↓ Skip to main content

Blog

September 2022

10

Prompt injection attacks against GPT-3 Byte

10

Patreon lays off its entire security team Byte

2

CVE-2022-2992 - GitLab RCE via GitHub import, again Vulnerability

August 2022

31

NSA released a guide on Securing the Software Supply Chain Byte

29

Huntress unpacks a six-stage Python loader dropping a RAT Byte

27

3rd Annual Binary Golf Grand Prix (BGGP3) Byte

23

Ridiculous vulnerability disclosure process with CrowdStrike Falcon Sensor Byte

22

Software developer cracks Hyundai car security with Google search Byte

21

Ex-Twitter exec blows the whistle, alleging reckless and negligent cybersecurity policies Byte

21

CVE-2022-22715 - Windows Dirty Pipe: a ushort overflow in npfs.sys escapes the Adobe Reader sandbox Vulnerability

20

Scammers Created a Deep Fake to Scam Unsuspecting Crypto Projects Byte

19

Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus Byte

19

ETHERLED: Sending Covert Morse Signals from Air-Gapped Devices via Network Card (NIC) LEDs Byte

18

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow Vulnerability

17

CVE-2022-32893 - Apple fixes two exploited 0days in WebKit and kernel Vulnerability

16

CVE-2022-2856 - Chrome Intents flaw exploited in the wild Vulnerability

15

241 npm and PyPI packages caught dropping Linux cryptominers Byte

12

CVE-2022-34713 - DogWalk MSDT flaw exploited and finally patched Vulnerability

12

CVE-2022-30333 - unrar symlink check bypass gives pre-auth RCE on Zimbra Vulnerability

11

CVE-2022-20866 - Cisco ASA and FTD can leak RSA private keys Vulnerability

11

BumbleBee loader intrusion kerberoasted its way to Domain Admin Byte

10

CVE-2022-21233 - ÆPIC Leak reads stale data from Intel APIC registers Vulnerability

10

Manjusaka imitates Cobalt Strike with Rust implants and a Go C2 Byte

9

Black Hat USA 2022 and DEF CON 30 Byte

8

Check Point finds ten info-stealer packages on PyPI Byte