Keerthi

Cyber Security Enthusiast

[Joseph Cox @josephfcox]

New from 404 Media: inside a global phone spy tool that takes data from ads inside normal apps to monitor billions. Company removed videos while I was asking questions; we archived in the article. Google has now cut-off a connected company in response.

https://t.co/9CvHyQ2mul

[Matthew Green @matthew_d_green]

I did not know, but I guess I did imagine, that car manufacturers were intercepting and sharing text messages with law enforcement. Seems like a pretty terrible idea, unless there’s more to this story. https://t.co/HwzjYZijH9

[Ian Beer @i41nbeer]

Earlier this year @AmnestyTech and @_clem1 from Google TAG found an in-the-wild iPhone zero day full chain. Today I’m publishing my analysis of the Safari sandbox escape component, the first in-the-wild sample to break into the new Safari GPU process.

[Maddie Stone @maddiestone]

.@_clem1 discovered another ITW 0-day in use by a commercial surveillance vendor: CVE-2023-5217. Thank you to Chrome for releasing a patch in TWO 🤯day!!

https://t.co/QhzJonwLXi

[Maddie Stone @maddiestone]

Who needs a 0-click when you have MITM? ✨ Working with @billmarczak & @citizenlab we discovered 3 iOS and 1 Chrome 0-day from Intellexa, used to install Predator spyware in Egypt 🇪🇬

https://t.co/5KF5v4xEnr

[Omer Benjakob @omerbenj]

🚨SCOOP: My new @Haaretzcom investigation reveals new Israeli cyber companies developed technology that exploits the heart of the online economy - ads - not just for mass surveillance, but also to hack phones 👇

https://t.co/TPfBO1SZHP

[Sí, soy yo @nuria_imeq]

Mashing Enter to bypass full disk encryption with TPM, Clevis, dracut and systemd https://t.co/YV7IIzzVxS

[Joseph Cox @josephfcox]

New—hackers have access to a powerful chain of data that lets them dox nearly anyone in US for $15. With credit cards your address goes to the credit bureaus. That is then sold to companies, and the hackers tap into that. Targets include Musk, Rogan, Biden https://t.co/ljCCCj3fWb

[BleepingComputer @BleepinComputer]

Thousands of Android APKs use compression trick to thwart analysis - @billtoulas
https://t.co/GkIk797MSd

[quarkslab @quarkslab]

Need to access those precious encrypted kitten pics but you can't unlock your phone ? Don't worry, in this blog post @max_r_b and @DamianoMelotti will take you in a journey to the depths of #Android's file-based encryption so you know what to do.

https://t.co/acROY5cEGq

[Georgy Kucherin @kucher1n]

Our next blogpost on #iOSTriangulation (https://t.co/OnjtckIn5i) is finally out. Today we are ready to share details about the final payload used in the attack, which is a #spyware implant that we dubbed #TriangleDB @bzvr_ @2igosha [1/3]

[Srikanth.CashlessConsumer | ஸ்‌ரீகாந்த் @logic]

💣💣 The inevitable has happened. #CoWINDataLeak reported by @thefourthlive @ManoramaDaily is a largest #DigitalPublicInfrastructure disaster.

Thread on some impacts.

[Wolfie Christl @WolfieChristl]

A while back, I stumbled upon a file I consider the largest piece of evidence revealing how hundreds of data brokers trade personal data on everyone, including very sensitive data, globally.

Massive investigation by @themarkup and German @netzpolitik_org:
https://t.co/uJ7MpmIJ69

[Sibin @sibinmohan]

India seems to be the new destination for “Hacking for hire” operatives. A lack of ethics and legal action allows these people to operate freely. I’m sure a lot of them are even hand in glove with the government.

https://t.co/sOVjqSguB9

[Andy Greenberg (@agreenberg at the other places) @a_greenberg]

Hundreds of models of Gigabyte motherboards, used in gaming and other high-performance computers, have a backdoor in their firmware that invisibly downloads code to the machine at startup—and does so insecurely, leaving the feature open to abuse. https://t.co/pHNj6GN1ue

[Markus Vervier @marver]

The recording of my @offensive_con talk about eSIM is online: Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology
https://t.co/CMtchgCfvn
#OffensiveCon23

[@mikko @mikko]

In which we describe one of our incident response engagements where five different actors were observed exploiting the same victim for completely different purposes. https://t.co/QuyofhLvOq

[mgeeky | Mariusz Banach @mariuszbit]

☢️MSI leaked code signing certificate already abused by Threat Actors (expires in 2024).

I've collected 9 recently leaked certificates to cover up in upcoming Modern Initial Access training sessions🔥

https://t.co/vhHKWITJaC

👾 Already weaponised in Red Macros Factory 1.8!

[0xor0ne @0xor0ne]

Nice intro for beginners to bluetooth communications reverse engineering (Domyos EL500)

Credits @Palantir555

https://t.co/SI2G5epseL

#bluetooth

[0xor0ne @0xor0ne]

A couple of nice blog posts for learning about Linux process injection
(specifically sshd injection for credential harvesting)

@_xpn_: https://t.co/1eIYm48xIO
@jm33_m0: https://t.co/VQrBwL4b28

#sshd #processinjection #redteam #infosec #cybersecurity #Linux