The fastest way to get VIP treatment when you land...seriously, how dumb do you have to be to try something like this? This person on Reddit stole my thoughts verbatim: "committing federal crimes from inside a sealed metal tube that lands exactly where the feds are waiting is certainly a strategy."
https://www.reddit.com/r/delta/comments/1vl52vr/dl591_lasatl_arrival_met_by_federal_agents/
🧶
RE: https://mastodon.social/@VeroniqueB99/117074185851484440
@emilymbender @alex I'm sure you'll love it!
Finally, to close out our short #GitHub tour, a few vintage repositories 🍷 that have aged into historical curiosities and are now (mostly) harmless. Still worth a look as a learning resource, for humans and AI alike 🤖
https://github.com/0xdea/exploits - a collection of my public exploits from CVE-1999-1587 onwards
https://github.com/0xdea/shellcode - a small collection of my shellcode samples
https://github.com/0xdea/advisories - my public advisories starting from CAN-2003-0190, err..., CVE-2003-0190 up until today
Thanks for following along, and enjoy your summer break! ☀️
RE: https://mastodon.social/@mrmacintosh/117075193323529726
A hacker's hacker. 🫡
OpenSSH 10.5 has just been released, mostly to fix a handful of security vulnerabilities.
https://www.openssh.org/releasenotes.html#10.5
We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.
High level diff of macOS 26.6.1 vs. macOS 26.6.2 🎉
https://github.com/blacktop/ipsw-diffs/tree/main/26_6_1_25G76_vs_26_6_2_25G82/README.md
RE: https://social.lol/@phillip/117061432689860232
The postmortem of the hack on my Forgejo instance is here! I had fun investigating and writing it, so I hope y’all enjoy reading about it :)
this program was generated with LLVM assistance
"don't you mean LLM assistance?"
no, i mean i implemented a few examples and left the rest as UB for the compiler to figure out https://gcc.godbolt.org/z/hd5Mhdhev
Somebody posted a Windows 11 LPE writeup, with a CVE that doesn't yet exist (CVE-2026-62737).
By poking at kloader's ExecutionContext, we can get kernel mode execution at an arbitrary address.
A stock Windows VM won't have a NIC that uses the NetAdapterCx framework, so will not show as affected. But you can start that service to see it in action.
The PoC has a hard-coded 0xFFFFF80041414141 as an execution target. I'm sure that somebody knowledgeable with Windows kernel stuff can figure out how to modify this to do something useful.
I predict that CVE-2026-62737 will be included in this Patch Tuesday lineup.
Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.
RE: https://live.acarsdrama.com/@acarsdrama/117072256729860162
come on now. be cool guys.