← Feed

Posts

• View post

  A story of wifi secrets, UART lockdowns and a damaged flash memory chip: https://adepts.of0x.cc/eufy-homestation2-firmware/ #cybersecurity #hardware #hardwarehacking #infosec #informationsecurity

• View post

  Malwoverview version 8.1.0 is available: https://github.com/alexandreborges/malwoverview To install it: $ python -m pip install -U malwoverview This version aims to: 01. Introduce new features. 02. Fix most existing issues, particularly those found between versions 8.0.0 and 8.0.5. 03. Address a number of security issues. The number of changes is significant, so it is recommended reading the following sections of the README.md: 01. WHAT IS NEW IN 8.1.0, BY EXAMPLE 02. WHAT IS NEW IN 8.0.0...

• View post

  Linux Bridge STP Timer Use-After-Free: https://ssd-disclosure.com/linux-bridge-stp-timer-use-after-free/ #linux #exploit #exploitation #vulnerability #informationsecurity #cve #patch #cybersecurity

• View post

  Bring Your Own EDR: How to Turn a Commercial EDR into a Trojan Horse https://www.akamai.com/blog/security-research/bring-your-own-edr-turn-commercial-edr-trojan-horse #edr #programming #cybersecurity #informationsecurity

• View post

  Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day: https://www.gendigital.com/blog/insights/research/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day #cybersecurity #infosec #informationsecurity #rootkit #vulnerability

• View post

  It is with great pleasure that I announce I am a co-author of the Seventh Edition of Gray Hat Hacking, alongside outstanding cybersecurity minds such as Stephen Sims, Valentina Palmiotti, Natalie Silvanovich, Luna Tong, Pavel Yosifovich, Moses Frost, and Huascar Tejeda! We are undoubtedly living through exciting times, and I hope readers appreciate this complete overhaul of modern, completely updated content. Stay tuned! #cybersecurity #hacking #exploitation #exploit #programming #information...

• View post

  A "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF: https://nebusec.ai/research/cve-2026-43501-route-of-root/ #cybersecurity #infosec #informationsecurity #lpe #linux #kernelctf #exploitation

• View post

  [0-Day] Windows USB Print Out-of-Bounds Read Vulnerability - The String Descriptor That Wasn’t https://zeifan.my/usbtersakiti/ #cybersecurity #windows #vulnerability #infosec #exploitation

• View post

  The articles already published in the Exploiting Reversing series (ERS) are now hosted on a new website: https://blackstormsecurity.com/research/ Future articles will be published primarily at this new address, and for a time, I will also publish them on my personal blog. The series will continue with many more articles, which some are coming soon. Stay tuned. Have an excellent day. #exploit #vulnerability

• View post

  CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining: https://mrtiz.github.io/cet-callstack-spoofing-thread-pool-trampoline #cybersecurity #programming #infosec #hacking #redteam

• View post

  A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill: https://heyitsas.im/posts/lpe-quartet/ #cybersecurity #vulnerability #exploit #infosec #linux

• View post

  Qualcomm’s Adreno X2 GPU: https://chipsandcheese.com/p/qualcomms-adreno-x2-gpu #gpu #infosec #qualcomm #engineering

• View post

  Beyond Prompt Injection: Hacking Apple's Private Cloud Compute: https://blog.sentry.security/beyond-prompt-injection-hacking-apples-private-cloud-compute/ #apple #vulnerability #cybersecurity #informationsecurity #cve

• View post

  Malwoverview 8.2.0 (codename: Revolutions) This version adds a component vulnerability search, gives every NIST query a chosen ordering reference, and repairs the queries themselves. https://github.com/alexandreborges/malwoverview To install it: python -m pip install -U malwoverview[all] [+] New — --nist 6, list the CVEs of a component Give it a component name, or the path to a local binary: malwoverview --nist 6 --NIST openssl malwoverview --nist 6 --NIST "C:\Windows\System32\dr...

• View post

  VM guest escape via 9p filesystem exploit: https://gitlab.com/qemu-project/qemu/-/work_items/4491 #qemu #exploitation #vulnerability #informationsecurity #infosec #cybersecurity

• View post

  Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 1: https://pgj11.com/posts/Windows-NCSI-Proxy-Auth-Coercion-Part-1/ Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 2: https://pgj11.com/posts/Windows-NCSI-Proxy-Auth-Coercion-Part-2/ #cybersecurity #exploit #exploitation #vulnerability #drivers #infosec #informationsecurity #windows

• View post

  BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution: https://google.github.io/security-research/pocs/linux/bleedingtooth/writeup.html #cybersecurity #vulnerability #infosec #exploitation #linux #bluetooth #rce

• View post

  Branch Target Reuse, BTR: New Spectre V2 Attack Targeting JIT Compilers: https://www.vusec.net/projects/btr/ #cybersecurity #infosec #exploitation #vulnerability #jit #cpu

• View post

  Exploiting Reversing (ER) Series | Article 10: iOS Security Research (part 01) 223 pages, free. The first article in the series aimed at iOS itself, and the opening of a multi-part sequence. Published on: https://www.blackstormsecurity.com/research/ This article will be published on https://exploitreversing.com/ next week. Hope you enjoy the read! #iOS #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #KernelSecurity

• View post

  SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode https://vanbulck.net/files/woot26-smm.pdf #cybersecurity #smm #platformsecurity #informationsecurity #infosec

• View post

  Frag Gap: https://blog.qwerty.or.kr/en/posts/cdf3008a-c1a4-4eca-a373-aa3a2bcf1489/ #kernel #network #cybersecurity #informationsecurity #exploitation #vulnerability #cve

• View post

  GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095): https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/ #vulnerability #cybersecurity #informationsecurity #exploitation #cve

• View post

  Striga: Lifting x86 to LLVM IR with Python: https://secret.club/2026/05/21/striga.html #python #reversing #llvm #informationsecurity #infosec #cybersecurity

• View post

  Authenticated RCE via Argument Injection in Gogs (NOT FIXED): https://www.rapid7.com/blog/post/ve-authenticated-rce-via-argument-injection-gogs-unfixed/ #cybersecurity #vulnerability #rce #informationsecurity #exploitation

• View post

  Bypassing SSL Pinning on Play Store AVDs without Frida https://www.mfumis.com/posts/bypassing-ssl-pinning-on-play-store-avds-without-frida/ #cybersecurity #informationsecurity #frida #mobiledevice #infosec #mobilesecurity #mobile

• View post

  Malwoverview 8.0.2 has been released: https://github.com/alexandreborges/malwoverview To install it: python -m pip install -U malwoverview[all] #malware #threathunting #informationsecurity #infosec #vulnerability #cve #dfir

• View post

  Zombie COTables: Resurrecting Freed Memory to Escape VirtualBox: https://blog.exodusintel.com/2026/06/15/zombie-cotables-resurrecting-freed-memory-to-escape-virtualbox/ #vulnerability #exploitation #exploit #virtualbox #cybersecurity #infosec #informationsecurity

• View post

  Another vulnerability in iOS 26.5 with a clear and reproducible crash, registers control, primitive and PoC confirmed, and possibly a working exploit... who knows... ;)

• View post

  Spiteful Fruit - AppleRAID Kernel Heap OOB Write: https://ret2p.lt/2026/06/30/softraid-spite.html #cybersecurity #informationsecurity #iOS #apple #vulnerability #informationsecurity #infosec #exploitation

• View post

  Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215): https://cyberstan.co.uk/drm-lpe-linux/ #linux #kernel #vulnerability #cybersecurity #exploitation