Reflective loading of an unsigned Windows driver. This may be useful for red teaming and game cheating, but also to reclaim ownership of your computering device. Yay, you don't need a cloud services account to do it!

BYOVD is a well-known technique commonly used by threat actors to kill EDR 🔪 However, with the right primitives, you can do much more. Find out how Luis Casvella found and exploited 4 vulns (CVE-2025-8061) in a signed Lenovo driver. 👇 blog.quarkslab.com/exploiting-l...

It's not clear who cut the cables or why.

Reverse engineering of the patch for a (remote?) code execution vuln recently fixed by Apple, allegedly used in attacks ITW. They "improved bounds checking" at an infinite rate, from 0 to actually checking. This is the kind of simple bug that a fuzzer would catch so it is puzzling that it wasn't.

What kind of advise is "We don't know what is going on, disable your VPN server" ? Also a 0day is not "a security bug that was discovered and exploited before the vendor could patch the issue". 0day is a vuln that is not publicly known. A known vuln that the vendor did not care to patch isn't 0day.

30+ years in cybersecurity and I still see these vendor-supported private 0day sharing clubs. Vendors that tilt the patch and later demand fair play. We have not learned anything from MAPP have we?

😍Un equipo de la UBA se ubicó entre los 5 mejores (de más de 100) en el mundial de “satélites enlatados”👇en la final del proyecto CanSat, organizado por la Universidad Nacional de México, con un satélite del tamaño de una lata que ellos mismos diseñaron y fabricaron 👇

"(...) esa línea de crédito es extorsiva, y mientras la mantengan siempre China va a poder extorsionar" En cambio, el crédito que el FMI por recomendación de los Estados Unidos le otorga a la Argentina... ¡Caramba! ¡qué coincidencia!

Estados Unidos en el rol del novio violento y golpeador recomendándole a la novia liberarse de las amigas que la bancan cada vez que la faja www.infobae.com/economia/202...

This is *significantly* better than Johnny Mnemonic and yet much less known. Recommended!

OJO con esta nota. El fondo fiduciario eliminado NO es el FONCYT, que no es un fondo fiduciario. El eliminado es el FONDOTEC, creado por la Ley N° 23.877, de 1990. El FONCYT se creó en 1996 con la @agenciaidiar www.pagina12.com.ar/823318-motos...

Strange times: CISA employees this morning received a "workforce accountability survey" email requiring them to say whether they were on-site, teleworking, on leave, on travel, or no longer employed at CISA. Then a few hours later, they got another email saying "no response is needed."

There is a small bug in the signature verification of OTA packages in the Android Open Source Framework. Official builds doing normal double verification of packages are not vulnerable but OEMs and third party apps may be. Jérémy Jourdois explains it here: blog.quarkslab.com/aosp_ota_sig...

PARA PARA PARA VOS ME ESTAS DICIENDO DE QUE PATRISSIA BULLREICH ES UNA ZURDA?

beware of how this plays out.. as in "we cannot do it unless a backdoor is installed..." etc

Agrego que cerraron estaciones d ela línea D durante 3 meses no de sabe para qué carajos. La frecuencia de trenes sigue siendo una mierda, esta llenos todo el tiempo y cada dos por tres se quedan parados varios minutos en los túneles. Solo hicieron boludeces cosméticas

Pope Francis made a brief statement from the hospital balcony:

Saw this on the other site but I should comment here: Can't remember his hacker handle but I think Pad & Gandalf of 8lgm were arrested the same day in 1991. You may not know it but the entire infosec & software industries owe 8lgm immense gratitude for making vendors accountable for their vulns

ZOMG

This is the new diplomacy?

Excellent Zoolander reference by @wdormann.bsky.social in his video. You know where to find us if you need help @msftsecresponse.bsky.social 🌺 @lutasecurity.bsky.social 🌺

But not the swastitrunk?

