Nullcon Berlin 2024 | Printer Hacking Adventures - Peter Geissler - YouTube
https://www.youtube.com/watch?v=2Lg2JgJUKmA
Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks - Philippe Dourassov - YouTube
https://youtu.be/Sm4G6cAHjWM
blacktraffic (blacktraffic) · GitHub
https://github.com/blacktraffic
Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo
https://thehackernews.com/2024/05/malicious-python-package-hides-sliver.html
プロンプト経由のRCE (リモートコード実行) について | 技術者ブログ | 三井物産セキュアディレクション株式会社
https://www.mbsd.jp/research/20240513/rce/
escaping_the_safari_sandbox_slides.pdf
https://www.synacktiv.com/sites/default/files/2024-05/escaping_the_safari_sandbox_slides.pdf
INC ransomware source code selling on hacking forums for $300,000
https://www.bleepingcomputer.com/news/security/inc-ransomware-source-code-selling-on-hacking-forums-for-300-000/
Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries
https://thehackernews.com/2024/05/severe-vulnerabilities-in-cinterion.html
HackerOne | Report #2372363 - LLM01: Invisible Prompt Injection | HackerOne
https://hackerone.com/reports/2372363
Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia
https://thehackernews.com/2024/05/black-basta-ransomware-strikes-500.html
Hijacking & Spoofing Context Menu Options | mr.d0x
https://mrd0x.com/sentinelone-persistence-via-menu-context/
Visualizing ACLs with Adalanche
https://lsecqt.github.io/Red-Teaming-Army/active-directory/enumeration/visualizing-acls-with-adalanche/
PyPi package backdoors Macs using the Sliver pen-testing suite
https://www.bleepingcomputer.com/news/security/pypi-package-backdoors-macs-using-the-sliver-pen-testing-suite/
GraphRunner: A Post-Exploitation Toolset for M365 - Black Hat USA 2024 | Arsenal Schedule
https://www.blackhat.com/us-24/arsenal/schedule/index.html#graphrunner-a-post-exploitation-toolset-for-m-38184
Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS - SecurityWeek
https://www.securityweek.com/apple-patch-day-code-execution-flaws-in-iphones-ipads-macos/
Hackers use DNS tunneling for network scanning, tracking victims
https://www.bleepingcomputer.com/news/security/hackers-use-dns-tunneling-for-network-scanning-tracking-victims/
GitHub - bjrjk/CVE-2022-4262: Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.
https://github.com/bjrjk/CVE-2022-4262/
Kerberos II - Credential Access
https://labs.lares.com/fear-kerberos-pt2/
Apple backports fix for RTKit iOS zero-day to older iPhones
https://www.bleepingcomputer.com/news/apple/apple-backports-fix-for-rtkit-ios-zero-day-to-older-iphones/
Kerberos I - Overview
https://labs.lares.com/fear-kerberos-pt1/
How Did Authorities Identify the Alleged Lockbit Boss? – Krebs on Security
https://krebsonsecurity.com/2024/05/how-did-authorities-identify-the-alleged-lockbit-boss/
MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices
https://thehackernews.com/2024/05/mitre-unveils-emb3d-threat-modeling.html