Will

generally inactive. follow @chronic instead.

[Ferdous Saljooki @malwarezoo]

Excited to share our research on ChillyHell, a modular macOS backdoor targeting officials in Ukraine. Check out our write-up for more details.
https://t.co/RakC7KEQAU

[Lorenzo Franceschi-Bicchierai @lorenzofb]

NEW: Citizen Lab researchers mapped out the infrastructure of spyware maker Paragon Solutions, and say they were able to identify servers likely used by customers in several countries: Australia, Canada, Cyprus, Denmark, Israel, and Singapore.

[Patrick Wardle @patrickwardle]

Interested in all the new macOS malware of 2024!? 🍎🐛

I've started my annual "The Mac Malware of <Insert Year>" report.

Each day, I'll be adding details of a new (for '24) malware ...including its infection vector, persistence, & capabilities.

Follow:
https://t.co/gWpjkBZ5UT

[The Citizen Lab @citizenlab]

🚨🚨WE URGE EVERYONE TO UPDATE THEIR APPLE DEVICES AS SOON AS POSSIBLE.

We have found an actively exploited #zero #click vulnerability that was used to deliver #NSO group’s #Pegasus #spyware.
https://t.co/BS0ZI4QuIz

[Rootshell @0xrootRE]

Nice talk from Harald Welte @LaF0rge Demystifying eSIM Technology https://t.co/IIsxYh4BD6

[Lorenzo Franceschi-Bicchierai @lorenzofb]

Sometimes spyware makes are really dumb.

Someone who used to work for Quadream, an Israeli surveillance tech maker that recently shut down, left the source code of the web panel of the company's REIGN spyware agent on GitHub.

https://t.co/1mAROGK98V

[Breaking News @BreakingNews]

California regulators take over and shut down Silicon Valley Bank, one of the tech sector's favorite lenders, amid fear of broader fallout. https://t.co/XZW6E27XKX

[Lauritz @_lauritz_]

Ever wanted to obtain an APK from an Android device?

You do not need to install fancy Apps for this, ADB and the following minimal Bash script is sufficient to do so: https://t.co/YOnSeMg4OS

Usage: ./download_apks.sh https://t.co/BFCPfLwL0b

#AppSec #Android #bugbountytips

[Alex Plaskett @alexjplaskett]

Abusing iPhone coprocessors for Privilege Escalation at OBTS @i41nbeer

https://t.co/mfflMoNq4p

There is much more exploitation of co-processors, peripherals or firmware recently on mobile devices. This includes in-the-wild. Ian's talk provided a technical deep-dive of the DCP.

[raptor @0xdea]

Here’s another #vulnerability #research writeup, this time about the #xnu #kernel

// by @pwningsystems

A tale of a simple #Apple kernel bug
https://t.co/J5dEKdVark

[Andy Nguyen @theflow0]

Late christmas present: https://t.co/JBW6tDh6h8

WebKit+Kernel exploit chain for all PS Vita firmwares.

This is a WIP from 3 years ago that I never finished (exploit is fully working, but hasn't been turned into a jailbreak yet).

[Dino A. Dai Zovi @dinodaizovi]

This tailnet lock design and whitepaper by @Tailscale is *really* *really* good:

https://t.co/mfMXRSvYAe

[Zhuowei Zhang @zhuowei]

New blog post: Get root on macOS 13.0.1 with CVE-2022-46689, the macOS Dirty Cow bug
https://t.co/9ZqMOOHk1H

% ./switcharoo /etc/pam.d/su overwrite_file.bin
Testing for 10 seconds...
RO mapping was modified
% su
sh-3.2#

(Demo: https://t.co/UtQiFwJVbV)

[Shane Huntley @ShaneHuntley]

Full details and IOCs on Variston's Heliconia framework in the blog post.

https://t.co/2wfiFBa52d

TAG will continue to focus of exposing and disrupting these commercial surveillance vendors in order to keep users safe online.

[simo @_simo36]

I'm sharing two other iOS kernel vulnerabilities reachable from the default app sandbox that don’t require you to open a UserClient:
https://t.co/a6ZOu8UWKR

[NULLCON @nullcon]

📱#iOS Talk

💡Nikias @pimskeks showcased how a design flaw in MobileDevice.framework iOS / iPadOS etc Dev Tools allowed an attacker in the same network to gain RCE on a target device with a software version prior to #iOS14

🍿Watch here▶️https://t.co/79JSdDdA0i

#NullconGoa2022

[J @Morpheus______]

#macOS/#iOS #Entitlements Database now with Monterey and Ventura entitlements.

https://t.co/03cA36yoFg

With lots of Love (but no Thanks giving) to @Apple

Happy holidays :-)

[Matthew Prince 🌥 @eastdakota]

This is really cool to understand one of the biggest weaknesses of the Internet.