Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.11.md

Stealthy Persistence With Non-Existent Executable File - https://www.zerosalarium.com/2025/09/Stealthy-Persistence-With-Non-Existent-Executable-File.html

KongTuke FileFix Leads to New Interlock RAT Variant - https://thedfirreport.com/2025/07/14/kongtuke-filefix-leads-to-new-interlock-rat-variant/

Reliable system call interception - https://blog.mggross.com/intercepting-syscalls/

CVE-2025-5333: Remote Code Execution in Broadcom Altiris IRM - https://www.lrqa.com/en/cyber-labs/remote-code-execution-in-broadcom-altiris-irm/

An unexpected journey into Microsoft Defender's signature World - https://retooling.io/blog/an-unexpected-journey-into-microsoft-defenders-signature-world

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.09.md

A Novel Technique for SQL Injection in PDO’s Prepared Statements - https://slcyber.io/assetnote-security-research-center/a-novel-technique-for-sql-injection-in-pdos-prepared-statements/

A Navajo weaving of an integrated circuit: the 555 timer - https://www.righto.com/2025/09/marilou-schultz-navajo-555-weaving.html

Ghosting the Sensor: Disrupting Defender for Identity Without Detection - https://cyberdom.blog/ghosting-the-sensor-disrupting-defender-for-identity-without-detection/

Exploiting Retbleed in the real world - https://bughunters.google.com/blog/6243730100977664/exploiting-retbleed-in-the-real-world

Hunting postMessage Vulnerabilities – Part 1 - https://blog.ryukudz.com/posts/postmessage-part-1/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.07.md

This overlooked Linux boot flaw defeats Secure Boot heres how to fix it https://nerds.xyz/2025/07/linux-initramfs-security-flaw-secure-boot-bypass/

A CT scanner reveals surprises inside the 386 processor's ceramic package  https://www.righto.com/2025/08/intel-386-package-ct-scan.html

Exploit development for IBM i https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/

Death by a thousand slops https://daniel.haxx.se/blog/2025/07/14/death-by-a-thousand-slops/

Bypassing EDR to dump LSA secrets - Orange Cyberdefense https://www.orangecyberdefense.com/global/blog/cybersecurity/bypassing-edr-to-dump-lsa-secrets

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.05.md

Scanning for Post-Quantum Cryptographic Support - https://www.anvilsecure.com/blog/scanning-for-post-quantum-cryptographic-support.html

Hiding Linux Processes with Bind Mounts - https://righteousit.com/2024/07/24/hiding-linux-processes-with-bind-mounts/

SSD Advisory – Linux Kernel Pipapo Set Double Free LPE - https://ssd-disclosure.com/ssd-advisory-linux-kernel-pipapo-set-double-free-lpe/

Double Dash, Double Trouble: A Subtle SQL Injection Flaw - https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/

Hunting Bugs in Linux Kernel With KASAN: How to Use it & What's the Benefit? - https://slavamoskvin.com/hunting-bugs-in-linux-kernel-with-kasan-how-to-use-it-whats-the-benefit/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.03.md

Velociraptor incident response tool abused for remote access - https://news.sophos.com/en-us/2025/08/26/velociraptor-incident-response-tool-abused-for-remote-access/

Dive into PEB Walk in Malware Analysis - https://fareedfauzi.github.io/2024/07/13/PEB-Walk.html

Qualcomm DSP Kernel Internals - https://streypaws.github.io/posts/DSP-Kernel-Internals/

Application Layer Desynchronization using Opportunistic TLS - https://opossum-attack.com/

Analyzing New HijackLoader Evasion Tactics - https://www.zscaler.com/blogs/security-research/analyzing-new-hijackloader-evasion-tactics

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.09.01.md

Secure Enclaves for Offensive Operations (Part I) - https://www.outflank.nl/blog/2025/02/03/secure-enclaves-for-offensive-operations-part-i/

