/r/netsec - Information Security News & Discussion
Pwning Pixel 6 with a leftover patch
April 6^th 2023 at 22:00

Pwning Pixel 6 with a leftover patch

By /u/Titokhan

submitted by /u/Titokhan
[link] [comments]

Related tags
- ❌
- r/netsec
April 6^th 2023 at 22:00

/r/netsec - Information Security News & Discussion
Stopping cybercriminals from abusing security tools - Microsoft On the Issues
April 6^th 2023 at 17:59

Stopping cybercriminals from abusing security tools - Microsoft On the Issues

By /u/DH_Prelude

submitted by /u/DH_Prelude
[link] [comments]

Related tags
- ❌
- r/netsec
April 6^th 2023 at 17:59

/r/netsec - Information Security News & Discussion
New Doyensec advisory! CSRF protection bypass discovered in Sveltekit. Ensure your apps are up-to-date.
April 6^th 2023 at 15:58

New Doyensec advisory! CSRF protection bypass discovered in Sveltekit. Ensure your apps are up-to-date.

By /u/ds_at

submitted by /u/ds_at
[link] [comments]

Related tags
- ❌
- r/netsec
April 6^th 2023 at 15:58

/r/netsec - Information Security News & Discussion
7 Questions and Answers about Firmware and Firmware Security
April 6^th 2023 at 13:46

7 Questions and Answers about Firmware and Firmware Security

By /u/attilaszia

submitted by /u/attilaszia
[link] [comments]

Related tags
- ❌
- r/netsec
April 6^th 2023 at 13:46

/r/netsec - Information Security News & Discussion
Technical analysis of the Genesis Market malware and tooling
April 6^th 2023 at 09:00

Technical analysis of the Genesis Market malware and tooling

By /u/xnyhps

submitted by /u/xnyhps
[link] [comments]

Related tags
- ❌
- r/netsec
April 6^th 2023 at 09:00

/r/netsec - Information Security News & Discussion
CyberGhostVPN Linux client vulnerable to MITM, RCE, LPE writeup
April 6^th 2023 at 04:16

CyberGhostVPN Linux client vulnerable to MITM, RCE, LPE writeup

By /u/mmmds

submitted by /u/mmmds
[link] [comments]

Related tags
- ❌
- r/netsec
April 6^th 2023 at 04:16

/r/netsec - Information Security News & Discussion
Announcing Kurl
April 5^th 2023 at 21:56

Announcing Kurl

By /u/gabriel_schneider

submitted by /u/gabriel_schneider
[link] [comments]

Related tags
- ❌
- r/netsec
April 5^th 2023 at 21:56

/r/netsec - Information Security News & Discussion
Operation Cookie Monster took down the cookie marketplace Genesis
April 5^th 2023 at 14:50

Operation Cookie Monster took down the cookie marketplace Genesis

By /u/tysonsw

submitted by /u/tysonsw
[link] [comments]

Related tags
- ❌
- r/netsec
April 5^th 2023 at 14:50

/r/netsec - Information Security News & Discussion
CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability
April 5^th 2023 at 13:11

CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability

By /u/securitinerd

submitted by /u/securitinerd
[link] [comments]

Related tags
- ❌
- r/netsec
April 5^th 2023 at 13:11

/r/netsec - Information Security News & Discussion
The Uninvited Guest: IDORs, Garage Doors, and Stolen Secrets
April 5^th 2023 at 11:35

The Uninvited Guest: IDORs, Garage Doors, and Stolen Secrets

By /u/uniqualykerd

submitted by /u/uniqualykerd
[link] [comments]

Related tags
- ❌
- r/netsec
April 5^th 2023 at 11:35

/r/netsec - Information Security News & Discussion
We put GPT-4 in Semgrep to point out false positives & fix code
April 4^th 2023 at 22:17

We put GPT-4 in Semgrep to point out false positives & fix code

By /u/pabloest

submitted by /u/pabloest
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 22:17

/r/netsec - Information Security News & Discussion
IDLE Abuse: A POC to Abuse: Shellcode execution using RegisterWaitForInputIdle.
April 4^th 2023 at 21:07

IDLE Abuse: A POC to Abuse: Shellcode execution using RegisterWaitForInputIdle.

