Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.14.md

10 vulnerabilities in Brocade Fibre Channel switches - https://pierrekim.github.io/blog/2025-03-31-brocade-switches-10-vulnerabilities.html

Substack Domain Takeover - https://blog.nietaanraken.nl/posts/substack-domain-takeover/

Last barrier destroyed, or compromise of Fuse Encryption Key for Intel Security Fuses - https://swarm.ptsecurity.com/last-barrier-destroyed-or-compromise-of-fuse-encryption-key-for-intel-security-fuses/

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - https://www.elttam.com/blog/rails-sqlite-gadget-rce/

Reviving the modprobe_path Technique: Overcoming search_binary_handler() Patch - https://theori.io/blog/reviving-the-modprobe-path-technique-overcoming-search-binary-handler-patch

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.12.md

Defeating String Obfuscation in Obfuscated NodeJS Malware using AST - https://dinohacks.com/posts/2025/2025-03-17-defeating-string-obfuscation-in-obfuscated-nodejs-malware/

Developing a Docker 1-Click RCE chain for fun - https://m0z.ie/research/2025-01-27-Developing-a-Docker-1-Click-RCE-chain-for-fun/

Bypass AMSI in 2025 - https://www.r-tec.net/r-tec-blog-bypass-amsi-in-2025.html

Bypassing AMSI and Evading AV Detection with SpecterInsight - https://practicalsecurityanalytics.com/bypassing-amsi-and-evading-av-detection-with-specterinsight/

Massive security gaps discovered in building access systems - https://www.heise.de/en/news/Massive-security-gaps-discovered-in-building-access-systems-10301128.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.10.md

Writing a decent win32 keylogger [1/3] - https://www.synacktiv.com/en/publications/writing-a-decent-win32-keylogger-13

API-Hashing in the Sodinokibi/REvil Ransomware – Why and How? - https://blag.nullteilerfrei.de/2019/11/09/api-hashing-why-and-how/

Cloud Incident Readiness: Key logs for cloud incidents - https://www.invictus-ir.com/news/cloud-incident-readiness-key-logs-for-cloud-incidents

How We Hacked a Software Supply Chain for $50K - https://www.landh.tech/blog/20250211-hack-supply-chain-for-50k/

Breaking Windows - Bypassing AppLocker When PowerShell and CMD Are Locked Down - https://umsundu.co.uk/posts/Breaking-Windows-Bypassing-AppLocker-When-PowerShell-and-CMD-Are-Locked-Down/

#informatyka

Wiecie jak ustawić Teamsy, żeby po kliknięciu nagrywania pracownikom nie pokazywał się dymek, że spotkanie jest nagrywane? #pracbaza #informatyka

Jak prosto wytłumaczyć różnicę między UDP a TCP?

xD

#heheszki #humorinformatykow #benis #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.08.md

Mixing up Public and Private Keys in OpenID Connect deployments - https://blog.hboeck.de/archives/909-Mixing-up-Public-and-Private-Keys-in-OpenID-Connect-deployments.html

Indictments and Leaks: Different but Complementary Sources - https://nattothoughts.substack.com/p/indictments-and-leaks-different-but

CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation - https://www.huntress.com/blog/crushftp-cve-2025-31161-auth-bypass-and-post-exploitation

Understanding Sleep Obfuscation - https://www.binarydefense.com/resources/blog/understanding-sleep-obfuscation/

Serving a (g)zip bomb with Caddy - https://dustri.org/b/serving-a-gzip-bomb-with-caddy.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.06.md

Malware Delivery via Custom Website in 2025 - https://print3m.github.io/blog/malware-delivery-via-custom-website-2025

Hacking the Call Records of Millions of Americans - https://evanconnelly.github.io/post/hacking-call-records/

Patch-Gapping the Google Container-Optimized OS for $0 - https://h0mbre.github.io/Patch_Gapping_Google_COS/

Cracking the Crackers - https://reverse.put.as/2025/03/13/cracking-the-crackers/

Llama.cpp RPC Heap Overflow Remote Code Execution - https://retr0.blog/blog/llama-rpc-rce

#informatyka

Czemu w Polsce programiści i informatycy nie mają swoich izb na wzór izb lekarskich, żeby chronić swoje interesy?

Czemu nie chronicie swoich interesów?

#pytanie #informatyka #programowanie

"Przewidujemy, że wpływ nadludzkiej sztucznej inteligencji w ciągu następnej dekady będzie ogromny, przekraczając wpływ rewolucji przemysłowej.

