02/15

Phishing for Primary Refresh Tokens and Windows Hello keys - dirkjanm.io

https://dirkjanm.io/phishing-for-microsoft-entra-primary-refresh-tokens/
Phishing for Primary Refresh Tokens and Windows Hello keys - dirkjanm.io

First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200) - Quarkslab's blog

https://blog.quarkslab.com/first-analysis-of-apples-usb-restricted-mode-bypass-cve-2025-24200.html
First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200) - Quarkslab's blog

SiphonDNS: covert data exfiltration via DNS | TTP Report

https://ttp.report/evasion/2025/02/03/siphondns-covert-dns-exfiltration.html
SiphonDNS: covert data exfiltration via DNS | TTP Report

Smoltalk: RCE in open source agents

https://securityintelligence.com/x-force/smoltalk-rce-in-open-source-agents/
Smoltalk: RCE in open source agents

smoltalk: RCE in Open Source Agents · Magic Box Blog

https://magic-box.dev/hacking/smoltalk/
smoltalk: RCE in Open Source Agents · Magic Box Blog

Hackers exploit authentication bypass in Palo Alto Networks PAN-OS

https://www.bleepingcomputer.com/news/security/hackers-exploit-authentication-bypass-in-palo-alto-networks-pan-os/
Hackers exploit authentication bypass in Palo Alto Networks PAN-OS

The Havoc framework | Lorenzo Meacci

https://lorenzomeacci.com/the-havoc-framework
The Havoc framework | Lorenzo Meacci