By /u/navneetmuffin

submitted by /u/navneetmuffin
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 21:07

/r/netsec - Information Security News & Discussion
Post Account Takeover? Account Takeover of Internal Tesla Accounts
April 4^th 2023 at 20:41

Post Account Takeover? Account Takeover of Internal Tesla Accounts

By /u/techdash

submitted by /u/techdash
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 20:41

/r/netsec - Information Security News & Discussion
Remote Code Execution Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack
April 4^th 2023 at 17:56

Remote Code Execution Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack

By /u/roy_6472

submitted by /u/roy_6472
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 17:56

/r/netsec - Information Security News & Discussion
Proxyjacking - How attackers are monetizing internet bandwidth post exploitation
April 4^th 2023 at 13:05

Proxyjacking - How attackers are monetizing internet bandwidth post exploitation

By /u/weseven

submitted by /u/weseven
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 13:05

/r/netsec - Information Security News & Discussion
A fresh look at user enumeration in Microsoft Teams
April 4^th 2023 at 12:42

A fresh look at user enumeration in Microsoft Teams

By /u/doitsukara

submitted by /u/doitsukara
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 12:42

/r/netsec - Information Security News & Discussion
Pentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server · Aura Research Division
April 4^th 2023 at 05:41

Pentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server · Aura Research Division

By /u/Acceptable-Doubt-878

submitted by /u/Acceptable-Doubt-878
[link] [comments]

Related tags
- ❌
- r/netsec
April 4^th 2023 at 05:41

/r/netsec - Information Security News & Discussion
The Bug Bounty Radar - The latest Bug Bounty programs from various platforms
April 3^rd 2023 at 18:03

The Bug Bounty Radar - The latest Bug Bounty programs from various platforms

By /u/SyntifyTech

submitted by /u/SyntifyTech
[link] [comments]

Related tags
- ❌
- r/netsec
April 3^rd 2023 at 18:03

/r/netsec - Information Security News & Discussion
Welcome to the Jungle: Pentesting AWS (slides)
April 2^nd 2023 at 17:50

Welcome to the Jungle: Pentesting AWS (slides)

By /u/ustayready

submitted by /u/ustayready
[link] [comments]

Related tags
- ❌
- r/netsec
April 2^nd 2023 at 17:50

/r/netsec - Information Security News & Discussion
Bypassing Amazon Kids+ Parental Controls
April 3^rd 2023 at 14:21

Bypassing Amazon Kids+ Parental Controls

By /u/n00py

submitted by /u/n00py
[link] [comments]

Related tags
- ❌
- r/netsec
April 3^rd 2023 at 14:21

/r/netsec - Information Security News & Discussion
GTFOArgs: A Curated List Of Binaries For Argument Injection.
April 3^rd 2023 at 14:15

GTFOArgs: A Curated List Of Binaries For Argument Injection.

By /u/MegaManSec2

submitted by /u/MegaManSec2
[link] [comments]

Related tags
- ❌
- r/netsec
April 3^rd 2023 at 14:15

/r/netsec - Information Security News & Discussion
Argument Injection Cheatsheet
April 3^rd 2023 at 13:03

Argument Injection Cheatsheet

By /u/monoimpact

submitted by /u/monoimpact
[link] [comments]

Related tags
- ❌
- r/netsec
April 3^rd 2023 at 13:03

/r/netsec - Information Security News & Discussion
Multiple vulnerabilities in Aten PE8108 power distribution unit - There is no security firmware update, yet.
April 3^rd 2023 at 10:35

Multiple vulnerabilities in Aten PE8108 power distribution unit - There is no security firmware update, yet.

