Posts
2762Following
681Followers
1504
buherator
buherator
https://blog.exploits.club/exploits-club-weekly-newsletter-89-ios-gpu-driver-bugs-kernel-stack-uafs-hardware-wallet-auth-bypasses-and-more/
0
0
1
repeated
Costin Raiu
craiu@bird.makeup
So this October 2025 F5 security notification is pretty wild because of the sheer volume of vulnerabilities disclosed: more than 30 high-severity CVEs (!) and around a dozen medium-severity ones in a single release cycle. This affects almost every F5 product family, BIG-IP (all modules), BIG-IP Next, F5OS, and related components. Something we don’t see very often... and a lot of these vulnerabilities score above 8.0; remote exploitation, denial-of-service or privilege escalation. Also, the number of affected software branches (from 15.x through 17.x) means most F5 deployments are touched in some way. YMMV.
In short, this quarter’s bulletin is probably F5’s heaviest security updates ever. If you run F5 products, patch now. https://my.f5.com/manage/s/article/K000156572
0
3
0
buherator
buheratorhttps://devblogs.microsoft.com/oldnewthing/20251014-00/?p=111681
1
1
5
repeated
/r/netsec
_r_netsec@infosec.exchangeyIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242) - watchTowr Labs https://labs.watchtowr.com/yikes-watchguard-fireware-os-ikev2-out-of-bounds-write-cve-2025-9242/
0
3
0
repeated
bert hubert 🇺🇦🇪🇺🇺🇦
bert_hubert@eupolicy.socialWith the AI-bubble looking close to bursting, here I present a pre-mortem, in which I state that much of AI is simultaneously mega-impressive and still mostly useless. The collapse of the bubble does not mean the technology will go away, however. Also, there are extremely useful AI applications already that we should not lose sight of once we are post-collapse. Plus some thoughts on 'intelligence' & evolution:
https://berthub.eu/articles/posts/an-ai-premortem/
6
6
0
repeated
SSD Secure Disclosure
SSDSecureDisclosure@infosec.exchangeEver wondered how virtual machines talk to their host without relying on traditional networking?
Meet vsock (Virtual Socket) - the Linux kernel’s built-in communication layer for blazing-fast, low-latency host ↔ guest interaction.
Unlike TCP/IP, vsock skips the network stack entirely and works directly over the hypervisor, making it perfect for control channels, telemetry, and secure VM management in QEMU/KVM, VMware, and Hyper-V environments.
Read our full technical breakdown: https://ssd-disclosure.com/an-introduction-to-chrome-exploitation-webassembly-edition-2/
0
2
0
buherator
buheratorhttps://www.preludesecurity.com/blog/windows-arm64-internals-deconstructing-pointer-authentication
0
0
1
buherator
buheratorhttps://blog.dfsec.com/ios/2025/10/14/Depicting-an-iOS-Vulnerability/
0
1
3
repeated
4Dgifts
4Dgifts@mastodon.socialIn the year of Our Lord Two Thousand and Twenty-Five, BIG-IP devices from F5 Inc. are vulnerable to TCP hijacking due to use of a bad TCP Initial Sequence Number generator.
https://my.f5.com/manage/s/article/K000151297
2
4
0
repeated
stf
stf@chaos.socialyippie-kee-yay! just added teensy4.0 support to #klutshnik #zephyr - the 4.0 is smaller and cheaper than the 4.1 but comes with the same powerful cortex-m7 mcu. with this change klutshnik now runs on 4 different embedded systems: xiao_esp32s3, rpi pico2 (w) and the teensy4.1 and teensy4.0. \o/
also rewrote the provisioning interface which is now a proper shell on usb cdc-acm.
check it out on #radicle
rad:z2EBBi4vui98QV8Mk8DT3c25yZbJ4
or on the ms-trap: https://github.com/stef/klutshnik-zephyr
0
1
1
1
0
0
repeated
As a FIREWALL VENDOR why would you do something like this?
1
1
0
repeated
James Forshaw 
tiraniddo@infosec.exchange
RE: https://infosec.exchange/@tiraniddo/115295709143228986
Well, Windows Administration Protection still hasn't been released even though technically 25H2 has. So none of those 6 bypasses have been fixed, but then again there's no code to bypass, so.... At least some of them are fun UAC bypasses :)
2
3
0
repeated
radare 
