vx-underground - @vx-underground https://twitter.com/vx-underground
Google's Play Store policy update includes a lot changes and new policies for the cryptocurrency ecosystem. https://support.google.com/googleplay/android-developer/answer/13607354
HardHatC2 - A C# Command And Control Framework https://www.kitploit.com/2023/06/hardhatc2-c-command-and-control.html?m=1
PassGPT outperforms existing methods based on generative adversarial networks (GAN) by guessing twice as many previ- ously unseen passwords. https://github.com/javirandor/passgpt
Bug Bounty: An Economic Disadvantage for Researchers? https://www.digitaloperatives.com/2023/07/29/bug-bounty-an-economic-disadvantage-for-researchers/
WINTAPIX: A New Kernel Driver Targeting Countries in The Middle East https://www.fortinet.com/blog/threat-research/wintapix-kernal-driver-middle-east-countries
Jeff Moss - @thedarktangent https://twitter.com/thedarktangent
Sales Tracker Management System v1.0 - Multiple Vulnerabilities https://0day.today/exploit/description/38786
CVE-2023-33802 - SumatraPDF 3.4.6 -32-bit Denial Of Services (DoS) https://github.com/CDACesec/CVE-2023-33802
AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice https://www.gosecure.net/blog/2023/06/21/aws-waf-clients-left-vulnerable-to-sql-injection-due-to-unorthodox-mssql-design-choice/
Research essay by NSA employees from 1997:
'How to make a mint: The cryptography of anonymous electronic cash' https://twitter.com/cryptonator1337/status/1681612817122701312
Billionaire Bunkers Won't Work https://hellscape.substack.com/p/billionaire-bunkers-wont-work
Apple Zero-click remote chain with full kernel execution and persistence, including kernel PAC bypass, on latest shipping hardware.
$100,000 - $1,000,000 USD https://security.apple.com/bounty/categories/
Estimating Password Cracking Times https://www.betterbuys.com/estimating-password-cracking-times/
Coffee: A COFF loader made in Rust https://labs.hakaioffsec.com/coffee-a-coff-loader-made-in-rust/
Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing https://www.exploit-db.com/exploits/51538?utm_source=dlvr.it&utm_medium=twitter
Protect yourself from being tracked 🌍 by AirTags 🏷 and Find My accessories https://github.com/seemoo-lab/AirGuard
CVE-2023-26045: NodeBB Forum Software Remote Code Execution Flaw https://securityonline.info/cve-2023-26045-nodebb-forum-software-remote-code-execution-flaw/
DakshSCRA: Source Code Review Assist https://securityonline.info/dakshscra-source-code-review-assist/
CVE-2023-20887 Pre-Authenticated Remote Code Execution in VMWare vRealize Network Insight https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/