[RSS] Paint It Blue: Reversing Win32k's Callbacks

https://idov31.github.io/posts/paint-it-blue-reverse-win32k

fucked up that computers don't look like this anymore. tell me you wouldn't live here if you were a one or a zero

This week I feel like I need a t-shirt with the deepest wisdom Reddit can offer about #ReverseEngineering, so I used an LLM to convert a screenshot to an SVG:

https://github.com/v-p-b/dreadful-reversing/blob/main/fuck-reverse-engineering.svg

Go nuts!

The Dutch government has shut down all Citrix Netscalers and is asking every gov org to perform incident response

HT @bert_hubert

https://berthub.eu/tkconv/document.html?nummer=2026D47262

#PitScaler

Kiteworks patches the vulnerability law enforcement warned it about last week and revokes its "take server offline" recommendation

https://www.kiteworks.com/company/press-releases/kiteworks-restores-systems-credible-threat/

Whoa!!!

https://lists.debian.org/debian-security-announce/2026/msg00441.html

#IT #Security #Linux #Debian

New kill chain just dropped

[RSS] CVE-2026-43783: Repair Permissions - Get Root: LPE via DesktopServicesHelper in macOS 26.5

https://ptswarm.com/blog/cve-2026-43783-repair-permissions-get-root-lpe-via-desktopserviceshelper-in-macos-26-5/

[RSS] Sender spoofing in Proton Mail via display-name homograph

https://alonsovidales.github.io/protonmail-sender-spoofing/

OpenAI delaying its model launch (and IPO) due to security concerns reminds me of 8yo me delaying the launch of my nerve gas rocket (made of paper and stuff I found in the kitchen, probably inspired by The Rock with Nicholas Cage) for similar reasons.

Later we agreed in mutual disarmament with my toy soldiers.

I made a thing: it's called the DNS Museum, and it's because I kept joking at the start of my talk, "Bizarre and Unusual Uses of DNS" that a lot of the things weren't alive anymore - so it was more like a museum of DNS and I was the curator. Anyway, I'm on holiday right now so I finally got around to doing something about that joke.

Consider this a first draft, I have way more notes about other things to add at some point. It's also a little bland, but one thing I'm not is a designer. Let me know about any issues - AI was used to help create the site, but of course I'm responsible for any mistakes. It's on GitHub too, so PRs are welcome.

https://dns.museum

Some brief thoughts on AI in hacking and optimizing for speed:
https://mahaloz.re/2026/09/28/hack-race.html

A bit is also a response to Flare-On 13.

RE//verse 2027 is on the way, and you should probably be there! If you know, you know. If you don’t, this is a very good year to fix that. https://re-verse.io/

High level diff of iOS 27.0 vs. iOS 27.0.1 🎉

https://github.com/blacktop/ipsw-diffs/blob/main/27_0_24A437_vs_27_0_1_24A446/README.md

We trust you have received the usual lecture from the local System Administrator.

pagliacci.jpg

It's that time of the year again...

For my birthday, my brother-in-law gave me a 4992-digit hex number that, when used as a seed for Python’s random number generator, makes it so that printing a sequence of “random” ASCII characters actually prints a birthday greeting.

I find it rather amazing that this is possible!

This is the program he sent with the seed:

with open("seed.txt", encoding="ascii") as handle:
seed = int(handle.read().strip(), 0)
r = random.Random(seed)
pending = ""
while True:
character = chr(r.randrange(128))
if pending + character == "\x1e\x1f":
break
print(pending, end="")
pending = character
print()

CVE-2026-88771 - the loaded Citrix footgun went off again, and the screaming noise is back in our ear.

You knew it was coming - enjoy the latest watchTowr Labs blogpost.

https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/

[RSS] RCE in OpenCode (GHSA-632h-h47v-g4x4)

https://securitylabs.datadoghq.com/articles/opencode-upgrade-remote-code-execution/