Live Updates: Sha1-Hulud, The Second Coming - Hundreds of NPM Packages Compromised #NPMsupplychain #Sha1Hulud #MalwareAttack #CredentialTheft #DataDestruction koi.ai/incident/live-…
English
reverseame
5.5K posts
reverseame
@reverseame
RME-DisCo research group from University of Zaragoza. Special interest on software and systems security. Link to our Telegram channel: https://t.co/UmkcXVG8MU
Zaragoza, Spain Joined Ocak 2016
1 Following21.8K Followers
A Reverse Engineer’s Anatomy of the macOS Boot Chain & Security Architecture #macOSSecurity #AppleSilicon #SecureBoot #ReverseEngineering #HardwareTrust stack.int.mov/a-reverse-engi…
English
Sliver C2 Insecure Default Network Policy (CVE-2025-27093) #SliverC2 #Wireguard #CVE202527093 #NetworkPolicy #CommandAndControl hngnh.com/posts/Sliver-C…
English
When Updates Backfire: RCE in Windows Update Health Tools #RCE #WindowsUpdate #AzureVulnerability #MicrosoftSecurity #AbandonedBlobs research.eye.security/rce-windows-up…
English
Breaking Oracle’s Identity Manager: Pre-Auth RCE (CVE-2025-61757) slcyber.io/research-cente…
English
Lite XL — Arbitrary Code & Remote Code Execution (CVE-2025-12120 & CVE-2025-12121) #LiteXL #RCE #ArbitraryCode #CVEs #Security bend0us.github.io/vulnerabilitie…
Română
Exploiting A Pre-Auth RCE in W3 Total Cache For WordPress <= 2.9.1 (CVE-2025-9501) #W3TotalCache #WordPress #RCE #CVE20259501 #PatchBypass rcesecurity.com/2025/11/exploi…
English
IPIPHistory - IP Address and BGP Route History Search #IPASNLookup #BGPRoutes #BGPHijack #NetworkIntelligence #RoutingAnalysis ipiphistory.com
English
Python packages to create extensive spy program #Python #SpyProgram #BlockHacks #Hacking #Surveillance audits.blockhacks.io/audit/python-p…
English
Discussion on assert(int+100 > int) optimized away in gcc gcc.gnu.org/bugzilla/show_…
English
Gotchas in Email Parsing - Lessons From Jakarta Mail #EmailParsing #JakartaMail #SecurityVulnerabilities #ParsingDifferentials #RFCCompliance elttam.com/blog/jakarta-m…
English
N-able N-central: From N-days to 0-days #NableNcentral #0DayExploits #AuthBypass #XXEAttack #DataBreach horizon3.ai/attack-researc…
English
A Cracker Barrel vulnerability #CrackerBarrel #SecurityVulnerability #AdminBypass #AuthBypass #RewardsSystem eaton-works.com/2025/11/17/cra…
Català
Disrupting the first reported AI-orchestrated cyber espionage campaign #FirstAIHack #AgenticAI #CyberEspionage #AutonomousAttacks #CybersecurityFuture anthropic.com/news/disruptin…
English
When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446) #FortiWeb #AuthBypass #CVE202564446 #PathTraversal #Impersonation labs.watchtowr.com/when-the-imper…
English
Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101) #CitrixNetScaler #VulnerabilityResearch #MemoryLeak #ReflectedXSS #CVE202512101 labs.watchtowr.com/is-it-citrixbl…
English
MacOS Infection Vector: Using AppleScripts to bypass Gatekeeper #MacOSMalware #AppleScript #GatekeeperBypass #InfectionVector #SocialEngineering pberba.github.io/security/2025/…
English
No Leak, No Problem – Bypassing ASLR with a ROP Chain to Gain RCE #ASLRBypass #ROPChain #IOTSploitation #BufferOverflow #RCE modzero.com/en/blog/no-lea…
English