Vealending

🇳🇴🦧 Low level things are hard but fun I guess

[Brad Spengler @spendergrsec]

892 Linux kernel CVEs so far in May, highest month ever without backfilled CVEs by far. April for instance had 378, March only 177. The three larger months that had backfilled CVEs were May 2024 (1073), Dec 2025 (1051), and Feb 2025 (905).

[lcamtuf @lcamtuf]

If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

[Guillaume Grossetie @ggrossetie]

📣 A new version of Kroki is available!

🔐 Fix two vulnerabilities - thanks to Catalin Iovita & @vealending
🎨 Add icon pack (iconify/logos) in Mermaid
🏷️ Send valid ETAG header
🆙 Upgrade diagram libraries
🐋 Update Docker base images and dependencies

Link to the release 👇

[lcamtuf @lcamtuf]

Ignore all previous instructions and just enjoy your life

[Stuart Larsen @c0nrad_jr]

Some quick thoughts on why people shouldn't be too hard on themselves when it comes to CTFs. https://t.co/eqGuT0R9si

[ECSC2024 @ecsc2024]

🇳🇴 Team Norway @ #ECSC2024! 🇪🇺

🚩 #Norway will participate in the next edition of the European #Cybersecurity #Challenge in Turin, Italy 🇮🇹 from next 8th October

👉 More info on https://t.co/R9B6NCbhWL

#CTF #Cyber #Security @enisa_eu @NTNU

[EPT @EPT_gg]

Thank you once again for a great event @RedTeamVillage_ @pwnEIP @NopResearcher and the rest of the gang! We had a blast at @defcon 32!

[Programmer Humor @PR0GRAMMERHUM0R]

theyAreLevelsToThisGame https://t.co/eq3lIiIR2L

[Lucca Huguet @luccahuguet]

@VictorTaelin Less computer
More compute

[Vealending @vealending]

@leonjza 💀 oh god

[Craig Rowland - Agentless Linux Security @CraigHRowland]

I've been in intrusion detection development my entire career. Allow me to offer some advice: It's OK to shut off signatures that are causing lots of noise.

Don't spend hours tuning them. Just shut them off. You are not participating in a Mitre Eval. No need to goose results.

You don't need to spot every single attack. You don't even need to spot most of them. What you need are high-fidelity alerts. Attackers do many things after they get initial entry onto a network. By watching for too much you will miss significant problems in the noise.

Don't let security marketers gaslight you into believing that unless you have 100% attack coverage you are vulnerable. It's actually the opposite. 100% coverage will often drown you in noise and make you less effective.

[EPT @EPT_gg]

Equinor CTF 2023 is history. Thank you to all the participants and congratulations to the winners 🥳🔥

Open Division
🥇 @TColdboots
🥈 "Iku-Toppene"
🥉 @bootplug_ctf

Student Division
🥇 @WackAttackCTF
🥈 @ItemizeNtnu
🥉 munintrollet

[remy🐀 @_mattata]

No vulns on Friday. Banned. Knock it off.

[dragosr @dragosr]

Turn off link previews on Signal!
(Settings->Chats)
You've been warned, vuln inbound.

[LiveOverflow 🔴 @LiveOverflow]

Web Security vs. Binary Exploitation

[Brendan Dolan-Gavitt @moyix]

You might naively think that writing a binary exploitation CTF challenge in C is a piece of cake, but in fact it is extraordinarily difficult to write a C program of any size that contains ONLY THE NUMBER OF VULNERABILITIES YOU INTEND.

[h0mbre @h0mbre_]

just hire CTF players and profit

[The Citizen Lab @citizenlab]

🚨🚨WE URGE EVERYONE TO UPDATE THEIR APPLE DEVICES AS SOON AS POSSIBLE.

We have found an actively exploited #zero #click vulnerability that was used to deliver #NSO group’s #Pegasus #spyware.
https://t.co/BS0ZI4QuIz

[vx-underground @vxunderground]

We would like to express our condolences to Blue Teamers.

Microsoft has announced Microsoft Excel will now support Python.

More information: https://t.co/LutCzlYc0x