By /u/fr0r

submitted by /u/fr0r
[link] [comments]

Related tags
- ❌
- r/netsec
April 3^rd 2023 at 10:35

/r/netsec - Information Security News & Discussion
Malicious ISO File Leads to Domain Wide Ransomware
April 3^rd 2023 at 01:34

Malicious ISO File Leads to Domain Wide Ransomware

By /u/TheDFIRReport

submitted by /u/TheDFIRReport
[link] [comments]

Related tags
- ❌
- r/netsec
April 3^rd 2023 at 01:34

/r/netsec - Information Security News & Discussion
"Dissecting redis CVE-2023-28425 with chatGPT as assistant" blog post
April 2^nd 2023 at 19:59

"Dissecting redis CVE-2023-28425 with chatGPT as assistant" blog post

By /u/NoPaleontologist7419

submitted by /u/NoPaleontologist7419
[link] [comments]

Related tags
- ❌
- r/netsec
April 2^nd 2023 at 19:59

/r/netsec - Information Security News & Discussion
Developing a Robust Vulnerability Detection Tool for ink!
April 1^st 2023 at 13:42

Developing a Robust Vulnerability Detection Tool for ink!

By /u/kruksym

submitted by /u/kruksym
[link] [comments]

Related tags
- ❌
- r/netsec
April 1^st 2023 at 13:42

/r/netsec - Information Security News & Discussion
"Alexa, what is my wifi password?" by Daniel, a 14 year old developer
April 1^st 2023 at 13:30

"Alexa, what is my wifi password?" by Daniel, a 14 year old developer

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
April 1^st 2023 at 13:30

The Defender's Guide to the 3CX Supply Chain Attack - How it happened, why it matters, and what's being done about it

By /u/SuaveHobo

submitted by /u/SuaveHobo
[link] [comments]

Related tags
- ❌
- r/netsec
April 1^st 2023 at 10:33

/r/netsec - Information Security News & Discussion
Exploiting Hibernate Injection in "Order by" Clause (Oracle database)
April 1^st 2023 at 09:54

Exploiting Hibernate Injection in "Order by" Clause (Oracle database)

By /u/1046ica

submitted by /u/1046ica
[link] [comments]

Related tags
- ❌
- r/netsec
April 1^st 2023 at 09:54

/r/netsec - Information Security News & Discussion
Leveraging LLMs for solving bounty hunting pain points
April 1^st 2023 at 07:27

Leveraging LLMs for solving bounty hunting pain points

By /u/DebugDucky

submitted by /u/DebugDucky
[link] [comments]

Related tags
- ❌
- r/netsec
April 1^st 2023 at 07:27

/r/netsec - Information Security News & Discussion
How to avoid the aCropalypse
April 1^st 2023 at 04:49

How to avoid the aCropalypse

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
April 1^st 2023 at 04:49

/r/netsec - Information Security News & Discussion
boringtools/git-alerts: A Public Git repository & misconfiguration detection tool
March 31^st 2023 at 21:06

boringtools/git-alerts: A Public Git repository & misconfiguration detection tool

By /u/nicksthehacker_

Monitor your GitHub organisation user’s public repository that may leak sensitive information and secrets.

submitted by /u/nicksthehacker_
[link] [comments]

Related tags
- ❌
- r/netsec
March 31^st 2023 at 21:06

/r/netsec - Information Security News & Discussion
A Comparison of Exploit-DB and 0day.today
March 31^st 2023 at 15:41

A Comparison of Exploit-DB and 0day.today

By /u/chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

Related tags
- ❌
- r/netsec
March 31^st 2023 at 15:41

/r/netsec - Information Security News & Discussion
We scanned every NPM and PyPI package for malware with ChatGPT
March 31^st 2023 at 00:18

We scanned every NPM and PyPI package for malware with ChatGPT

By /u/feross

submitted by /u/feross
[link] [comments]

Related tags
- ❌
- r/netsec
March 31^st 2023 at 00:18

/r/netsec - Information Security News & Discussion
Protection against enumeration and timing attacks with opaque IDs
March 30^th 2023 at 20:43

Protection against enumeration and timing attacks with opaque IDs

By /u/DeliveryTypical

submitted by /u/DeliveryTypical
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 20:43

