Official account of Predicta Lab. Leveraging intelligence since 2020. Contact us at [email protected] Our articles 馃憠 https://xitter.cf/t.co/qCs1kI49wT
Joined March 2020
- Tweets723
- Following293
- Followers9.1K
- Likes634
Everyone spent last week patching PHP2Shell. Meanwhile a second RCE, just as broad, was sitting in Google's Brotli compression code, used by every language on the internet. 猬囷笍
No in-the-wild exploitation confirmed yet. That makes this the rare giant bug you can patch before the breach stories start. Trail of Bits shipped brotli-checker to find out if your code even touches Brotli.
Where does Brotli hide in your stack, and would you have known before this week?
Follow @PredictaLabOff for more cyber and OSINT news.
A root-trusted certificate authority generated a private key that was literally the number four. Not a metaphor: 4. The fallout is ending its entire TLS business. 猬囷笍
The web's trust model rests on key ceremonies nobody re-checks. DigiNotar died of a hack in 2011; eMudhra leaves after a defect no attacker even needed. If your certs chain through a low-cost CA: inventory, reissue, watch the CT logs.
Audits waved these keys through twice. What would actually have caught them: better tooling, transparency logs, or just more paranoid reviewers?
Follow @PredictaLabOff for more cyber and OSINT news.
A ransomware crew ran its intrusions through commercial AI models and left the chat logs on an open server. 8,257 messages later, we can read exactly how a machine breaks into a company. 猬囷笍
AI has industrialized the execution of intrusions, not the entry point. The way in is still unpatched edge devices and recycled passwords. The basics now buy you time against attackers moving at machine speed.
Where do you draw the line between an AI-assisted pentest and what this crew did?
Follow @PredictaLabOff for more cyber and OSINT news.