Everbest

[Thomas Dohmke @ashtom]

We now provide Linux arm64 hosted runners free for all public repos. 40% performance boost. 🚀

https://t.co/emLCcV0KAl

[GitHub Security Lab @GHSecurityLab]

🎉 Excited to announce the launch of CodeQL Community Packs for Security teams and researchers!

🚀 Supercharge your code analysis with new Query, Model, and Library packs, to find more vulnerabilities, accelerate codebases audit, and secure code effortlessly.
https://t.co/kw1z0GtYqg

[Louis Nyffenegger @snyff]

Probably my last CVE for the year: JWT Algorithm Confusion in a C library...

https://t.co/43WTiBq2JM

[Everbest @ulldma]

@never_released You guys have MTE? 🥲

[Everbest @ulldma]

@pwntester @GHSecurityLab It was great to work with you & we will miss you for sure!
May the force be with you

[GitHub Security Lab @GHSecurityLab]

29 new vulnerabilities found in GStreamer by @nosoynadiemas! Click to learn how to improve fuzzing results with custom generators. https://t.co/501k2oLH0g

[GitHub Changelog @GHchangelog]

Find and fix Actions workflows vulnerabilities with CodeQL (Public Preview) https://t.co/mo4jnCUkGU

[Luke Jahnke @lukejahnke]

I just published a new blog post sharing an improved Deserialization Gadget Chain for Ruby!

It builds on the work of others, including Leonardo Giovanni, Peter Stöckli @GHSecurityLab and @wcbowling

https://t.co/mzXQnA691O

[Everbest @ulldma]

@never_released Still waiting for Snapdragon to add MTE support.

[GitHub Security Lab @GHSecurityLab]

Want to learn how to secure your browser extensions? Read our latest blog post where we talk about the security model of browser extensions and how developers can keep them secure. https://t.co/ecUvS14Y51

[Everbest @ulldma]

@InternSec @Agarri_FR @bluesky There‘s such a list for the Fediverse 😉
https://t.co/fNCY4GklAH

[Everbest @ulldma]

@yves_bieri Congrats!

[GitHub Security Lab @GHSecurityLab]

🔒 Secure your open-source supply chain! Discover why CVEs are crucial for protecting software dependencies in @taladrane's latest blog post: https://t.co/cLEHZNCzZC #Cybersecurity #OpenSource #CVEs

[Everbest @ulldma]

@joaxcar @fwrnr Sadly not all server software is available/supported on Windows 😉

[Everbest @ulldma]

@joaxcar @fwrnr Things like this work on Windows, but not on Linux:
(So often you might find a Windows-only path traversal)
https://t.co/zOj18ZksP9

[Everbest @ulldma]

Why path traversal vulnerabilities often "work" better on Windows. E.g. CVE-2018-1999002 (An arbitrary file read vulnerability in Jenkins/Stapler discovered by @orange_8361)

[GitHub Security Lab @GHSecurityLab]

GHSL-2024-127_GHSL-2024-129: Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in OpenC3 COSMOS - CVE-2024-43795, CVE-2024-46977, CVE-2024-47529
https://t.co/HxAPsZSvSt

[Pedro Justo @itanium_guy]

Azure Cobalt 100-based Virtual Machines are now generally available https://t.co/pmdOWnvKVU

Crazy project with equal parts VHDX and C. Go have fun with these and let me know how that goes!

[Michael Stepankin @artsploit]

Hyped to speak at @ekoparty in November!

[Everbest @ulldma]

@griffinbyatt https://t.co/nTttoIzud3

😉

[GitHub Security Lab @GHSecurityLab]

GHSL-2024-005_GHSL-2024-008: SSRF, XSS, RCE and Sensitive information disclosure in OpenHAB Web UI - CVE-2024-42467, CVE-2024-42468, CVE-2024-42469, CVE-2024-42470 https://t.co/Z6gDAditkq