@cR0w @catsalad Whoever decided that this bullshit should be in Q4 should have their legs broken.

Micropatches for Windows Installer Elevation of Privilege Vulnerability (CVE-2024-38014)
https://blog.0patch.com/2024/10/micropatches-for-windows-installer.html

Google Chrome security advisory: Stable Channel Update for Desktop
New version 129.0.6668.89/.90 for Windows, Mac and 129.0.6668.89 for Linux includes 4 security fixes, 3 externally reported:

• CVE-2024-7025 (high) Integer overflow in Layout
• CVE-2024-9369 (high) Insufficient data validation in Mojo
• CVE-2024-9370 (high) Inappropriate implementation in V8

No mention of exploitation.

#google #chrome #vulnerability #cve

@wendynather @douglevin @RGB_Lights From a performance perspective, exclusion management is important. Too many of these security tools are "expanding capability" to the point they have overlapping functions and you're chasing race conditions.

Did tool A catch the thing because it checked first, or did tool B miss it?

Is tool A misbehaving because tool B is messing with the process or locking the target?

🚀 Taking a quick dive into Ghidra 11.2’s stack-based string handling! 🛠️

Check out the improvements from version 11.1.2 to the new release. Stack strings have been a long time coming, but Ghidra is ever improving! 👏 #Ghidra #ReverseEngineering #everydayghidra

It’s troubling to see intrusion responses struggle due to lack of logging and visibility. Build a robust logging strategy and practice hunts to truly understand what you're monitoring and what you can trust. Incident time is a painful moment for discovery learning.

We're both close to half a mil total downloads and to finalizing Issue #5 (if you want to get your article in, you have literally a few more days left to submit! there's still time, but not a lot)

https://bird.makeup/@pagedout_zine/1841396794602737794

Today, I'm feeling generous and giving away 2 free tickets for #r2con2024. What do you have to do?

You have to reply to this tweet saying what you like most about #radare and what you use it for. The most original comment will be the winner! @radareorg @pancake https://rada.re/con/2024/

"After decades of searching for photo-realism and performance, the soon to be over myth of perpetual growth is leaving the stage to more computationally minimal aesthetics and dispositives to refocus on the power of concept, interaction, stories and subjectivity in a scarce real-world."

From the European Permacomputing Gamejam Site:
https://itch.io/jam/europermajam

Another cool blog post by @sploutchy (Compass Security)

"COM Cross-Session Activation"

Quick read, and straight to the point. This article provides a real-life example (Google Updater service here) showing one way to exploit a COM class for local privilege escalation on Windows. 👌

👉 https://blog.compass-security.com/2024/10/com-cross-session-activation/

#windows #vulnerability #privesc #cve #CVE_2024_7023

"Honest Achmed’s Used Cars and Certificates welcomes Sectigo’s interpretation of uniqueness. As such, Achmed intends on rebranding as 'Sectigo'."

https://bugzilla.mozilla.org/show_bug.cgi?id=1917405#c15

Now this is interesting, Windows 11 24H2 allows you to connect to an SMB server with an arbitrary TCP port. Could come in handy ;-)
https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-alternative-ports-now-supported-in-windows-insider/ba-p/3974509

[RSS] Misunderstanding the "Prevent access to registry editing tools" policy

https://devblogs.microsoft.com/oldnewthing/20241001-22/?p=110330

[RSS] Java Ring: One Wearable to Rule All Authentications

https://hackaday.com/2024/10/01/java-ring-one-wearable-to-rule-all-authentications/

[RSS] NSO Group indicates rare agreement with Apple over dismissal of lawsuit

https://cyberscoop.com/nso-group-court-filing-apple-lawsuit/

@dcoderlt disobedient animals become glue y'know...

This was a fun podcast with @aionescu discussing all things kernel: https://podcasts.apple.com/us/podcast/adversary-universe-podcast/id1694819239?i=1000671431945

if ($animal1 == $animal2 ){
if ($animal1 !== $animal2){
echo "you are not equal enough, sry";
}
}

#orwell #php

@bert_hubert some pigs are more equal