/r/netsec - Information Security News & Discussion
Spam-tastic! npm Registry Swamped by Bizarre John Wick Frenzy
March 30^th 2023 at 15:35

Spam-tastic! npm Registry Swamped by Bizarre John Wick Frenzy

By /u/feross

submitted by /u/feross
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 15:35

/r/netsec - Information Security News & Discussion
Booby Trapping IBM i
March 30^th 2023 at 15:14

Booby Trapping IBM i

By /u/buherator

submitted by /u/buherator
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 15:14

/r/netsec - Information Security News & Discussion
It’s a (SNMP) Trap: Gaining Code Execution on LibreNMS
March 30^th 2023 at 14:20

It’s a (SNMP) Trap: Gaining Code Execution on LibreNMS

By /u/monoimpact

submitted by /u/monoimpact
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 14:20

/r/netsec - Information Security News & Discussion
Dissecting AlienFox | The Cloud Spammer’s Swiss Army Knife
March 30^th 2023 at 14:13

Dissecting AlienFox | The Cloud Spammer’s Swiss Army Knife

By /u/EspoJ

submitted by /u/EspoJ
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 14:13

/r/netsec - Information Security News & Discussion
CVE-2022-27666: My file your memory
March 30^th 2023 at 14:08

CVE-2022-27666: My file your memory

By /u/albocoder1

submitted by /u/albocoder1
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 14:08

/r/netsec - Information Security News & Discussion
Revisiting Heaven's Gate with Lumma Stealer
March 30^th 2023 at 13:59

Revisiting Heaven's Gate with Lumma Stealer

By /u/CyberMasterV

submitted by /u/CyberMasterV
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 13:59

/r/netsec - Information Security News & Discussion
With KEYPLUG, China’s RedGolf Spies On, Steals From Wide Field of Targets
March 30^th 2023 at 12:31

With KEYPLUG, China’s RedGolf Spies On, Steals From Wide Field of Targets

By /u/montouesto

submitted by /u/montouesto
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 12:31

/r/netsec - Information Security News & Discussion
Supply chain attack in 3CX Windows Electron DesktopApp
March 30^th 2023 at 07:11

Supply chain attack in 3CX Windows Electron DesktopApp

By /u/qwerty0x41

submitted by /u/qwerty0x41
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 07:11

/r/netsec - Information Security News & Discussion
Talkback - public beta of Talkback, a smart infosec resource aggregator to help you keep up with news and research
March 30^th 2023 at 07:07

Talkback - public beta of Talkback, a smart infosec resource aggregator to help you keep up with news and research

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
March 30^th 2023 at 07:07

/r/netsec - Information Security News & Discussion
The Intersection of Apple’s USB Lower Filter and iPhone-WPD Integration
March 29^th 2023 at 20:20

The Intersection of Apple’s USB Lower Filter and iPhone-WPD Integration

By /u/xoxoibo

submitted by /u/xoxoibo
[link] [comments]

Related tags
- ❌
- r/netsec
March 29^th 2023 at 20:20

/r/netsec - Information Security News & Discussion
Bypassing DEP with gap restrictions
March 29^th 2023 at 17:04

Bypassing DEP with gap restrictions

By /u/CarelessOne7933

submitted by /u/CarelessOne7933
[link] [comments]

Related tags
- ❌
- r/netsec
March 29^th 2023 at 17:04

/r/netsec - Information Security News & Discussion
Spyware vendors use 0-days and n-days against popular platforms
March 29^th 2023 at 13:59

Spyware vendors use 0-days and n-days against popular platforms

By /u/YogiBerra88888

submitted by /u/YogiBerra88888
[link] [comments]

Related tags
- ❌
- r/netsec
March 29^th 2023 at 13:59

/r/netsec - Information Security News & Discussion
🔒Beyond Firmware Encryption: Enhancing Embedded Device Security
March 29^th 2023 at 13:13

🔒Beyond Firmware Encryption: Enhancing Embedded Device Security

By /u/attilaszia

submitted by /u/attilaszia
[link] [comments]

