yinhong

[Matt Miller @epakskape]

Fellow data nerds: here's a snapshot of the vulnerability root cause trends for Microsoft Remote Code Execution (RCE) CVEs, 2006 through 2017.

A few callouts: heap corruption, type confusion, and uninit increased in 2017. Use after free steady y/y but proportionally declined.

[Tal Liberman @Tal_Liberman]

Meet the Windows 7 Meltdown patch from January. It stopped Meltdown but opened up a vulnerability way worse ... It allowed any process to read the complete memory contents at gigabytes per second, oh - it was possible to write to arbitrary memory as well.
https://t.co/6zLmscD0vw

[Dan Guido @dguido]

So this https://t.co/vYktqat10K business... CTS Labs asked us to review their research last week, and sent us a full technical report with PoC exploit code for each set of bugs.

[Don A. Bailey @DonAndrewBailey]

What has @InfoSecMouse been building for the past 5 years?
We're Abusing Blockchain Transparency for Good <3

https://t.co/gQ4wssCOEG

#IoT #Blockchain #Philanthropy #FlintWaterCrisis #Flint

[svbl @svblxyz]

https://t.co/RSOK8SppcM

[thaidn @XorNinja]

hilarious smart contract bug https://t.co/J0vQ76TSOV

[☠ Román Medina-Heigl Hernández @roman_soft]

Smarty critical vuln (php code injection): vendor patched on July'17 (https://t.co/IvMRimVU69), exploited during Imsonihack ctf quals during past weekend (https://t.co/9msEs87vAe) and patched yesterday on Debian (https://t.co/f5l72bNbDy). Coincidence? :-)

[yan @bcrypt]

Severe Electron RCE vulnerability: https://t.co/7gxbgAo0mD. If you use an Electron app on Windows (Slack, Skype, Atom, etc.) update now. If you maintain an Electron app, update to latest Electron.

[Tavis Ormandy @taviso]

All Blizzard games (World of Warcraft, Overwatch, Diablo III, Starcraft II, etc.) were vulnerable to DNS rebinding vulnerability allowing any website to run arbitrary code. 🎮 https://t.co/ssKyxfkuZo

[Sam Stepanyan @securestep9]

Discovered Google gives anyone with Gmail account a FREE #Cloud #Shell with Debian 7 VM/5Gb: https://t.co/Oj9RLaDOoP

[Daniel Gruss @lavados]

@mlqxyz @misc0110 @StefanMangard @yuvalyarom The start of all this was @anders_fogh's blog post: https://t.co/ARFB5zVLNj
He deserves credits on this! #meltdown #intelbug #fuckwit #kaiser #kpti

[Alex Ionescu @aionescu]

This patch literally invents new computer science to work around the side-channel CPU issues. Continuing to be in awe and massive kudos to all the OS vendors who had to probably re-do entire feature roadmaps to handle this work. tl;dr Tokens/Processes now have "Security Domains".

[yinhong @yinhonq]

Wow... Sounds crazy bad... https://t.co/qtsR4nV7p2

[dragosr @dragosr]

windows one liners to download and execute arbitrary code https://t.co/bewTWNvv5E

[Hossein Lotfi @hosselot]

Google Chrome "CPWL_Edit::OnKillFocus()" Use-after-free Vulnerability (CVE-2017-5126):
https://t.co/HvCSTN1xYR

[؜ @xxByte]

open ports without netstat on linux:

declare -a array=($(tail -n +2 /proc/net/tcp | cut -d":" -f"3"|cut -d" " -f"1")) && for port in ${array[@]}; do echo $((0x$port)); done

[Hossein Lotfi @hosselot]

Google Chrome "CFFL_InteractiveFormFiller::OnBeforeKeyStroke" Use-after-free Vulnerability (CVE-2017-5127):
https://t.co/mOd9ruvZGl

[Dan Luu @danluu]

Computer latency: 1977-2017

https://t.co/6ClvBWaWVt

[Darien Huss @darienhuss]

Just published my paper on largely undocumented #LazarusGroup/#DPRK campaigns targeting cryptocurrency individuals/orgs (both big and small). The research covers new implants/tactics not currently covered in the media regarding 'fake jobs' campaigns. https://t.co/mCEYV3mJyA