cicada 👺👺👺

I guess this site got popular?

I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.

The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().

It's RCE, not auth bypass, and gated/unreplayable.

⚠️ Confirmed: Metrics show that connectivity has collapsed on leading #Ukraine internet operator Kyivstar, as the company reports that it is facing a 'powerful' cyberattack; the incident affecting fixed-line and mobile services is ongoing at the present time 📉

Exploit Microsoft DHCP Servers in AD Domains to Spoof DNS Records No auth required

New blog post is up

open.substack.com/pub/tengusec...

archive.org/details/Snea...

I can spare 1TB for a few weeks, if it helps.

Your Google Workspace Enterprise Standard for your account burke-communications.com has been scheduled for suspension and will soon be canceled, and your data will be lost Hello, We’ve noticed that your account burke-communications.com has been using more storage than currently available to you. For this reason we placed your account in a “read-only” state. Learn more about what happens when you exceed storage limits. Because you have not taken the necessary steps to free up or get more storage, we will suspend your Google Workspace Enterprise Standard subscription in 7 days on December 16, 2023. If you take no action your Google Workspace Enterprise Standard subscription will be canceled. You can export all your organization's data before the subscription is canceled. You will be notified prior to your subscription being canceled. Once your subscription has been canceled, you will lose all your data and cannot recover it. Sincerely, The Google Workspace Team

So I paid Google a lot of money for a long time for a plan that included unlimited storage. They then unilaterally ended that plan, but assured me my data would remain safe—just in read-only mode.

Today they informed me I have seven days to move the entire archive offsite. It's 150 TB.

Please, with C, sell me something!

The New Essential Guide to Electronics in Shenzhen Everything you need to navigate the world's largest electronics market

For someone who wants to visit Shenzhen in the near future, this guide looks awesome!

www.crowdsupply.com/machinery-en...

The Wrong Stuff xkcd.com/2865

But it's 8 am.....

CSS Data Exfiltration Techniques For when you can inject HTML/CSS, but that pesky CSP gets in the way...

New blog about CSS Exfiltration Techniques

open.substack.com/pub/tengusec...

お疲れ様でした

俺も食べたいなー

次回、少し上げてくださいね👺

Have you tried not being expelled?

Exposing the Flaws: Decoding the BLUFFS Attacks on Bluetooth's Secrecy Protocol An analysis of BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses

Coming soon!

Post time: 1701486310

Exposing the Flaws: Decoding the BLUFFS Attacks on Bluetooth's Secrecy Protocol
An analysis of BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses

open.substack.com/pub/tengusec...

Stable Channel Update for Desktop The Stable channel has been updated to 119.0.6045.199 for Mac and Linux and  119.0.6045.199 /.200 for Windows ,  which will roll out over th...

Also: update, yo

chromereleases.googleblog.com/2023/11/stab...

Update, yo

support.apple.com/en-us/HT201222

DNS Under Siege: Unraveling the National-Scale Cache Poisoning Threat An analysis of "TRAP; RESET; POISON - Taking over a country Kaminsky style," authored by Timo Longin and the SEC Consult Vulnerability Lab

DNS Under Siege: Unraveling the National-Scale Cache Poisoning Threat
An analysis of "TRAP; RESET; POISON - Taking over a country Kaminsky style," authored by Timo Longin and the SEC Consult Vulnerability Lab

open.substack.com/pub/tengusec...

Tonight is 2600 at Beemars at 7pm. See y'all there.

It Sure Looks Like a Hacking Campaign Messed Up People's Spotify Wrapped Lots of people who've never heard of Lil Durk are finding out Spotify thinks he's their favorite musical artist.

lmao

www.vice.com/en/article/e...

@ytcracker.bsky.social Hello sir, perhaps you can learn this skill from us

open.substack.com/pub/tengusec...

A cybersecurity analyst

How to Exit Vim (REAL WORKING 2023) Hotel California for your CLI

Our new Substack post is up!

open.substack.com/pub/tengusec...

Python is just a snake and nothing can convince me otherwise