klez

Adversary Simulation @SpecterOps - Opinions are my own

[klez @KlezVirus]

[RELEASE] Better late than never! Part 3 is out! Fantastic unwind information and where to find them. We went digging through .pdata, RTF Lookups, and a few ntdll internals that probably weren't meant to be touched. BYOUD dropping alongside. Enjoy 😉

https://t.co/gQ6lRFctO7

[Shegun 🌪️🌟 @ShegunTweets]

this is a beautifully crafted film with outstanding performances that leaves you feeling this good without ever making you feel manipulated. a rare treat indeed. highly recommended

[Ido Veltzman @Idov31]

I had a lot of fun giving a talk at @nullcon and now I can finally release ARM64 support for my Linux bootkit framework - Silverseal, making it the first public ARM64 UEFI bootkit targeting Linux distros, to the best of my knowledge. https://t.co/AJVhQLUnma 1/3

[Ido Veltzman @Idov31]

I started digging into Win32k callbacks while looking for a PatchGuard bypass. That lead went nowhere, but it raised a better question: how does the Windows kernel choose the callback for session-specific GUI work? https://t.co/vQTOPKNjDT 1/3

[kmkz @kmkz_security]

Back from @MCTTP_Con where I talked about real-world banking fraud:
Citrix escape (like 10 years ago ^^), exposed payment keys, LPE through the SOC’s own tooling and a modified payment that made it through to bank execution 💰💸

I also dug into approval gaps and where VoP could fall short, with #TTPs and detection ideas throughout.

Thanks to everyone who joined the talk and the discussions afterwards + to the organisers for having me and sorting out Saturday at #Oktoberfest 🍻

... and for the kicker table / pool ( yep, I suck at it XD ) cc @KlezVirus @ShitSecure @IndiShell1046

[Oren Yomtov @orenyomtov]

We escaped OpenAI's Codex sandbox by dumping V8's shared JavaScript heap and scanning it for the privileged UUID-shaped token belonging to the adjacent trusted V8 context.

I sometimes see cybersecurity as a never-ending cycle of building trust boundaries and finding ways to break them. This is the story of one interesting break.

When OpenAI built this default-enabled MCP server, they ran a trusted, privileged JS context alongside an untrusted one, in the same Node.js process.

They assumed V8's VM contexts could serve as a security boundary, because they do create isolated execution environments, each with its own distinct global object and scope.

But they forgot that these contexts share a single memory heap. So our untrusted code snapshotted that heap, pulled the token out of it, and used it to reach the privileged side.

Read the full technical breakdown at:
https://t.co/hEWKXJJ7a8

[klez @KlezVirus]

[TALK] Tomorrow, Fabian and I will be presenting some of our latest research on device emulation and exploitation on Windows.

Come say hi if you’re around!

https://t.co/9JnyTKl9w0

[vx-underground @vxunderground]

For several months now I've been slowly, but surely, working behind the scenes to dramatically enhance vx-underground.

I still don't have a definitive timeline, but I would like to share some stuff coming.

1. All source code will be moved from GitHub to vx-underground. The new vx-underground will have functionality to search through code bases by keywords for research, filter by language type, yada yada yada.

2. Enhanced malware paper searching. It'll be easier to search for stuff now.

3. API access to verified individuals. This is designed for researchers, or organizations, who may want the ability to perform large downloads programmatically.

4. Paid tier. vx-underground will remain free for everyone. However, if you're an organization which makes more than $1,000,000/year you will have to pay for some functionality (malware sample API downloads). I will not charge thousands of dollars, I'm not greedy, but some of you large companies are jerks and need to pay up for scraping the site for AI and samples. API access will be free for individual researchers, small businesses, students, non-profits, and government institutions. Unfortunately, I've learned the hard way large for-profit organizations will not donate.

5. I've heard your complaints for YEARS. We are looking for a HTML-only vx-underground implementation, probably as a subdomain or something. I'm well aware you hardcore nerds hate JavaScript. I will continue investigating this.

6. We're working on our 4th book, Black Mass Volume IV.

I have more to announce, but some details are still up in the air. These changes likely won't appear until ... I don't know, bro. I've got a full time job and a family. I'm thinking probably late 2026, early 2027.

