It's Never Simple Until It Is (Dell UnityVSA Pre-Auth Command Injection CVE-2025-36604) #DellUnityVSA #CommandInjection #CVE202536604 #PreAuth #watchTowr https://labs.watchtowr.com/its-never-simple-until-it-is-dell-unityvsa-pre-auth-command-injection-cve-2025-36604/
watchTowr Labs
It's Never Simple Until It Is (Dell UnityVSA Pre-Auth Command Injection CVE-2025-36604)
Welcome back, and what a week! We’re glad that happened for you and/or sorry that happened to you. It will get better and/or worse, and you will likely survive.
Today, we’re walking down the garden path and digging into the archives, publishing our analysis…
Today, we’re walking down the garden path and digging into the archives, publishing our analysis…
Ghost in the Cloud: Weaponizing AWS X-Ray for Command & Control https://medium.com/@dhiraj_mishra/ghost-in-the-cloud-weaponizing-aws-x-ray-for-command-control-7539d60f1d77
Medium
Ghost in the Cloud: Weaponizing AWS X-Ray for Command & Control
Summary & Background
LLM Code Review vs Deterministic SAST Security Tools #LLMCodeReview #SASTvsAI #IntentBasedSecurity #SecurityAutomation #FraimAI https://blog.fraim.dev/ai_eval_vs_rules/
blog.fraim.dev
LLM Code Review vs Deterministic SAST Security Tools
How do the latest models stack up against traditional code scanners?
Taking remote control over industrial generators #APISecurity #IndustrialGenerators #RemoteControl #Vulnerability #BrokenAuthorization https://eaton-works.com/2025/10/06/industrial-generator-hack/
Eaton-Works
Taking remote control over industrial generators
Industrial generator smart platform had insecure APIs that could enable remote control by anyone.
Bash a newline: Exploiting SSH via ProxyCommand, again (CVE-2025-61984) #SSH #RCE #ProxyCommand #ShellExploit #GitSubmodules https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984
Why I Fired My AI Security Assistant (Sort Of) #AISecurity #LLMStrategy #CriticalThinking #CodeReview #HumanInLoop https://maxwelldulin.com/BlogPost/Why-I-Fired-My-AI-Security-Assistant
Strikeout Security Blog
Why I Fired My AI Security Assistant (Sort Of)
LLMs can speed up security tasks like code comprehension and proof of concept creation. But, over-reliance risks missing subtle vulnerabilities and weakening core skills. How do we use LLMs optimally?
How we build complex software with type theory, strong specifications, and a little bit of LLM magic #LLMAssistedDev #SpecDriven #TypeTheory #StructuredCoding #SoftwareArchitecture https://www.atelierlogos.studio/blog/2025-12-18-how-we-build-complex-apps
Atelier Logos
How we build complex software with type theory, strong specifications, and a little bit of LLM magic
MEDICAL DEVICE Security Analysis #MedicalDeviceSecurity #VulnerabilityResearch #FaultInjection #HardwareHacking #ResponsibleDisclosure https://cc-sw.com/medical-device-security-analysis/
IDA tips for reversing U-Boot #IDAPro #Uboot #ReverseEngineering #Firmware #CodeDiscovery https://www.errno.fr/IDA_tips_for_reversing_uboot.html
Living off Node.js Addons #NodejsAddons #ElectronSecurity #PostExploitation #RedTeaming #CodeExecution https://www.adversis.io/blogs/living-off-node-js-addons
www.adversis.io
Living off Node.js Addons
Swap out compiled Node.js addons with your own code and force a legitimate Electron application load your code
More Than DoS (Progress Telerik UI for ASP.NET AJAX Unsafe Reflection CVE-2025-3600) #CVE20253600 #TelerikUI #UnsafeReflection #RCE #ASPNetSecurity https://labs.watchtowr.com/more-than-dos-progress-telerik-ui-for-asp-net-ajax-unsafe-reflection-cve-2025-3600/
watchTowr Labs
More Than DoS (Progress Telerik UI for ASP.NET AJAX Unsafe Reflection CVE-2025-3600)
Welcome back. We’re excited to yet again publish memes under the guise of research and inevitably receive hate mail. But today, we’ll be doing something slightly different to normal.