A deep dive into phishing I guess there is a pun in there but child[0|1] have banned dad jokes. sorry

Hace meses la CoNaIn recomendó al gobierno adelantar el refuerzo de la triple viral para prevenir un brote de sarampión. No lo hicieron. No hay ninguna campaña oficial de difusión. Siguen sumándose casos confirmados de la enfermedad MÁS CONTAGIOSA QUE EXISTE, la mitad de los chicos no está vacunado.

Tesla somehow sold 8,600 new vehicles in a single weekend, just before Canada's federal EV rebate expired. Definitely no funny business going on here! Canadians just love Elon Musk, and all that he stands for! www.ctvnews.ca/video/2025/0...

Today is the 88th anniversary of the birth of one of the most courageous and inspiring women of our era. Happy Birthday Valentina!

At this point, it feels like Altman is hallucinating more than his AI models...

Recórcholis!

😑

Air traffic controllers are required by law to retire at 56. It is a high-stress, high-intensity job that requires intense focus. The retirement rules are there to keep us all safe. This fucking guy has no clue what's he's doing.

"This is the first all-female flight crew since Valentina Tereshkova’s solo spaceflight in 1963" Valentina will be 88 years old in a week. All of New Shepard's 11 minute rides to space put together come remotely close to what she did solo at 26. ❤️ Still inspiring! www.blueorigin.com/es-MX/news/n...

RIP Gene Hackman. The Conversation (1974) is one of the best security movies.

I just found this beautiful thing in a drawer.No current device can match its UX/bloat ratio. Not removing the crude Silk web browser was its only sin. Now I must sneakily find the right cable to charge it without wife0 finding put where I keep the secret cable stash 🤞

Back in the mid 1990s Core Security's 1st gig was a security audit of Argentina's Customs agency. A lottery determined if a container was or wasn't to be inspected by customs agents. We found out the PRNG was seeded with time(NULL) at registration time and thus could predict result of the lottery. 😄

Spinning this way what amounts to plain censorship is pure, unadulterated Hoebbels-style propaganda. We live in dark times.

This is how i responded to @bsky.app:

A Plan to Pwn: Reviving a 17 year old bug or winning a race against Project Management? We've got both. Mathieu Farrell shows you how in the "Pwn Everything, Bounce Everywhere, all at once" blog post series. blog.quarkslab.com/pwn-everythi...

Don't know if you all are aware but back in 2021 Quarkslab worked on an E2E encryption plugin for Mattermost, an open source Slack look-a-like. In my opinion government, corporate users and enterprises should demand that feature in internal chat systems blog.quarkslab.com/mattermost-e...

This is kinda insane. It's very much like a phishing exercise gone wrong www.washingtonpost.com/dc-md-va/202...

it is not an actual chainsaw, it does not work as a chainsaw. That's it. That is the summary of the whole thing.

Where Warlocks Stay Up Late episode 2 interviews Ralph Logan aka sangfroid (aka "Rafael" aka "El Ralfo" to me) Over the past 25+ years we crossed paths several times, yet the interview gave me new insights & views of him I hadn't known Series shaping up nicely so far www.youtube.com/watch?v=O0Cm...

Y la promicionó como un proyecto para invertir en pymes y en la economía Argentina, etc, etc. NO como una memecoin en joda. Osea digamos, es cómplice de la estafa. Si fuera un proyecto de inversión debería existir documentación sobre el plan, para que se usarían los fondos, etc

El autor explica que, como nadie verificaba la circulación de nitrato de amonio, que como dice se puede usar para explosivos, lo sacaron > x.com/fedesturze/s...

Elon Mengele did what??

This a quick analysis of the "0day" recently fixed by Apple, reportedly being used In The Wild to disable Restrictive Mode on locked iPhone, thus opening a wider attack surface for exploitation.

BUT THEY NOT USE SQL YOU MURAN

Yo propongo Pasaje de Trueno

AMD published Security Bulletin AMD-SB-7027 addressing CVE-2024-0179 and CVE-2024-21925, the two UEFI SMM vulnerabilities disclosed in our blog post. Data center, desktop, mobile and embedded processors products are affected: www.amd.com/en/resources...