X Cyber Feed

...

[Smukx.E @5mukx]

Reversing Windows Internals (Part 1) - Digging Into Handles, Callbacks & ObjectTypes

https://t.co/zBZ84wqubf

[Panos Gkatziroulis 🦄 @ipurple]

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support. https://t.co/sVDVUjlz9F

[Florian Hansemann @CyberWarship]

''GitHub - DosX-dev/obfus.h: Macro-header for compile-time C obfuscation (tcc, win x86/x64)''

#infosec #pentest #redteam #blueteam
https://t.co/f8i4SGXust

[Threat.Zone | Holistic Malware Analysis Platform @threatzone_]

In recent weeks, our research team’ve identified a sophisticated phishing campaign targeting Türkiye. Threat actors targeted computers running Windows operating systems located in Türkiye and using the Turkish language.

Key takeaway: the malware bypassed every public sandbox and AV aside from https://t.co/33UOuuYlmQ, and also evaded EDR/XDR in real-world incidents. We noted impact across many banks, ISPs, and mid-level organizations.

This case again shows why on-premises sandboxes are essential for critical infrastructure and why real dynamic analysis is crucial for SOC teams.

https://t.co/KfgbdCtc3j

[0xor0ne @0xor0ne]

Linux ELF symbols resolution and obfuscation by @elma_ios

https://t.co/z03eLsVAcV

#infosec #Linux

[Blackstorm Security @blackstormsecbr]

The Guest Who Could: Exploiting LPE in VMWare Tools:

https://t.co/bjldPaZl8a

#hacking #vmware #vmtools #privilege #exploitation #infosec #informationsecurity #cybersecurity

[blackorbird @blackorbird]

CrowdStrike 2025 Threat Hunting Report
https://t.co/xUl7U8PWZE

[Blackstorm Security @blackstormsecbr]

Escaping the Confines of Port 445:

https://t.co/M2DEZlylYf

#cybersecurity #informationsecurity #threatanalysis #windows  #hacking

[Unit 42 @Unit42_Intel]

Novel KimJongRAT stealer variants identified: One implements in Portable Executable (PE) format and the other leverages PowerShell. We compare these variants to previous versions of the malware. https://t.co/j05t6KjkXW

[Smukx.E @5mukx]

Bypassing User-Mode Hooks and Direct Invocation of System Calls for Red Teams

https://t.co/vf33bJznGG

[Dark Web Informer @DarkWebInformer]

🚨CVE-2025-24813: Apache Tomcat potential RCE and/or information disclosure and/or information corruption with partial PUT

ZoomEye Link: https://t.co/vgHvBbjBCg

ZoomEye Dork: app="Apache Tomcat"

Results: 815,431

Advisory: https://t.co/dHQuTQYhB0

PoC: https://t.co/PXYuILuTK4

CVSS: 9.2

[Octoberfest7 @Octoberfest73]

@x86matthew's old "Embedding an EXE within a LNK" research came to mind again and I spent a bit playing with .ZIP instead. I found that you can smuggle extra data inbetween the file data and .ZIP's central directory which won't display + can be extracted with powershell

[Het Mehta @hetmehtaa]

𝗟𝗟𝗠 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀

1. Red Teaming LLM Applications by DeepLearning :-
https://t.co/jtsqHVQBaP

2. Planning red teaming for LLMs by Microsoft :-
https://t.co/8LTuQuTgWz

3. Red teaming LLMs by HuggingFace :-
https://t.co/CyZ6qZ1dMQ

4. LLM Red Teaming by KLU :-
https://t.co/FZ2kYk2fAy

5. Red Teaming LLMs Nihad Hassan :-
https://t.co/Q9x9jOhPOb

🔗Red-Teaming to make LLMs robust and safer :-
https://t.co/nPBD0hxbN0

[Robert Swiecki @robertswiecki]

Fuzzing Windows Defender in the Honggfuzz+IntelPT (hardware) mode

https://t.co/NDmMtergrL

by @buherator

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Chen Le Qi (@cplearns2h4ck) of STARLabs SG combined a UAF and an integer overflow to escalate to SYSTEM on #Windows 11. He earns $30,000 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin

[Devo @d3vo123]

📢New blog post published! "Deep Dive into CVE-2020-17530: Root Cause, Exploitation, and OGNL Injection Chain Building"

https://t.co/U1AQZFh5tB

[Smukx.E @5mukx]

From NTLM relay to Kerberos relay: Everything you need to know

https://t.co/gnnSxD3sob

[HackTricks @hacktricks_live]

AWSPEAS (https://t.co/oQfy7RHFhj) maps what AWS creds can do: reads IAM, simulates calls & brute-forces perms, then flags risks via HackTricksAI.
Essential for Red Team/Pentest ops.

#cloudpeass #AWS #CloudSecurity