⛓️This is a very important industry-wide disclosure since many vendors are affected by the bug in the TPM reference code and specification.
"The attacker can also overwrite protected data in the TPM firmware. This may lead to a crash or arbitrary code execution ..." --@fdfalcon
Amazon recently released a model that outperforms GPT-3.5 by 16% while being 784x smaller.
This was achieved by generating intermediate reasoning steps for prompting demonstrations called chain-of-thought prompting.
Paper: https://t.co/3qobgoj8Fi
Code: https://t.co/QS8glPMQ5c
Adoptée par le @Europarl_FR, la Directive #NIS2 (Network and Information Systems Directive) vient d’être publiée au Journal Officiel. Les États membres disposent de 21 mois pour transposer la directive au sein de leur droit national. Explications. https://t.co/bVVEmMaPf0
detecting EDR services remotely without admin privs.
indicators:
- installed services: [MS-LSAT] LsarLookupNames()
- running processes: named pipes (there are some characteristic to EDRs)
needs some more testing and cleanup before release, but looks like promising.
We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012.
To explain how it worked and how we found it, we have @_specters_ as our mock car thief:
This is interesting research. There is an internet hosted app service that mobile apps talk to that allow the mobile app to do the things the mobile app is allowed to do, like remote start the car. This research points out authentication/authorization issues with this service
We'll present how to emulate basebands next week at @CanSecWest
Together with @Digital_Cold@nSinusR (if the international travel gods allow it)
https://t.co/7U3ah8YKK2
Happy to announce the release of swSIM and swICC by Tomasz Lisowski, two open source repositories to enable SIM card emulation: https://t.co/JI0O1CjfU6, https://t.co/qxfzA8JXjG. Among others, we attached the emulator to a real phone via SIMTrace2 and interact with test networks!
Bypass read-out protection (RDP) of STMicroelectronics STM32F1 series.
Nice write up if you're interested in hacking microcontrollers.
(credits Marc Schink and Johannes Obermaier)
https://t.co/2tlg8vHELR
#stm#hacking#microcontroller#infosec#cybersecurity#iot#embedded
Memory Readout protection bypass on Nordic nRF52840 by @LimitedResults (2020)
Cool writeup series if you are interested in microcontrollers security
Part 1: https://t.co/Q5Ep6wMf3N
Part 2: https://t.co/1F8hYh7aqQ
#embedded#iot#infosec#cybersecurity#nordic
htmLawed #CVE-2022-35914 (used by #GLPI) RCE vulnerability found by @OrangeCyberFR pentester @M4yFly is now massively exploited in the wild. We advise you upgrade ASAP to 9.5.9 or 10.0.3 https://t.co/H6QQmT93br
P1 Security is happy to open-source a new project that aggregates several public sources into consolidated datasets of MCC-MNC, MSISDN prefixes, ISPC and geographic information: https://t.co/jru3TBQHwn