fulco retweeted
Reverse engineering and exploiting embedded devices (Lexmark CX33 and Synology BC500)
(Pwn2Own 2023, @compasssecurity)
P. 1: blog.compass-security.com/20…
P. 2: blog.compass-security.com/20…
P. 3: blog.compass-security.com/20…
P. 4: blog.compass-security.com/20…
P. 5: blog.compass-security.com/20…
#pwn2own
fulco retweeted
Intro to heap exploitation (@Ch0pin)
infosecwriteups.com/the-todd…
infosecwriteups.com/the-todd…
infosecwriteups.com/the-todd…
infosecwriteups.com/use-afte…
infosecwriteups.com/the-todd…
infosecwriteups.com/the-todd…
infosecwriteups.com/the-todd…
infosecwriteups.com/the-todd…
infosecwriteups.com/the-todd…
#heap
fulco retweeted
Huawei Security Hypervisor analysis and reverse engineering by @the_impalabs
Hypervisor analysis: blog.impalabs.com/2212_huawe…
OOB vuln: blog.impalabs.com/2212_advis…
#huawei #infosec
fulco retweeted
🚨URGENT🚨UNCONFIRMED; Allegedly, a Zero-day exploit for iMessage is up for sale. POC video for serious buyers. This user appears to be 'Team9Sandman'.
#DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI #0Day #iOS #iMessage #Exploit
Description
This exploit allows for zero-click remote code execution on iOS devices via the iMessage application. The attacker can execute malicious code on the device without any user interaction by utilizing this exploit.
Exploit Type
Zero-Click RCE
The exploit executes automatically without user interaction when a specially crafted SMS is received through iMessage.
Payload Delivery Method
The payload is delivered as an SMS message, which is automatically processed by the iMessage app upon receipt.
Impact
Successful execution of the exploit grants the attacker full control over the device.
This includes the ability to read messages, access personal data, and install additional malicious software.
Affected Platforms
iOS Version 17.x
fulco retweeted
WEDNESDAY (noun/ ˈwenzdeɪ’)
1. Still not Friday.
📷@KatmaiNPS
fulco retweeted
This is awesome! Incredibly useful for IR and beats my handmade notes 😆
Thank you to the folks that made this guide public 🙏 🙏
Get the PDF directly from here 🔗 cdn-dynmedia-1.microsoft.com…
fulco retweeted
MITRE was compromised
Shout out Charles Clancy for full disclosure and his transparency.
fulco retweeted
Despite the mounting evidence against @ATT, they still deny that this data belongs to them. Many publications and researchers have confirmed this data is real. Some things you can do to stay safe in light of this information being publicly released can be found below. Add your tips to help others!
- Reset passwords related to AT&T and do not use the same password for more than one account. Password managers work very well for this.
- Monitor/Freeze your credit reports with Equifax, Experian, and TransUnion to restrict access for new credit and unfreeze only when needing new types of credit and then immediately refreeze again.
- If you are a victim of identity theft, report it to the FTC, as well as any creditors.
- Use a service for identity theft protection.. there is many out there, choose the one that is best for you.
#ATT #Clearnet #DarkWebInformer #Cyberattack #Cybercrime #Infosec #CTI
🚨BREAKING🚨Allegedly, a threat actor has exposed data from AT&T @ATT. They claim the data shows SSN, DOB, Full Names, Phone, Addresses, Emails, and other info. The amount of records are 73,481,539. #ATT #Clearnet #DarkWebInformer #Cyberattack #Cybercrime #Infosec #CTI
fulco retweeted
No on has server 2012 still right? … right!? 🤣🥲🥹
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
fulco retweeted
Self driving building Janitor.
Cleans all bathrooms in a multistory building…
Unassisted.
fulco retweeted
The 2024 Threat Detection Report is out! Featuring actionable insights for the most prevalent cyber threats and ATT&CK techniques your security team is likely to encounter. Read the full report now: redcanary.com/threat-detecti…
fulco retweeted
William Herschel discovered Uranus #OnThisDay in 1781.
fulco retweeted
Holy Shit!
Someone asked ChatGPT: "How would it conquer over Humans?"
2 ways which ChatGPT showed are INSANE 💀
[🧵 Thread ]:
fulco retweeted
OpenAI + Figure
conversations with humans, on end-to-end neural networks:
→ OpenAI is providing visual reasoning & language understanding
→ Figure's neural networks are delivering fast, low level, dexterous robot actions
(thread below)
fulco retweeted
VCURMS: New Java RATs Unleashed in Sophisticated Phishing Scheme securityonline.info/vcurms-n…
fulco retweeted
Great news, everyone! @redcanary's 2024 Threat Detection Report is officially live! I've read it three times, and it's our best yet. Every section is worth your time, but I'm going to post my personal highlights in the thread. redcanary.com/threat-detecti…
fulco retweeted
General #InfoSec Community Poll on #WorkFromHome Status. Please RT for more coverage and better results 🔁
📊 Which Infosec Worker Type are you?
54%Fully Remote Worker
36%Hybrid Remote+Office Work
10%Full-Time Office Worker
523 votes • Final results
