Threat Actors Deploy Sinobi Ransomware via Compromised SonicWall SSL VPN Credentials - https://www.esentire.com/blog/threat-actors-deploy-sinobi-ransomware-via-compromised-sonicwall-ssl-vpn-credentials

A Nightmare on EDR Street: WDAC's Revenge - https://beierle.win/2025-08-28-A-Nightmare-on-EDR-Street-WDACs-Revenge/

Revisiting Cross Session Activation Attacks - https://www.r-tec.net/r-tec-blog-revisiting-cross-session-activation-attacks.html

nOAuth Abuse Alert: Full Account Takeover of Entra Cross-Tenant SaaS Applications - https://www.semperis.com/blog/noauth-abuse-alert-full-account-takeover/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.28.md

OneDrive Evolution - https://malwaremaloney.blogspot.com/p/onedrive-evolution.html

How I Discovered a Libpng Vulnerability 11 Years After It Was Patched - https://blog.himanshuanand.com/posts/discovered-a-libpng-vulnerability-11-years-after-it-was-patched/

When Backups Open Backdoors: Accessing Sensitive Cloud Data via "Synology Active Backup for Microsoft 365" - https://modzero.com/en/blog/when-backups-open-backdoors-synology-active-backup-m365/

FileFix - A ClickFix Alternative - https://mrd0x.com/filefix-clickfix-alternative/

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation - https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.28.md

How to Prevent Helpdesk Social Engineering Attacks -mhttps://blog.hypr.com/prevent-helpdesk-social-engineering-attacks

Applocker bypass on Lenovo machines – The curious case of MFGSTAT.zip - https://oddvar.moe/2025/07/03/applocker-bypass-on-lenovo-machines-the-curious-case-of-mfgstat-zip/

Exploiting the Synology TC500 at Pwn2Own Ireland 2024 - https://blog.infosectcbr.com.au/2025/08/01/exploiting-the-synology-tc500-at-pwn2own-ireland-2024/

GraphApiAuditEvents: The new Graph API Logs - https://kqlquery.com/posts/graphapiauditevents/

Countering EDRs With The Backing Of Protected Process Light (PPL) - https://www.zerosalarium.com/2025/08/countering-edrs-with-backing-of-ppl-protection.html

#informatyka

Cześć, mam pytanie, ostatnio kupiłem certyfikat kwalifikowanym do podpisywania dokumentów elektronicznych, z karto kryptograficzna czy cos takiego, na epuapie normalnie moge podpisać dokumenty, a w edoreczeniu wyskakuje takie coś jak na screenie, edoreczenie nie ma takiej możliwości czy trzha coś pobrać dodatkowo? Mam podpis gov i te od karty #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.26.md

pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis - https://clearbluejar.github.io/posts/pyghidra-mcp-headless-ghidra-mcp-server-for-project-wide-multi-binary-analysis/

CrossC2 Expanding Cobalt Strike Beacon to Cross-Platform Attacks - https://blogs.jpcert.or.jp/en/2025/08/crossc2.html

MURKY PANDA: A Trusted-Relationship Threat in the Cloud - https://www.crowdstrike.com/en-us/blog/murky-panda-trusted-relationship-threat-in-cloud/

What the NULL?! Pre-Auth Wing FTP Server RCE (CVE-2025-47812) - https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/

Claude is competitive with humans in (some) cyber competitions - https://red.anthropic.com/2025/cyber-competitions/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.24.md

Creating Processes Using System Calls - https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls

2025 Optical Media Durability Update - https://blog.dshr.org/2025/08/2025-optical-media-durability-update.html

pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis - https://clearbluejar.github.io/posts/pyghidra-mcp-headless-ghidra-mcp-server-for-project-wide-multi-binary-analysis/

Beyond Beacon: Writing BOF and a Native Rust COFF Loader - https://malware-decoded.com/rust-bof-coff-loader/

