CVE-2023-36713 2023-Oct Windows Common Log File System Driver Information Disclosure 5.5 - clfs.sys.x64.10.0.10240.20161-clfs.sys.x64.10.0.10240.20232.ghidriff.md

Tracking CVEs for the linux Kernel. Contribute to nluedtke/linux_kernel_cves development by creating an account on GitHub.

Last year I (successfully) targeted the CANON Printer for Pwn2Own toronto, this year I decided to do the same. But I made a terrible mistake. The night before my flight to toronto I realized I had.. hacked the wrong printer (firmware). I scrambled to blindly…

Cambodian government entities were targeted by a Chinese APT masquerading as cloud backup services. Our findings include C2 infrastructure and more.

Users looking to download a popular PC utility may be tricked in this campaign where a threat actor has registered a website that copies content from a PC and Windows news portal.

The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate

   TL;DR I recently spent some time exploring the potential capabilities that an evil IoT device might have within an  AWS...

Contributor: Nikki Benoit Executive Summary New Jupyter Infostealer variants continue to evolve with simple yet impactful changes to the techniques used by the malware author. This improvement aims to avoid detection and establishes persistence, enabling…

Newly discovered later-stage malware from BlueNoroff APT group targets macOS with characteristics similar to their RustBucket campaign.

During my internship, I have been researching and trying to find bugs within the nftables subsystem. In this blog post, I will talk about a bug I have found, as well as the exploitation of an n-day discovered by Mingi Cho – CVE-2023-31248.
Introduction to…

In which we run a normal ELF binary on Linux without touching the filesystem(except /proc).

The House of Rust is a heap exploitation technique that drops a shell against full PIE binaries that don’t leak any addresses.

Threat Researcher

In detailed Analysis for the Stealc stealer.

Last week (2019-02-11) a new vulnerability in runC was reported by its maintainers, originally found by Adam Iwaniuk and Borys Poplawski. Dubbed

By Seth Jenkins, Project ZeroIntroductionIn December 2022, Google’s Threat Analysis Group (TAG) discovered an in-the-wild exploit chain targeting Samsu...

AhnLab Security Emergency response Center (ASEC) detected circumstances of a malware strain being distributed through breached legitimate websites using various file names, prompting users to run them. This post will introduce how AhnLab EDR analyzes and…

Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.