Napisaliśmy scenariusz, który przedstawia nasze najlepsze przypuszczenia na temat tego, jak to może wyglądać.1 Opiera się na ekstrapolacjach trendów, grach wojennych, opiniach ekspertów, doświadczeniu w OpenAI i poprzednich sukcesach w prognozowaniu."

#ai #informatyka #ciekawostki #technologia

https://ai-2027.com/

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.04.md

CVE-2025-26125: Turning DoS into Privilege Escalation - https://www.hackandhide.com/from-dos-to-privilege-escalation/

Miku Miku Beam: DDoS in Style - https://asynchronous.win/post/miku-miku-beam-ddos-in-style/

Caller ID Spoofing - https://swordsec.com/caller-id-spoofing/

Reversing Samsung's H-Arx Hypervisor Framework - https://dayzerosec.com/blog/2025/03/08/reversing-samsungs-h-arx-hypervisor-part-1.html

3 vulnerabilities in Palo Alto Deep Packet Inspection mechanism - https://pierrekim.github.io/blog/2025-03-31-paloalto-dpi-3-vulnerabilities.html

#informatyka

#humor #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.04.02.md

Microsoft Edge Developer VM Remote Code Execution - https://infosec.rm-it.de/2025/02/17/microsoft-edge-developer-vm-remote-code-execution/

Hellcat Hacking Group Unmasked: Investigating Rey and Pryx - https://www.kelacyber.com/blog/hellcat-hacking-group-unmasked-rey-and-pryx

A Journey From sudo iptables To Local Privilege Escalation - https://www.shielder.com/blog/2024/09/a-journey-from-sudo-iptables-to-local-privilege-escalation/

Drone Remote ID to Meshtastic - https://github.com/colonelpanichacks/wifi-rid-to-mesh

Cellular Security - https://cellularsecurity.org/ransacked

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.31.md

RV130X Firmware Analysis - https://raffo24.github.io/hardware%20hacking/FirmwareAnalysis/

Process Injection Part 1: The Theory - https://secarma.com/process-injection-part-1-the-theory

Reliable system call interception - https://blog.mggross.com/intercepting-syscalls/

APT Attack Simulation - https://github.com/S3N4T0R-0X0/APT-Attack-Simulation

A collection of MCP servers - https://github.com/punkpeye/awesome-mcp-servers

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.29.md

Ransomware-Database - https://github.com/Cryakl/Ransomware-Database

How auto-generated passwords in Sitevision leads to signing key leakage - CVE-2022-35202 - https://www.shelltrail.com/research/how-auto-generated-passwords-in-sitevision-leads-to-signing-key-leakage-cve-2022-35202/

Writing a Ghidra processor module - https://irisc-research-syndicate.github.io/2025/02/14/writing-a-ghidra-processor-module/

CVE-2025-0693: AWS IAM User Enumeration - https://rhinosecuritylabs.com/research/unauthenticated-username-enumeration-in-aws/

DevOps access is closer than you assume - https://zolder.io/blog/devops-access-is-closer-than-you-assume/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.27.md

MalDoc in PDF - Detection bypass by embedding a malicious Word file into a PDF file - https://blogs.jpcert.or.jp/en/2023/08/maldocinpdf.html

Breaking Down Adversarial Machine Learning Attacks Through Red Team Challenges - https://boschko.ca/adversarial-ml/

Primers • Overview of Large Language Models - https://vinija.ai/models/LLM/

Promptfoo: LLM evals & red teaming - https://github.com/promptfoo/promptfoo

Exploring Heap Exploitation Mechanisms: Understanding the House of Force Technique - https://www.darkrelay.com/post/exploring-heap-exploitation-mechanisms-understanding-the-house-of-force-technique

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.03.25.md

STUDY OF A NOVA STEALER SAMPLE - https://www.gatewatcher.com/en/lab/nova-stealer-the-malware-made-in-france/

The (Almost) Forgotten Vulnerable Driver - https://decoder.cloud/2025/01/09/the-almost-forgotten-vulnerable-driver/

The Art of Linux Kernel Rootkits - https://inferi.club/post/the-art-of-linux-kernel-rootkits

A practical guide to bypassing userland API Hooking - https://www.advania.co.uk/insights/blog/a-practical-guide-to-bypassing-userland-api-hooking/

MalChela Updates: New Features and Enhancements - https://bakerstreetforensics.com/2025/03/13/malchela-updates-new-features-and-enhancements/

#informatyka