CMIYC registration is now open! https://contest-2026.korelogic.com/howto_register/
#defcon #DEFCON34

Look what I found on archive: Beavis & Butthead Doom Add-On GAM-098

https://archive.org/details/beavisbuttheaddoomgam098

New video: App Execution Aliases.

Type notepad, get the Store one, not the System32 one. Why? App Execution Aliases.
https://trainsec.net/library/windows-internals/how-windows-app-execution-aliases-work-and-how-to-read-them-in-c/

RE: https://mastodon.social/@d_olex/116902388645366483

Many people have drawn entirely wrong conclusions from this post. Meanwhile, an actual solution for preventing this kind of tracking lays in a different ballpark:
1) Get a burner laptop for your hacktivism or organized crime activities, never use it for anything else;
2) Get some dedicated hardware to run your VPN or Tor client, for example -- a portable battery powered router with OpenWrt;
3) Configure and use this setup in a way that prevents the laptop from accessing the internet directly;

"Good morning, Little Piglet," said Eeyore. "If it _is_ a good morning," he said. "Which I doubt," said he. "Not that it matters," he said.

How do the closed-source parts of Apple's Private Cloud Compute work? We had a look at it 🍎👀

Paper: https://dl.acm.org/doi/abs/10.1145/3765613.3811691
Slides: https://hpi.de/fileadmin/user_upload/90_Research_Groups/classen/Documents/ACM_WiSec_26_PCC_Presentation.pdf

os: Root escape via symlink plus trailing slash (CVE-2026-39822) #golang

https://github.com/golang/go/issues/79005

@david_chisnall @hyc @icing @dysfun My educated guess is IBM i/AS400 are one of those:

https://www.ibm.com/docs/en/i/7.5.0?topic=extensions-c99-compatibility
https://www.ibm.com/docs/en/i/7.5.0?topic=extensions-c99-features-as-c89

Let's go...

[RSS] CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys

https://www.thezdi.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys

I’ve been working with computers for five decades. Some people view me as an “expert” in certain subjects.

And I can tell you that when I am learning a new technology I still feel like the dumbest newb on the planet. I make tons of mistakes. I go down stupid rabbit holes of my own making. I have tons of self doubt.

So give yourself some grace. Everybody goes through this phase. Take a deep breath. Believe that you can do this.

Apple SEAR is hiring an offensive security researcher focused on wireless security!

We're looking for talented researchers to help find and exploit vulnerabilities across wireless technologies.

Apply here: https://jobs.apple.com/en-us/details/200671326-2911/offensive-security-researcher-wireless-security?team=SFTWR

If you love digging into wireless stacks and

@mfierst @electret @lrhodes "All those moments will be lost in time, like tears in rain."

@lrhodes Thanks that makes sense...sort of...

if you're not gonna be at EMF you can get some here:

https://unsafewarnings.etsy.com

@electret @lrhodes Ahh you mean the smaller players like Obsidian ! I bet they can absolutely see your shit, but they may be legally constrained in what they can do with it (maybe... have you read the TOS?). Granting access to an LLM most likely changes your Terms and Conditions (not because it's a technical necessity, but because of the business model of the LLM provider).

Btw this is a useful site:

https://tldrtos.com/

@electret @lrhodes Honest question: What on Earth made you feel that way? I see absolutely zero indicators of privacy in any mainstream LLM app (similarly to Google/Meta).

@electret @lrhodes It's always been someone else's computer...

@lrhodes So anything written on GDocs or sent to a GMail address is also fair game then?

CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass https://github.com/Cedrico03/CVE-2025-45422---Bbox