12/05

Blind CSS Exfiltration: exfiltrate unknown web pages | PortSwigger Research

https://portswigger.net/research/blind-css-exfiltration
Blind CSS Exfiltration: exfiltrate unknown web pages | PortSwigger Research

Heap Overflows on iOS ARM64: Heap Spraying, Use-After-Free (Part 3)

https://www.inversecos.com/2022/07/heap-overflows-on-ios-arm64-heap.html
Heap Overflows on iOS ARM64: Heap Spraying, Use-After-Free (Part 3)

Customizing Sliver - Part 1 - hn security

https://security.humanativaspa.it/customizing-sliver-part-1/
Customizing Sliver - Part 1 - hn security

ZDI-23-1512 | Zero Day Initiative

https://www.zerodayinitiative.com/advisories/ZDI-23-1512/
ZDI-23-1512 | Zero Day Initiative

The Obvious, the Normal, and the Advanced: A Comprehensive Analysis of Outlook Attack Vectors - Check Point Research

https://research.checkpoint.com/2023/the-obvious-the-normal-and-the-advanced-a-comprehensive-analysis-of-outlook-attack-vectors/
The Obvious, the Normal, and the Advanced: A Comprehensive Analysis of Outlook Attack Vectors - Check Point Research

Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

https://thehackernews.com/2023/12/microsoft-warns-of-kremlin-backed-apt28.html
Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

Warning for iPhone Users: Experts Warn of Sneaky Fake Lockdown Mode Attack

https://thehackernews.com/2023/12/warning-for-iphone-users-experts-warn.html
Warning for iPhone Users: Experts Warn of Sneaky Fake Lockdown Mode Attack

15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack

https://thehackernews.com/2023/12/15000-go-module-repositories-on-github.html
15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack

Russia's AI-Powered Disinformation Operation Targeting Ukraine, U.S., and Germany

https://thehackernews.com/2023/12/russias-ai-powered-disinformation.html
Russia's AI-Powered Disinformation Operation Targeting Ukraine, U.S., and Germany