co/Duco1XASR0

1

25

5

9

7K

almost 3 years ago

The libwebp vulnerability is a zero-click, zero-day. It affects nearly all mobile devices and nearly all browsers. It is also part of the notorious Pegasus malware from NSO group. To learn more, join our Android Hacking training October 17-19 #libwebp #zeroclick #cybersecurity

2

36

14

9

11K

☿ Meridiana 💙 @LapisDemon

almost 3 years ago

The libwebp vulnerability is a zero-click, zero-day. It affects nearly all mobile devices and nearly all browsers. It is also part of the notorious Pegasus malware from NSO group. To learn more, join our Android Hacking training October 17-19 #libwebp #zeroclick #cybersecurity

0

32

10

11

8K

edspiner 🇺🇦 @edspiner

almost 3 years ago

my guess is that #CVE20234863 #libwebp also affects #apache mod pagespeed and #nginx pagespeed which covers a large number of assets #infosec

edspiner's tweet photo. my guess is that #CVE20234863 #libwebp also affects #apache mod pagespeed and #nginx pagespeed which covers a large number of assets #infosec https://t.co/05TVvrsAWl

0

2

0

348

almost 3 years ago

Am mostly offline, Idk if all know? High-risk #libwebp vulnerability Update *not only* chromium-based apps[Steam/Discord..]+browsers[Chrome/Edge/Opera/Brave..] Firefox Telegram/1Password/Thunderbird/Gimp Idk atm if all patched https://t.co/e9oeREyGT5 https://t.co/5bpfNRx9jB.

LapisDemon's tweet photo. Am mostly offline, Idk if all know?

High-risk #libwebp vulnerability

Update *not only* chromium-based apps[Steam/Discord..]+browsers[Chrome/Edge/Opera/Brave..]

Firefox
Telegram/1Password/Thunderbird/Gimp
Idk atm if all patched

https://t.co/e9oeREyGT5

https://t.co/5bpfNRx9jB. https://t.co/gb7kbudnrL

0

10

3

0

1K

almost 3 years ago

I hope this thread helped clear some of the mess around the current state of the #libwebp vulnerability. (12/12)

1

13

0

2K

almost 3 years ago

To conclude, due to all the changes and possible unreliable scan results, opt to simply identify occurrences of #libwebp in your environment and update the affected applications. If you are relying on vulnerability scanners, use CVE-2023-4863 to track the #libwebp vulnerability.

3

17

3

1

3K

almost 3 years ago

At the same time, @benhawkes has conducted a much more in-depth analysis, reaching the same conclusion that both CVEs probably stem from the same underlying issue in #libwebp 👇 https://t.co/5LKQjKfcSu (7/12)

1

19

2

1

3K

almost 3 years ago

In practice, while exploitation isn't trivial, it's theoretically possible in any image processing context including server-side, making the scope of the vulnerability much wider than initially assumed (#libwebp is a dependency for many commonly used applications). (5/12)

pyotam2's tweet photo. In practice, while exploitation isn't trivial, it's theoretically possible in any image processing context including server-side, making the scope of the vulnerability much wider than initially assumed (#libwebp is a dependency for many commonly used applications).
(5/12) https://t.co/a53Kbi8hCY

1

15

4

5

7K

almost 3 years ago

At this point, it was wrongly assigned strictly to Google Chrome instead of the underlying #libwebp library, making it practically 𝐢𝐧𝐯𝐢𝐬𝐢𝐛𝐥𝐞 𝐭𝐨 𝐦𝐨𝐬𝐭 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐬𝐜𝐚𝐧𝐧𝐞𝐫𝐬 in anything other than Google Chrome. https://t.co/GJPUxgsCxS (3/12)

1

7

0

4K