09/02

Hardening Interface

https://phi.cryptonit.fr/policies_hardening_interface/interface/windows/
Hardening Interface

Practical guide for Golden SAML

https://nodauf.dev/p/practical-guide-for-golden-saml/
Practical guide for Golden SAML

Nmap Announce: Nmap 7.93 - 25th Anniversary Release!

https://seclists.org/nmap-announce/2022/1
Nmap Announce: Nmap 7.93 - 25th Anniversary Release!

Windows Kernel Introspection (WKI) :: am0nsec

https://amonsec.net/posts/2022/09/0000000d/
Windows Kernel Introspection (WKI) :: am0nsec

Thousands lured with blue badges in Instagram phishing attack

https://www.bleepingcomputer.com/news/security/thousands-lured-with-blue-badges-in-instagram-phishing-attack/
Thousands lured with blue badges in Instagram phishing attack

Reviewing macOS Unified Logs | Mandiant

https://www.mandiant.com/resources/blog/reviewing-macos-unified-logs
Reviewing macOS Unified Logs | Mandiant

Exploiting CVE-2018-19134: Ghostscript RCE through type confusion | GitHub Security Lab

https://securitylab.github.com/research/cve-2018-19134-ghostscript-rce/
Exploiting CVE-2018-19134: Ghostscript RCE through type confusion | GitHub Security Lab

Firmware Attack Surface Reduction (FASR) - Windows drivers | Microsoft Docs

https://docs.microsoft.com/en-us/windows-hardware/drivers/bringup/firmware-attack-surface-reduction
Firmware Attack Surface Reduction (FASR) - Windows drivers | Microsoft Docs

Warning: PyPI Feature Executes Code Automatically After Python Package Download

https://thehackernews.com/2022/09/warning-pypi-feature-executes-code.html
Warning: PyPI Feature Executes Code Automatically After Python Package Download

GitHub - mandiant/macos-UnifiedLogs

https://github.com/mandiant/macos-UnifiedLogs
GitHub - mandiant/macos-UnifiedLogs

Who pollutes your prototype? Find the libs on cdnjs in an automated way - Huli

https://blog.huli.tw/2022/09/01/en/angularjs-csp-bypass-cdnjs/
Who pollutes your prototype? Find the libs on cdnjs in an automated way - Huli

One day short of a full chain: Part 1 - Android Kernel arbitrary code execution | GitHub Security Lab

https://securitylab.github.com/research/one_day_short_of_a_fullchain_android/
One day short of a full chain: Part 1 - Android Kernel arbitrary code execution | GitHub Security Lab