Reflective loading of an unsigned Windows driver. This may be useful for red teaming and game cheating, but also to reclaim ownership of your computering device. Yay, you don't need a cloud services account to do it!
Quarkslab@quarkslab.bsky.social · 11mo agoFinding a buggy driver is one thing, abusing it is another🧠 In his latest blog post, Luis Casvella shows you how BYOVD can be used as a Reflective Rootkit Loader ! 🚀 ➡️ blog.quarkslab.com/exploiting-l...
BYOVD is a well-known technique commonly used by threat actors to kill EDR 🔪 However, with the right primitives, you can do much more. Find out how Luis Casvella found and exploited 4 vulns (CVE-2025-8061) in a signed Lenovo driver. 👇 blog.quarkslab.com/exploiting-l...
Reverse engineering of the patch for a (remote?) code execution vuln recently fixed by Apple, allegedly used in attacks ITW. They "improved bounds checking" at an infinite rate, from 0 to actually checking. This is the kind of simple bug that a fuzzer would catch so it is puzzling that it wasn't.
Quarkslab@quarkslab.bsky.social · 12mo agoThe two bytes that make size matter: Reverse engineering Apple's iOS 0-click CVE-2025-43300 improved bounds checking fix, by Madimodi Diawara blog.quarkslab.com/patch-analys...
What kind of advise is "We don't know what is going on, disable your VPN server" ? Also a 0day is not "a security bug that was discovered and exploited before the vendor could patch the issue". 0day is a vuln that is not publicly known. A known vuln that the vendor did not care to patch isn't 0day.
Zack Whittaker@zackwhittaker.com · last yr.New: SonicWall is urging customers to disable SSLVPN as researchers report ransomware attacks targeting SonicWall firewalls. Particularly problematic for big companies that rely on these devices. Arctic Wolf and Huntress say it's likely a zero-day under attack but SonicWall is still investigating.
30+ years in cybersecurity and I still see these vendor-supported private 0day sharing clubs. Vendors that tilt the patch and later demand fair play. We have not learned anything from MAPP have we?
Kim Zetter@kimzetter.bsky.social · last yr."some vendors...ship...their new phones to Cellebrite 3 months before they’re released, giving Cellebrite...a head start in cracking the devices. It’s a practice that dates back to the company’s original business, selling gear to...carriers that helped their customers migrate contacts" to new phones
😍Un equipo de la UBA se ubicó entre los 5 mejores (de más de 100) en el mundial de “satélites enlatados”👇en la final del proyecto CanSat, organizado por la Universidad Nacional de México, con un satélite del tamaño de una lata que ellos mismos diseñaron y fabricaron 👇
"(...) esa línea de crédito es extorsiva, y mientras la mantengan siempre China va a poder extorsionar" En cambio, el crédito que el FMI por recomendación de los Estados Unidos le otorga a la Argentina... ¡Caramba! ¡qué coincidencia!
Estados Unidos en el rol del novio violento y golpeador recomendándole a la novia liberarse de las amigas que la bancan cada vez que la faja www.infobae.com/economia/202...
La recomendación a Milei de un funcionario de Trump: “Mientras tenga el swap con China, Argentina no será libre”
Mauricio Claver-Carone, enviado especial de Estado Unidos para América Latina, fue entrevistado en exclusiva por Infobae
infobae.com
This is *significantly* better than Johnny Mnemonic and yet much less known. Recommended!
C. Robert Cargill@crobertcargill.bsky.social · last yr.🚨HOLY SHIT! THIS IS NOT A DRILL!🚨 STRANGE DAYS is streaming on Criterion Channel as part of their 3 By Bigalow collection. This movie is ALMOST NEVER available and slaps so hard it'll hurt your mama. A must see for any Sci-fi/Cyberpunk/Neo-Noir fan. Such a great fucking movie. LET'S FUCKING GOOOO!
OJO con esta nota. El fondo fiduciario eliminado NO es el FONCYT, que no es un fondo fiduciario. El eliminado es el FONDOTEC, creado por la Ley N° 23.877, de 1990. El FONCYT se creó en 1996 con la @agenciaidiar www.pagina12.com.ar/823318-motos...
