fulco retweeted
Reverse engineering and exploiting embedded devices (Lexmark CX33 and Synology BC500)
(Pwn2Own 2023, @compasssecurity)
P. 1: blog.compass-security.com/2024/03/pwn2ow…
P. 2: blog.compass-security.com/2024/03/pwn2ow…
P. 3: blog.compass-security.com/2024/03/pwn2ow…
P. 4: blog.compass-security.com/2024/03/pwn2ow…
P. 5: blog.compass-security.com/2024/03/pwn2ow…
#pwn2own
(Pwn2Own 2023, @compasssecurity)
P. 1: blog.compass-security.com/2024/03/pwn2ow…
P. 2: blog.compass-security.com/2024/03/pwn2ow…
P. 3: blog.compass-security.com/2024/03/pwn2ow…
P. 4: blog.compass-security.com/2024/03/pwn2ow…
P. 5: blog.compass-security.com/2024/03/pwn2ow…
#pwn2own
1
110
337
21,155
fulco retweeted
Intro to heap exploitation (@Ch0pin)
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/use-after-free…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
#heap
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/use-after-free…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
infosecwriteups.com/the-toddlers-i…
#heap
4
119
402
19,955
fulco retweeted
Huawei Security Hypervisor analysis and reverse engineering by @the_impalabs
Hypervisor analysis: blog.impalabs.com/2212_huawei-se…
OOB vuln: blog.impalabs.com/2212_advisory_…
#huawei #infosec
Hypervisor analysis: blog.impalabs.com/2212_huawei-se…
OOB vuln: blog.impalabs.com/2212_advisory_…
#huawei #infosec
3
48
177
11,969
fulco retweeted
🚨URGENT🚨UNCONFIRMED; Allegedly, a Zero-day exploit for iMessage is up for sale. POC video for serious buyers. This user appears to be 'Team9Sandman'.
#DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI #0Day #iOS #iMessage #Exploit
Description
r zero-click remote code execution on iOS devices via the iMessage application. The attacker can execute malicious code on the device without any user interaction by utilizing this exploit.
Exploit Type
Zero-Click RCE
The exploit executes automatically without user interaction when a specially crafted SMS is received through iMessage.
Payload Delivery Method
The payload is delivered as an SMS message, which is automatically processed by the iMessage app upon receipt.
Impact
Successful execution of the exploit grants the attacker full control over the device.
This includes the ability to read messages, access personal data, and install additional malicious software.
Affected Platforms
iOS Version 17.x
#DarkWebInformer #DarkWeb #Cybersecurity #Cyberattack #Cybercrime #Infosec #CTI #0Day #iOS #iMessage #Exploit
Description
r zero-click remote code execution on iOS devices via the iMessage application. The attacker can execute malicious code on the device without any user interaction by utilizing this exploit.
Exploit Type
Zero-Click RCE
The exploit executes automatically without user interaction when a specially crafted SMS is received through iMessage.
Payload Delivery Method
The payload is delivered as an SMS message, which is automatically processed by the iMessage app upon receipt.
Impact
Successful execution of the exploit grants the attacker full control over the device.
This includes the ability to read messages, access personal data, and install additional malicious software.
Affected Platforms
iOS Version 17.x
5
24
96
30,655
fulco retweeted
This is awesome! Incredibly useful for IR and beats my handmade notes 😆
Thank you to the folks that made this guide public 🙏 🙏
Get the PDF directly from here 🔗 cdn-dynmedia-1.microsoft.com/is/content/mic…
Thank you to the folks that made this guide public 🙏 🙏
Get the PDF directly from here 🔗 cdn-dynmedia-1.microsoft.com/is/content/mic…
2
117
304
23,969
fulco retweeted
MITRE was compromised
Shout out Charles Clancy for full disclosure and his transparency.
Shout out Charles Clancy for full disclosure and his transparency.
27
364
1,749
201,090
fulco retweeted
How much does big tech spy on you? A fucking lot is probably a good starting point…
40
53
457
64,495
fulco retweeted
Despite the mounting evidence against @ATT, they still deny that this data belongs to them. Many publications and researchers have confirmed this data is real. Some things you can do to stay safe in light of this information being publicly released can be found below. Add your tips to help others!
- Reset passwords related to AT&T and do not use the same password for more than one account. Password managers work very well for this.
- Monitor/Freeze your credit reports with Equifax, Experian, and TransUnion to restrict access for new credit and unfreeze only when needing new types of credit and then immediately refreeze again.
- If you are a victim of identity theft, report it to the FTC, as well as any creditors.
- Use a service for identity theft protection.. there is many out there, choose the one that is best for you.
#ATT #Clearnet #DarkWebInformer #Cyberattack #Cybercrime #Infosec #CTI
- Reset passwords related to AT&T and do not use the same password for more than one account. Password managers work very well for this.
- Monitor/Freeze your credit reports with Equifax, Experian, and TransUnion to restrict access for new credit and unfreeze only when needing new types of credit and then immediately refreeze again.
- If you are a victim of identity theft, report it to the FTC, as well as any creditors.
- Use a service for identity theft protection.. there is many out there, choose the one that is best for you.
#ATT #Clearnet #DarkWebInformer #Cyberattack #Cybercrime #Infosec #CTI
🚨BREAKING🚨Allegedly, a threat actor has exposed data from AT&T @ATT. They claim the data shows SSN, DOB, Full Names, Phone, Addresses, Emails, and other info. The amount of records are 73,481,539. #ATT #Clearnet #DarkWebInformer #Cyberattack #Cybercrime #Infosec #CTI
5
39
126
52,695
fulco retweeted
Self driving building Janitor.
Cleans all bathrooms in a multistory building…
Unassisted.
Cleans all bathrooms in a multistory building…
Unassisted.
584
1,042
8,018
16,615,895
fulco retweeted
The 2024 Threat Detection Report is out! Featuring actionable insights for the most prevalent cyber threats and ATT&CK techniques your security team is likely to encounter. Read the full report now: redcanary.com/threat-detecti…
0
36
105
30,281
fulco retweeted
Holy Shit!
Someone asked ChatGPT: "How would it conquer over Humans?"
2 ways which ChatGPT showed are INSANE 💀
[🧵 Thread ]:
Someone asked ChatGPT: "How would it conquer over Humans?"
2 ways which ChatGPT showed are INSANE 💀
[🧵 Thread ]:
81
235
916
833,145
fulco retweeted
OpenAI + Figure
conversations with humans, on end-to-end neural networks:
→ OpenAI is providing visual reasoning & language understanding
→ Figure's neural networks are delivering fast, low level, dexterous robot actions
(thread below)
conversations with humans, on end-to-end neural networks:
→ OpenAI is providing visual reasoning & language understanding
→ Figure's neural networks are delivering fast, low level, dexterous robot actions
(thread below)
389
1,402
6,241
1,882,598
fulco retweeted
VCURMS: New Java RATs Unleashed in Sophisticated Phishing Scheme securityonline.info/vcurms-new-jav…
0
21
38
4,308
fulco retweeted
Great news, everyone! @redcanary's 2024 Threat Detection Report is officially live! I've read it three times, and it's our best yet. Every section is worth your time, but I'm going to post my personal highlights in the thread. redcanary.com/threat-detecti…
2
32
100
18,369
RT @BushidoToken: General #InfoSec Community Poll on #WorkFromHome Status. Please RT for more coverage and better results 🔁
📊 Which Infose…
📊 Which Infose…
0
37
0
