Urk3L

Security stuffs; other geek stuffs;

[Urk3L @rosako]

Nice move from PT!

[Alex Moshkov @amoshkov]

We launched dbugs. The most complete vuln & researcher database → https://t.co/s1JaABu8s6

I suggest you find yourself in the researchers section and see all your CVEs. Also, see thread 👇

[Alex Moshkov @amoshkov]

🟥 CFP live — Positive Hack Talks, Jakarta 🇮🇩, July 23

→ https://t.co/YiG7MmzMCP

Hackers, defenders, bug hunters, researchers — submit your talk. ✅ Flights & hotel covered.

Our 5th #PHTalks — always hits hard. Free community-driven event. 250+ infosec pros.

[radare @radareorg]

Meanwhile, at @[email protected] track, people are concentrated marking bits
#r2con2024

[Marcel Böhme👨‍🔬 @mboehme_]

Surprising facts about #fuzzing. A thread in slides 👇

[Oliver Chang @halbecaf]

We just created a blog for OSS-Fuzz!

The first post is about extending our LLM fuzz harness generation work to completely new, unfuzzed projects: https://t.co/xX9m33E0sc

[ludwig @ludwigABAP]

>built an entire OS in Rust
>video editor in Zig
>a filesystem in C
>0 care about views, subs
>some vids have <100 views

immensely based

[JP Aumasson @veorq]

Proof review time, we're almost there! 🦜

[offensivecon @offensive_con]

One SMS to Root Them All: Exposing Critical Threats in Millions of Connected Devices by Alexander Kozlov and Sergey Anufrienko is now on!

[zhassulan zhussupov @cocomelonckz]

This wonderful @BSidesPrishtina conference has ended. @dprebreza thank you for the hospitality, atmosphere and help! Speakers you are really cool and great persons! #cybersec #malware #hacking #research #cryptography #windows #ransomware #threatintel #threathunting #cybercrime

[offensivecon @offensive_con]

One SMS to Root Them All: Exposing Critical Threats in Millions of Connected Devices by Alexander Kozlov and Sergey Anufrienko https://t.co/qKU3IcO3g2

[Alex Plaskett @alexjplaskett]

The amount of free training courses available these days for #cybersecurity is wild. People ask me if its worth paying for a specific course? First, have you seen all the free material out there?

Lets dig into a selection! 👇

[Prof. Feynman @ProfFeynman]

If you want to master something, teach it.

[Brendan Dolan-Gavitt @moyix]

I gave Claude 3 the entire source of a small C GIF decoding library I found on GitHub, and asked it to write me a Python function to generate random GIFs that exercised the parser. Its GIF generator got 92% line coverage in the decoder and found 4 memory safety bugs and one hang.

[Securelist @Securelist]

A kids toy, designed for educational needs has vulnerabilities which allow malicious actors to easily make video calls to children using the toy, steal parental account details, and even modify the firmware.

Full details 👇
https://t.co/2kKINgwinL

[Kaspersky @kaspersky]

"𝐈𝐭 𝐢𝐬 𝐭𝐡𝐞 𝐦𝐨𝐬𝐭 𝐜𝐨𝐦𝐩𝐥𝐢𝐜𝐚𝐭𝐞𝐝 𝐚𝐭𝐭𝐚𝐜𝐤 𝐭𝐡𝐚𝐭 𝐜𝐚𝐧 𝐡𝐚𝐩𝐩𝐞𝐧 𝐭𝐨 𝐚 𝐝𝐞𝐯𝐢𝐜𝐞."

In this year's SAS we'll be going into further detail with #iOSTriangulation including how we discovered & much more.

Watch ⇒ https://t.co/afY1rK2sGX #TheSAS2023

[Urk3L @rosako]

#flipperzeronights @flipper_net dope stuff!

[Frida @fridadotre]

Frida 15 is out! 🎉 Release notes coming soon, but in the meantime, for the adventurous: grab a frida-portal binary and start it, then configure frida-gadget with { type: connect }, and finally do `frida-ps -R`. Then check out frida-join in frida-tools v10, also just released 🚀

[Kaspersky Industrial CyberSecurity @KasperskyICS]

Our global Kaspersky ICS team is growing: looking for a Security Researcher ICS CERT

https://t.co/skfu1aZpaG

[PaulCh @__paulch]

At my SAS Online 2020 workshop I will be speaking about current trends of fuzzing since they have changed a lot lately. I’ll also share my ideas on how fuzzing should be approached nowadays and how to move away from “I’ve just launched AFL and found a bug, haha”

[Alisa Esage Шевченко @alisaesage]

Also for informed defense and design of arbitrary virtualization environments