Motosierra sin fin: el Gobierno eliminó definitivamente el FISU y el Fondo Fiduciario para la Promoción Científica | Luego de subejecutarlos
En una nueva muestra de su desprecio por las políticas públicas, el Gobierno de Javier Milei eliminó dos fondos fiduciarios clave: uno destinado a la ciencia y tecnología, y otro a la vivienda. Esta d...
pagina12.com.ar
Strange times: CISA employees this morning received a "workforce accountability survey" email requiring them to say whether they were on-site, teleworking, on leave, on travel, or no longer employed at CISA. Then a few hours later, they got another email saying "no response is needed."
There is a small bug in the signature verification of OTA packages in the Android Open Source Framework. Official builds doing normal double verification of packages are not vulnerable but OEMs and third party apps may be. Jérémy Jourdois explains it here: blog.quarkslab.com/aosp_ota_sig...
A small bug in the signature verification of AOSP OTA packages
A signature verification bypass in a function that verifies the integrity of ZIP archives in the AOSP framework
blog.quarkslab.com
PARA PARA PARA VOS ME ESTAS DICIENDO DE QUE PATRISSIA BULLREICH ES UNA ZURDA?
beware of how this plays out.. as in "we cannot do it unless a backdoor is installed..." etc
The Associated Press@apnews.com · last yr.BREAKING: A federal judge says he will order government agencies to preserve Signal messages about a U.S. military strike against Yemen's Houthi rebels.
Agrego que cerraron estaciones d ela línea D durante 3 meses no de sabe para qué carajos. La frecuencia de trenes sigue siendo una mierda, esta llenos todo el tiempo y cada dos por tres se quedan parados varios minutos en los túneles. Solo hicieron boludeces cosméticas
Pope Francis made a brief statement from the hospital balcony:
Saw this on the other site but I should comment here: Can't remember his hacker handle but I think Pad & Gandalf of 8lgm were arrested the same day in 1991. You may not know it but the entire infosec & software industries owe 8lgm immense gratitude for making vendors accountable for their vulns
Excellent Zoolander reference by @wdormann.bsky.social in his video. You know where to find us if you need help @msftsecresponse.bsky.social 🌺 @lutasecurity.bsky.social 🌺
The Register@theregister.com · last yr.Microsoft wouldn't look at a bug report without a video. Researcher maliciously complied
A deep dive into phishing I guess there is a pun in there but child[0|1] have banned dad jokes. sorry
Quarkslab@quarkslab.bsky.social · last yr.From classic HTML pages to advanced MFA bypasses, dive in with @atsika.bsky.social in an exploration of phishing techniques 🎣. Learn some infrastructure tricks and delivery methods to bypass common detection. 👉 blog.quarkslab.com/technical-di... (promise this one is legit 👀)
Hace meses la CoNaIn recomendó al gobierno adelantar el refuerzo de la triple viral para prevenir un brote de sarampión. No lo hicieron. No hay ninguna campaña oficial de difusión. Siguen sumándose casos confirmados de la enfermedad MÁS CONTAGIOSA QUE EXISTE, la mitad de los chicos no está vacunado.
Tesla somehow sold 8,600 new vehicles in a single weekend, just before Canada's federal EV rebate expired. Definitely no funny business going on here! Canadians just love Elon Musk, and all that he stands for! www.ctvnews.ca/video/2025/0...
CTV National News: A suspicious spike in Tesla sales in Canada
There was a suspicious spike in Tesla sales in Canada ahead of the deadline for a federal rebate program for EVs. Adrian Ghobrial investigates.
ctvnews.ca
Today is the 88th anniversary of the birth of one of the most courageous and inspiring women of our era. Happy Birthday Valentina!
At this point, it feels like Altman is hallucinating more than his AI models...
Techmeme@techmeme.com · last yr.Source: OpenAI executives have told some investors about plans for a $2,000/month agent, a $10,000/month agent for coding, and a $20,000/month PhD-level agent (The Information) Main Link | Techmeme Permalink
