(Pwn2Own) ICONICS GENESIS64 genbroker64 Use-After-Free Remote Code Execution Vulnerability

**Summary:** By using this vulnerability an attacker can find a twitter account by it's phone number/email even if the user has prohibited this in the privacy options.

**Description:** The...

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution. - janoglezcam...

A U-Boot hacking toolkit for security researchers and tinkerers - GitHub - nccgroup/depthcharge: A U-Boot hacking toolkit for security researchers and tinkerers

probably something similar... made a custom stager (this time for Sliver) useful for EDR bypass:
1.) unhook DLLs (by refreshing them, code stolen from @armitagehacker)
2.) instead of classical reflective DLL loading, used the DarkLoadLibrary custom loader…

Researcher bypasses email filter with inspired style tag trickery

Breaking down the Maelstrom DLL and Loader to identify and discuss remediations for indicators-of-compromise.

unblob is an accurate, fast, and easy-to-use extraction suite. unblob parses unknown binary blobs for more than 30 different archive, compression, and file-system formats, extracts their content recursively, and carves out unknown chunks that have not been…

Microsoft has released security updates to address a high severity Windows zero-day vulnerability with publicly available exploit code and abused in attacks.

Dark web actors have stolen massive databases of airline passengers from Malaysia and UAE and advertised them for $1,000 each.