CERT-In's new "Blueprint for Reducing Exposure and Defending against AI-Assisted Vulnerabilities Exploitation" is worth a careful read.
Not just another advisory ... this is a practical operational playbook...
SOVA by @SecureNexus caught a coordinated npm typosquatting campaign in under 3 hours — two completely different attack vectors (postinstall dropper + hidden C2 beacon) from the same publisher using maintainer correlation + multi-layer static + AI analysis.
punishment for r*ping a child around the
world:
China - Death Penalty
Saudi - Public Beheading
Venezuela - Imprisonment
Iran - Death Penalty
USA - Presidency
The xz package, starting from version 5.6.0 to 5.6.1, was found to contain a backdoor. The impact of this vulnerability affected Kali between March 26th to March 29th. If you updated your Kali installation on or after March 26th, it is crucial to apply the latest updates today.
We can sense excitement amongst you all for the most loved Hardware Hacking Village.
From soldering, drone hacking, firmware hacking, pcb, flipper zero, lock picking, 3d printing, ham radio station : You name it, we have it at #Seasides2023#seasides#infosec
We r utterly overwhelmed with boundless gratitude for the incredibly generous sponsorship from https://t.co/EXUYGS1BUl (x-Biz Techventures Private Limited company)
Words simply cannot express the sheer joy and excitement we feel as we extend our heartfelt thanks to @beingsecure
More car hacking!
Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.
Here's how we found it, and how it works:
~Free STUFF~
We still have 10 unclaimed copies of "Hacking API" book.
So if you want to win one of those, simply Like & RT.
This month we give away 50 books, 5 Burp & 5 Pentester Academy licenses.
Follow @traceableai and @InonShkedy for more giveaways 🥳🥳
The @NahamSec Hacking APIs book giveaway!
Giving out 10 signed print copies and I'll ship them anywhere 🌎🌍🌏
One entry per:
♥️ Like 🔁 RT
Ends in 48 hours!
Don't want to wait? Pick up a copy over @nostarch.
https://t.co/dvGw3JaB8X