[RSS] My `Blind Date` with CVE-2025-29824

Another Windows CLFS exploit

https://starlabs.sg/blog/2025/07-my-blind-date-with-cve-2025-29824/

[RSS] NINA - A service letting AOL, AIM, ICQ and soon Skype live again by reverse-engineering their protocols.

https://nina.chat/

[RSS] The Fundamental Failure-Mode Theorem: Systems lie about their proper functioning

https://devblogs.microsoft.com/oldnewthing/20250716-00/?p=111383

[RSS] An Interesting Cache Coherence Vulnerability in the Mali GPU Driver

https://u1f383.github.io/android/2025/07/16/an-interesting-cache-coherence-vulnerability-in-the-mali-gpu-driver.html

[RSS] CVE-2025-4660: Forescout SecureConnector RCE

https://www.netspi.com/blog/technical-blog/red-teaming/cve-2025-4660-forescout-secureconnector-rce/

[RSS] Daemon Ex Plist: LPE via MacOS Daemons

https://swarm.ptsecurity.com/daemon-ex-plist-lpe-via-macos-daemons/

Project: openssl-static-gcc-dwarf 3.4.0
File: openssl
Address: 005c87c0

evp_kem_from_algorithm

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F005c87c0.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F005c87c0.json&colors=light

I want someone to make a video series where they exceed cable lengths and show what happens.

what happens if you have a 2km USB cable? what works and what breaks?

If you are enabling an AI feature scanning all your emails, consider this will also scan the emails people have sent you. This information could include personal or otherwise legally protected information.

If this data leaks later (as it regularly happens with these systems), this could mean severe legal consequences for you down the road.

YOU are responsible for protecting the data of others under your custody.

This includes the messages and emails others send to you.

#NoAI #AI #Privacy

It has been a while but the latest edition of the Security Liberation Front is out!

https://slf.fish/

NEW: Security researchers and CISA warn that hackers are exploiting a flaw in the Signal clone TeleMessage, which could lead to them stealing "plaintext usernames, passwords, and other sensitive data."

@h0wdy, the researcher who analyzed it said they were "in disbelief at the simplicity of this exploit."

https://techcrunch.com/2025/07/17/hackers-are-trying-to-steal-passwords-and-sensitive-data-from-users-of-signal-clone/

Go hack more AI shit please. Now.

https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape

Unfortunately the reel-to-reel museum at Keszthely, #Hungary was closed, but the TV&radio&turntable museum was open. The traditional decorations on and around the items were especially cool!

(...) Thinking this way will teach you two things about computers: One, there's no magic, no matter how much it looks like there is. There's just work to make things look like magic. And two, it's crazy in there.

— Paul Ford

#computers

The Retro Museum in the city of Eger, Hungary 🇭🇺 is jam-packed with 20th century Hungarian and East-Bloc nostalgia, from prewar times to the late 90s.

It's small, but they have thousands and thousands of items on show, all setup with lots of love and care. Can highly recommend, it's great fun if you're into this kind of thing.

Of course it helps if you're Hungarian and recognize your childhood toys, and lots of other everyday items lost in time.

https://retromuzeumeger.hu

#retro #hungary

That's 5D-educational chess.

#FuckGenAI #ChatGPT #GenAIsucksCamelDong

disconnect3d from Trail of Bits presents Pwndbg at #EuroPython.
Pwndbg is a Python tool that makes low-level debugging actually enjoyable for security work.
Pwndbg provides:
→ Clear context displays for assembly analysis
→ Built-in heap and stack visualization
→ Streamlined commands for exploit development
→ Python extensibility for custom analysis
Today at 10:30 at Terrace 2A. Perfect for anyone doing systems security, malware analysis, or CTF challenges.
https://ep2025.europython.eu/session/pwndbg-low-level-debugging-and-exploit-development-with-python

Exciting! @vector35 's excellent #BinaryNinja ships with built-in BinExport in the latest dev version!
Here's how to use it with #BinDiff: https://dev-docs.binary.ninja/guide/binexport.html

Microsoft marketing: “Your data stays in Europe.”

Microsoft’s Legal Director (under oath, in French Parliament): “No, I cannot guarantee that.”

Still think Microsoft Teams is a sovereign solution?

Credit @ponceto91 for the meme

https://x.com/wire/status/1944851027381117019

#microsoft #DataPrivacy #DigitalSovereignty #europe

I have a friend that’s working on learning Rust, and looking for something more hands on / interactive. What’s the leading option these days?