Thank you to our donors and sponsors that make this possible. I'm not as speedy as I used to be with updates, but I'm still cooking.

Cheers
-smelly

[Ido Veltzman @Idov31]

I'm thrilled to make Silverseal public!. It is among the first publicly available UEFI bootkit research frameworks for Linux-based systems to demonstrate an end-to-end path from GRUB to a running Rust kernel-module rootkit: https://t.co/AJVhQLUVbI 1/3

[hasherezade @hasherezade]

Totally agree, that's why I am planning to do this year's #FlareOn without using AI (unless there is a task where it's specifically required). The competitive side of the challenge may be dead, but we still can choose to have fun. Just like existence of a mountain lift doesn't have to kill the pleasure of climbing.

[NIK @ns123abc]

>sam altman: "we tried this because there were rumor on the internet"
>rumor: math professor close to solving navier-stokes
>the professor: using codex for a year
>openai: has all his logs
>checked every codex session tagged to N-S
>found the most promising one
>spun up 10,000 agents to finish the proof where he couldn't
>they got caught
>told the guy if you say anything you'll destroy your own career
>he ruins his career over this
>openai: "we did not see his work"
>also openai: "we cannot rule out that de-identified data from their usage helped improve our models"

they stole it lmao

[hasherezade @hasherezade]

Time to time I see #malware unpacking tutorials using #PEsieve and *incorrectly* stating that it doesn't rebuild import table and you need to use external tools to do so. In fact it is just a matter of a commandline argument: /imp - documented on Wiki: https://t.co/UOGHaNitQu

[CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_]

Weekend project: I added IAKerb support to Rubeus. My god, this is going to open the floodgates.

Phase 2 of Microsoft's NTLM deprecation is targeted for H2 2026. IAKerb ships for Server 2025 / Win11 24H2 and is already on by default in the June Canary preview. It proxies Kerberos auth through exposed services via SSPI when a client can't directly reach a KDC.

Which means anonymous user enum via AP-REQs with no preauth (zero telemetry), kerberoasting over the open internet, Entra lateral movement through AZUREADSSO tickets and more. All against public facing services.

Blog post soon with potential abuse vectors.

[VollRagm @vollragm]

About a year ago I built GhostDebug, an x64 VEH-based Windows debugger designed to bypass common debugger-detection checks by avoiding the normal Win32 debugging APIs.
Check it out here:

Blogpost: https://t.co/bGJbUiaytm
GitHub: https://t.co/chqtsGZZIm

[📔 Michael Grafnetter @MGrafnetter]

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector.
Whitepaper: https://t.co/bp5sriMB5z

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: Journalists hid an Airtag in a rare book shipment and confirmed Amazon to be one of the buyers behind the bulk orders destroying rare-books to feed their AI.

They tracked it to Amazon's LAS8 warehouse in Las Vegas, home to VGT3 (see logo below), a scanning operation feeding Amazon's AI training data, where workers say they cut the bindings off books to scan them faster.

Amazon won't say why the books are destroyed.

[klez @KlezVirus]

That’s what surviving a course with Dirk-Jan looks like! An absolutely fantastic instructor teaching some obscure Microsoft Entra ID black magic. Had an absolute blast! 🔥
(And also half an heart attack to survive the jetlag)

[Ido Veltzman @Idov31]

ETW is one of the richest telemetry sources on Windows, and one of the easiest to get lost in. This is why I made a video that follows that path - from ETW internals to a practical workflow with EtwSuite. 1/2
https://t.co/kx8m50mUvH

[Adam Chester 🏴‍☠️ @_xpn_]

The slides from my Blackhat USA 2026 presentation "Beam Me Up Luke: A Review of Teleport Attack Scenarios" are now available #BHUSA https://t.co/Kf7Ks9cFPc

[Octoberfest7 @Octoberfest73]

The first major update to my UDRL and Sleepmask Dev course is now live (and free for existing students)! A lot of work and novel research is included in four additional lessons, the details of which can be found in the comments below🙂

Course page: https://t.co/WFcoj2snZY

[SkelSec @SkelSec]

I'm currently in the crunch phase preparing for Defcon and this time BlackHat to showcase the latest feature of OctoPwn, automation workflows for internal pentest! Here is a little video we put together to show how it works, enjoy!

https://t.co/tVNhP3fh8j