Nad

A ridiculously deep dive into the Coruna Exploits - Risky Business Media Join James Wilson in this solo podcast as he takes a (ridiculously) deep dive into the Coruna exploit kit. James was a software engineer a [Read More]

Yall are gonna wanna listen to this one:

risky.biz/RBFEATURES5/

Found this bug on the weekend :)
curl.se/docs/CVE-202...

Curl is cool. For the love of the game..

Inside Coruna: Reverse Engineering a Nation-State iOS Exploit Kit | NadSec Deep-dive into Coruna - a nation-state iOS exploit kit reverse-engineered from obfuscated JavaScript. WebKit RCE, PAC bypass, JIT cage escape.

Kernel Analysis now available for Coruna malware
Blog post and full technical analysis of the whole chain also updated significantly.
-Corrections made
www.nadsec.online/blog/coruna
www.nadsec.online/blog/coruna-...
github.com/Rat5ak/CORUN...
www.nadsec.online/blog/coruna-...

TIACS - The Home of Blue Collar Counselling TIACS is the home of blue-collar counselling, providing free and confidential mental health support for tradies, truckies, farmers, apprentices and their loved ones, Australia wide.

Normalise giving a percentage of your bug bounties to charity.

tiacs.org comes to mind. Shout out to blue color workers. Farmers n truck drivers n stuff.

The vuln disclosures lately… straight sagacious.

Sounds correct. Hacked the company, stole the coins (prolly thinking “this bs thing Claude wrote won’t work”). Contacted company who then hired someone else to help move the funds back but let the hacker keep 320k or w/e it was.

Also I imagine if anyone wants to know what’s going on in any active war zones. There would hundreds of thousands of different angles/views you could watch from. No need to be on twitter posting bs when you can just and look.

These days you can just hack the 4K camera in the corner of the room. See all the screens from that.

The problem is likely so much worse than you may actually realise at a glance.

Yup 😭😭 I tried to tell them. Microsoft don’t care.

Also other blog posts omit a lot of detail.. the technical analysis covers everything Google does not.
Mandiant are noobs.

Nadsec don’t fuck around 🫡

GitHub - Rat5ak/CORUNA_TECHNICAL_ANALYSIS: A Complete Technical Teardown of a State-Grade iOS/macOS Watering-Hole Exploit Chain A Complete Technical Teardown of a State-Grade iOS/macOS Watering-Hole Exploit Chain - Rat5ak/CORUNA_TECHNICAL_ANALYSIS

github.com/Rat5ak/CORUN...

-originally dumped yesterday by - github.com/matteyeux/co...

Reverse-engineered Coruna - a nation-state iOS exploit kit - from raw JavaScript. 28 modules + MUCH MORE!
www.nadsec.online/blog/coruna
www.nadsec.online/blog/coruna-...
(technical analysis more interesting, read coruna blog post first, technical analysis looks better on github, link on-site)

Finna drop this whole exploit chain for iOS and Mac.

7 years in prison. That’s all you get apparently..

مصرف سوريا المركزي on X: "SYRIAN GOV HACKED https://t.co/mDP91CGMNi" / X SYRIAN GOV HACKED https://t.co/mDP91CGMNi

x.com/sycbgov/stat...

Syrian Gov Hacked:
Live RN

x.com/sycbgov/stat...

dev on X: "THIS GUY LITERALLY RECREATED A GOD’S-EYE 4D REPLAY OF OPERATION EPIC FURY. > AI swarm captured live OSINT to build a 4D reconstruction of the Iran strikes. > minute-by-minute 3D replay of the strikes > airspace cleared and strike coordinates locked over Tehran > GPS https://t.co/E65ux7DbfX" / X THIS GUY LITERALLY RECREATED A GOD’S-EYE 4D REPLAY OF OPERATION EPIC FURY. > AI swarm captured live OSINT to build a 4D reconstruction of the Iran strikes. > minute-by-minute 3D replay of the strikes > airspace cleared and strike coordinates locked over Tehran > GPS https://t.co/E65ux7DbfX

Damn, Claude got kill-cam.

2026 is messed tf up. We got claude-cam before GTA6.
Not a hoverboard in sight.

x.com/i/status/202...

onaroll

Just remember it is illegal to setup an automated hacking bot using ai agents and unleash it upon the internet with the ability to scrape more api keys for fuel as it goes.
That’s totally not cool to do. No one try it.

I shouldn’t have made assumptions

Sorry! I thought they was joking. This is my bad. Also how the fuck is it still here.

The kids now days have it easy.
Back in my day, we had to manually prompt an LLM and generate code in small blocks and then work out how those blocks may or may not go together through raw determination and hard prompting, we didn’t have no damn agents doin all the work for us!

I just ordered a frame!

Claude, ready my discombobulator!

We’re going in..

I have the featured turn on. Can confirm it just rewrites my text messages but worse for notifications

I dno what this is but feel free to leave it in space.

Wow that looks shit.

I don’t NEED a cigarette. I WANT one.