I have released an OpenGraph collector for network shares and my first blogpost at @specterops on the subject!

You can now visualize attack paths to network shares in BloodHound 👀

https://specterops.io/blog/2025/10/30/sharehound-an-opengraph-collector-for-network-shares/

Apply all regulations to the last letter.

2 weeks left to drop your talk in the ring. CFP closes Nov 14! https://sessionize.com/reverse-2026

New post: Abusing macOS tclsh as shellcode loader

https://codecolor.ist/2025/10/31/macos-abuse-tcl-lol/

Happy Halloween 🎃

kind of funny that bugs that are communicated to vendors in a way they don't appreciate can result in no CVE being allocated for the vuln(s). while i guess it is bureaucratically legit (or is it?) it makes the CVE system an unreliable source of truth (more news at 11)
https://bird.makeup/users/0xmadvise/statuses/1983893375498776932

Oooh! Crowd Supply has finally posted a link to my talk at Teardown 2025 about trusting silicon: https://www.youtube.com/watch?v=pxQCApAAT0s

Hello! Hello. It's #nakeddiefriday today, and I wanted to show you one of the older works. This is an automotive ASIC fabbed for Toyota, part number DF028. I do not know the function of this particular device.

SiPron page: https://siliconprawn.org/archive/doku.php?id=infosecdj:toyota:d028f

#electronics #reverseengineering #microscopy #automotive

✋ Stop writing #CSS yourself for your blog. Since 1998, the W3C provides a bunch of ready to use style-sheets: the W3C Core Styles. https://www.w3.org/StyleSheets/Core/Overview

Guaranteed to work on Netscape 4!

#retro #webdev

Anybody remember how twitter used to work over text message?

I think I broke that feature.

You could send and receive tweets, and do some basic interactions like following keywords - for example FOLLOW Guybrush Threepwood would text you any tweets about the classic Lucasarts Adventure Game series Monkey Island™.

So one day at work I had an idea. I took my Nokia and texted FOLLOW lol.

My phone immediately blew up. I got the next tweet someone posted that said lol. And the one after that.

I tried to text STOP lol but my phone couldn't multitask, so every new instance of lol interrupted my attempt to stop them. When my phone's text memory filled up (300!), I found out it deletes old texts and keeps going

So I turned my phone off to stop the flow (I didn't have unlimited texting, this was getting expensive!)

When I got home from the office, Twitter was down. For a while.

When it came back up, the text messaging feature did not come back up. Ever.

So #youtube is deleting videos of people showing how to install #Windows 11 on computers without TPMs and using local accounts. Can't imagine why.

So, please share mine! I make absolutely no money on my videos, I purely educate.
https://peertube.wtf/w/pqMrXFbzpJAS4r5NRj5o8j

Also 🖕 Microsoft

Automating COM/DCOM vulnerability research https://www.incendium.rocks/posts/Automating-COM-Vulnerability-Research/

🎃🎃 if you've got spooky business this weekend, don't forget to put on the Gameboy Halloween chiptune playlist! 🎃🎃

https://www.youtube.com/watch?v=henyMRqMBws

#chiptune #music #gameboy #8bit #halloween

Someone Snuck Into a Cellebrite Microsoft Teams Call and Leaked Phone Unlocking Details
https://www.404media.co/someone-snuck-into-a-cellebrite-microsoft-teams-call-and-leaked-phone-unlocking-details/?utm_source=flipboard&utm_medium=activitypub

Posted into 404 Media @404-media-404media

Microsoft:

As much as 30% of the company's code is written by AI.

Also Microsoft:
Somehow we managed to make it so that clicking the x in Task Manager doesn't close the app. Whoopsie daisy!