“Wow, watchTowr, will you actually be publishing useful information instead…
“Wow, watchTowr, will you actually be publishing useful information instead…
A Story About Bypassing Air Canada's In-flight Network Restrictions #AirCanadaWifi #WifiBypass #DNSExploit #Port53 #NetworkHacking https://ramsayleung.github.io/en/post/2025/a_story_about_bypassing_air_canadas_in-flight_network_restrictions/
In Pursuit of Simplicity
A Story About Bypassing Air Canada's In-flight Network Restrictions
1 Prologue
A while ago, I took a flight from Canada back to Hong Kong - about 12 hours in total with Air Canada.
Interestingly, the plane actually had WiFi:
However, the WiFi had restrictions. For Aeroplan…
A while ago, I took a flight from Canada back to Hong Kong - about 12 hours in total with Air Canada.
Interestingly, the plane actually had WiFi:
However, the WiFi had restrictions. For Aeroplan…
IAmAntimalware: Inject Malicious Code Into Antivirus #AntivirusEvasion #CodeInjection #ProtectedProcessBypass #CryptoAPIHijack #IAmAntimalware https://www.zerosalarium.com/2025/10/IAmAntimalware-Inject-Code-Into-Antivirus.html
Zerosalarium
IAmAntimalware: Inject Malicious Code Into Antivirus
IAmAntimalware employs new red team techniques by cloning services of Antivirus. Allow inject code into processes whitelisted, protected by Antivirus
🤔2
Blind Enumeration of gRPC Services #gRPC #Enumeration #PenetrationTesting #VulnerabilityDiscovery #BlackBoxTesting https://www.adversis.io/blogs/blind-enumeration-of-grpc-services
www.adversis.io
Blind Enumeration of gRPC Services
When you're handed an SDK with no documentation and told "the backend is secure because it's proprietary," grpc-scan helps prove otherwise
LLM Honeypot vs. Cryptojacking: Understanding the Enemy #Cryptojacking #LLMHoneypot #MalwareAnalysis #Beelzebub #Cybersecurity https://beelzebub.ai/blog/llm-honeypot-vs-cryptojacking-understanding-the-enemy/
Beelzebub
LLM Honeypot vs. Cryptojacking: Understanding the Enemy | AI-Native security platform
AI-Native security platform: Deceive, Detect, Respond. “You can’t defend. You can’t prevent. The only thing you can do is detect and respond.” Bruce Schneier. We turn that hard truth into your tactical advantage. Our AI-based decoys, built using our open…
Strategies for Analyzing Native Code in Android Applications: Combining Ghidra and Symbolic Execution for Code Decryption and Deobfuscation https://revflash.medium.com/strategies-for-analyzing-native-code-in-android-applications-combining-ghidra-and-symbolic-aaef4c9555df
Medium
Strategies for Analyzing Native Code in Android Applications: Combining Ghidra and Symbolic…
In my work analyzing native code in Android applications, I often try different techniques. Some work, others not so much. I’ve realized I…
LG WebOS TV Path Traversal, Authentication Bypass and Full Device Takeover #LGWebOSTV #PathTraversal #AuthenticationBypass #DeviceTakeover #Vulnerability https://ssd-disclosure.com/lg-webos-tv-path-traversal-authentication-bypass-and-full-device-takeover/
SSD Secure Disclosure
LG WebOS TV Path Traversal, Authentication Bypass and Full Device Takeover - SSD Secure Disclosure
Affected Versions Vendor Response The vendor has issued an advisory SMR-SEP-2025, available at: https://lgsecurity.lge.com/bulletins/tv in regard to the below described vulnerability Credit The vulnerability was disclosed during our TyphoonPWN 2025 LG Category…
😱1👾1
Modus Operandi of Subtle Snail #PRODAFT #CATALYST https://catalyst.prodaft.com/public/report/modus-operandi-of-subtle-snail/overview
EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State #EDRFreeze #EDRBypass #AntivirusDisable #WerFaultExploit #RedTeam https://www.zerosalarium.com/2025/09/EDR-Freeze-Puts-EDRs-Antivirus-Into-Coma.html
Zerosalarium
EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State
EDR-Freeze exploits the vulnerability of WerFaultSecure to suspend the processes of EDRs and Antimalware, halting the operation of Antivirus and EDR
Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware https://blog.lastpass.com/posts/attack-targeting-macs-via-github-pages
Lastpass
Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware - The LastPass…
Were tracking an ongoing, widespread infostealer campaign targeting Mac users through fraudulent GitHub repositories.
😱2🍾1