Related tags
- ❌
- r/netsec
March 29^th 2023 at 13:13

/r/netsec - Information Security News & Discussion
The Case For Improving Crypto Wallet Security
March 28^th 2023 at 15:16

The Case For Improving Crypto Wallet Security

By /u/nibblesec

submitted by /u/nibblesec
[link] [comments]

Related tags
- ❌
- r/netsec
March 28^th 2023 at 15:16

/r/netsec - Information Security News & Discussion
The curl quirk that exposed Burp Suite & Google Chrome
March 28^th 2023 at 13:26

The curl quirk that exposed Burp Suite & Google Chrome

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
March 28^th 2023 at 13:26

/r/netsec - Information Security News & Discussion
Using an Undocumented Amplify API to Leak AWS Account IDs
March 27^th 2023 at 14:30

Using an Undocumented Amplify API to Leak AWS Account IDs

By /u/RedTermSession

submitted by /u/RedTermSession
[link] [comments]

Related tags
- ❌
- r/netsec
March 27^th 2023 at 14:30

/r/netsec - Information Security News & Discussion
New OST2 class: "Vulnerabilities 1002: C-Family Software Implementation Vulnerabilities"
March 27^th 2023 at 12:20

New OST2 class: "Vulnerabilities 1002: C-Family Software Implementation Vulnerabilities"

By /u/OpenSecurityTraining

submitted by /u/OpenSecurityTraining
[link] [comments]

Related tags
- ❌
- r/netsec
March 27^th 2023 at 12:20

/r/netsec - Information Security News & Discussion
shortest input that will trick GPT to reveal the secret key
March 26^th 2023 at 11:11

shortest input that will trick GPT to reveal the secret key

By /u/aNieke4bToSega8cIomu

submitted by /u/aNieke4bToSega8cIomu
[link] [comments]

Related tags
- ❌
- r/netsec
March 26^th 2023 at 11:11

/r/netsec - Information Security News & Discussion
The rising trend of malicious packages in open source ecosystems | Snyk
March 26^th 2023 at 07:46

The rising trend of malicious packages in open source ecosystems | Snyk

By /u/lirantal

submitted by /u/lirantal
[link] [comments]

Related tags
- ❌
- r/netsec
March 26^th 2023 at 07:46

/r/netsec - Information Security News & Discussion
Breaking Pedersen Hashes in Practice
March 26^th 2023 at 02:11

Breaking Pedersen Hashes in Practice

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
March 26^th 2023 at 02:11

/r/netsec - Information Security News & Discussion
Synthetic Memory Protections: An update on ROP mitigations [PDF]
March 25^th 2023 at 16:47

Synthetic Memory Protections: An update on ROP mitigations [PDF]

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
March 25^th 2023 at 16:47

/r/netsec - Information Security News & Discussion
InjectGPT: remote code execution by asking nicely (literally)
March 25^th 2023 at 09:35

InjectGPT: remote code execution by asking nicely (literally)

By /u/TheMedianPrinter

submitted by /u/TheMedianPrinter
[link] [comments]

Related tags
- ❌
- r/netsec
March 25^th 2023 at 09:35

/r/netsec - Information Security News & Discussion
Open Source API Security Tool
March 24^th 2023 at 23:02

Open Source API Security Tool

By /u/LawfulnessFlat9560

submitted by /u/LawfulnessFlat9560
[link] [comments]

Related tags
- ❌
- r/netsec
March 24^th 2023 at 23:02

/r/netsec - Information Security News & Discussion
Simple Shellcode Dissection
March 24^th 2023 at 23:00

Simple Shellcode Dissection

By /u/_vavkamil_

submitted by /u/_vavkamil_
[link] [comments]

Related tags
- ❌
- r/netsec
March 24^th 2023 at 23:00

/r/netsec - Information Security News & Discussion
2023 Red Canary Threat Detection Report
March 24^th 2023 at 20:19

2023 Red Canary Threat Detection Report

By /u/RedCanaryCo

submitted by /u/RedCanaryCo
[link] [comments]

Related tags
- ❌
- r/netsec
March 24^th 2023 at 20:19