MITM6 + NTLM Relay: How IPv6 Auto-Configuration Leads to Full Domain Compromise - https://www.resecurity.com/blog/article/mitm6-ntlm-relay-how-ipv6-auto-configuration-leads-to-full-domain-compromise

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.22.md

Netexec Workshop Active Directory Lab Writeup - https://blog.anh4ckin.ch/posts/netexec-workshop2k25/

Reverse Engineering of the Lockbit Linux ESXi Variant - https://hackandcheese.com/posts/blog1_lockbit/

A Quick Dive Into The Linux Kernel Page Allocator - https://syst3mfailure.io/linux-page-allocator/

Have You Looked in the Trash? Unearthing Privilege Escalations from the Active Directory Recycle Bin - https://cravaterouge.com/articles/ad-bin/

So you want to rapidly run a BOF? Let's look at this 'cli4bofs' thing then - https://blog.z-labs.eu/2025/06/04/all-about-cli4bofs-tool.html

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.20.md

Don’t Phish-let Me Down: FIDO Authentication Downgrade - https://www.proofpoint.com/us/blog/threat-insight/dont-phish-let-me-down-fido-authentication-downgrade

Distribution of SmartLoader Malware via Github Repository Disguised as a Legitimate Project - https://asec.ahnlab.com/en/89551/

Pantheon Introduction: A Guide and Script Collection for Mythic Eventing - https://specterops.io/blog/2025/08/15/pantheon-introduction-a-guide-and-script-collection-for-mythic-eventing/

When Defenders Become the Attackers: The Elastic EDR 0-Day (RCE + DoS) - https://ashes-cybersecurity.com/0-day-research/

All You Need Is MCP - LLMs Solving a DEF CON CTF Finals Challenge - https://wilgibbs.com/blog/defcon-finals-mcp/

#informatyka

IBM 701, 1953.

"The first IBM large-scale electronic computer manufactured in quantity. The first was delivered to Los Alamos in March, 1953. It was known then as an IBM 701 Electronic Data Processing Machine. All parts and dust are original."

Źródło

#historia #starszezwoje #informatyka #programowanie

Sierpień to już koniec blogów w serwisie Dobre Programy. 1 września treści te powinny zostać usunięte <płacz>. Wirtualna Polska pozbywa się wielkiej skarbnicy wiedzy o IT Pozostaje archiwizacja wpisów poprzez wsadowe pobranie artykułów na dysk... Dobre i to... #wirtualnapolska #it #komputery #informatyka #dobreprogramy #blog #technologia

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.18.md

Active Directory Enumeration – ADWS - https://ipurple.team/2025/08/12/active-directory-enumeration-adws/

Driver Reverse Engineering 101 - https://eversinc33.com/posts/driver-reversing.html

Unmasking SocGholish: Silent Push Untangles the Malware Web Behind the “Pioneer of Fake Updates” and Its Operator, TA569 - https://www.silentpush.com/blog/socgholish/

Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication - https://specterops.io/blog/2025/08/13/going-for-brokering-offensive-walkthrough-for-nested-app-Entra ID Incident Response: Advanced PowerShell Techniques - https://cyberdom.blog/entra-id-incident-response-advanced-powershell-techniques/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.08.16.md

Many Registered Users, Few Core Members - https://nattothoughts.substack.com/p/few-and-far-between-during-chinas

Exploiting Retbleed in the real world - https://bughunters.google.com/blog/6243730100977664/exploiting-retbleed-in-the-real-world

RV130X Firmware Analysis - https://raffo24.github.io/hardware%20hacking/FirmwareAnalysis/

We Know What You Did (in Azure) Last Summer - https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-resource-attribution-via-tenant-id-enumeration/

Zero Click, One NTLM: Microsoft Security Patch Bypass (CVE-2025-50154) - https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154/

Chinese SMS Spammers Go Mobile - https://garwarner.blogspot.com/2025/08/chinese-sms-spammers-go-mobile.html

#informatyka