Ståle Pettersen
@kozmic.bsky.social
Application Security and Cloud Security
Very interesting write-up blog.talosintelligence.com/salt-typhoon...
Weathering the storm: In the midst of a Typhoon
Cisco Talos has been closely monitoring reports of widespread intrusion activity against several major U.S. telecommunications companies, by a threat actor dubbed Salt Typhoon. This blog highlights ou...
blog.talosintelligence.com
OMG, Orange Tsai released his latest new research 🤯 💣 blog.orange.tw/posts/2025-0...
WorstFit: Unveiling Hidden Transformers in Windows ANSI!
📌 This is a cross-post from DEVCORE. The research was first published at Black Hat Europe 2024. Personally, I would like to thank splitline, the co-author of this research & article, whose help
blog.orange.tw
Old school or call it a classic: Hackers hacking hackers... labs.watchtowr.com/more-governm...
Backdooring Your Backdoors - Another $20 Domain, More Governments
After the excitement of our .MOBI research, we were left twiddling our thumbs. As you may recall, in 2024, we demonstrated the impact of an unregistered domain when we subverted the TLS/SSL CA process...
labs.watchtowr.com
I'm hoping this becomes a success! It is really needed, as consumers have no information about the security of the IoT products they buy today. thehackernews.com/2025/01/fcc-...
FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance
The U.S. Cyber Trust Mark enhances IoT security with NIST standards, QR codes, and accredited testing.
thehackernews.com
New Challenges, New Anti-Patterns "I can tell you that AI is introducing some of the most fascinating – and terrifying – security challenges. Below are a few emerging anti-patterns you need to know about" srajangupta.substack.com/p/security-a...
Security Anti-Patterns in the AI Era
Systemic mistakes masquerading as “practical solutions"
srajangupta.substack.com
My latest blog post is live! Check your Ruby on Rails applications for the use of params[:_json] nastystereo.com/security/rai...
New Feature on AWS GuardDuty Findings: Now available: Amazon GuardDuty Extended Threat Detection automatically detects multi-stage attacks sequences. An attack sequence is a critical severity (via @zoph.me ) gist.github.com/z0ph/960e35f...
MGDA-NEW_FEATURES-2024-12-03-23-22-55.json
GitHub Gist: instantly share code, notes, and snippets.
gist.github.com
Are we allowed to link to X? I feel a bit ashamed to do it… but it’s such a good thread! "Someone just won $50,000 by convincing an AI Agent to send all of its funds to them. " x.com/jarrodwattsd...
x.com
x.com
A Security Threat Model for eBPF Security information and guidance to large enterprises using or looking to adopt eBPF-based tools (PDF) github.com/ebpffoundati...
github.com
Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230 github.com/xairy/lights...
GitHub - xairy/lights-out: Tools for controlling webcam LED on ThinkPad X230
Tools for controlling webcam LED on ThinkPad X230. Contribute to xairy/lights-out development by creating an account on GitHub.
github.com
Nice bypass of CSRF protections that rely on the Content-Type request header being present and then checking the value. "Blob" to the rescue! nastystereo.com/security/cro...
Cross-Site POST Requests Without a Content-Type Header / nastystereo.com
nastystereo.com
I just wrote a new blog post! This is how I (ab)used a jailed file write bug in Tomcat/Spring. Enjoy! Remote Code Execution with Spring Properties :: srcincite.io/blog/2024/11...
Remote Code Execution with Spring Properties
Recently a past student came to me with a very interesting unauthenticated vulnerability in a Spring application that they were having a hard time exploiting...
srcincite.io
Great writeup about how parsers handle file uploads in different ways. Great list of bypasses :) blog.sicuranext.com/breaking-dow...
Breaking Down Multipart Parsers: File upload validation bypass
TL;DR: Basically, all multipart/form-data parsers fail to fully comply with the RFC, and when it comes to validating filenames or content uploaded by users, there are always numerous ways to bypass va...
blog.sicuranext.com
Nice research, including the final punch (exploit) dreyand.rs/code/review/...
What Are My OPTIONS? CyberPanel v2.3.6 pre-auth RCE
Few months ago I was assigned to do a pentest on a target running CyberPanel. It seemed to be installed by default by some VPS providers & it was also sponsored by Freshworks.
dreyand.rs
I put a LLM to attack your LLM, what can possibly go wrong? :) Seems like a nice til actually. github.com/NVIDIA/garak
GitHub - NVIDIA/garak: the LLM vulnerability scanner
the LLM vulnerability scanner. Contribute to NVIDIA/garak development by creating an account on GitHub.
github.com
Interesting write-up of the new forced reboot of inactive iPhones that Apple recently added: naehrdine.blogspot.com/2024/11/reve...
Reverse Engineering iOS 18 Inactivity Reboot
Wireless and firmware hacking, PhD life, Technology
naehrdine.blogspot.com
So many new bluebird alternatives... Got the be on all of them, in case one of them actually managed to take over :)
