
Me: Let's check if the upcoming addition is undefined behavior and bail out. Compiler: Nah, let's remove that check since it is undefined behavior. research.swtch.com/ub
Sy_Ben
262 posts


Me: Let's check if the upcoming addition is undefined behavior and bail out. Compiler: Nah, let's remove that check since it is undefined behavior. research.swtch.com/ub



Watch out for this #DarkGate campaign, quite possibly through Malvertising and using signed MSI files with very low (or zero) detection. #SIGNED "PFO GROUP LLC" Other sites on 154.56.47.156: https://openvpnhub[.]com/ https://angryipscanner[.]net/ https://www.putty-ssh[.]com/ C2: 178.236.247.102 [+] bazaar.abuse.ch/browse/tag/178… https://advancedscannerip[.]com/ C2: 80.66.88.145 [+] bazaar.abuse.ch/browse/tag/80.… Reports by @ULTRAFRAUD and @DonPasci 🙌 More references: malwarebytes.com/blog/threat-in…




Valve ignoring security researchers is not just specific to the secret club. Here we see Bien Pham demonstrate his Remote Code Execution exploit that has not been patched for over a year.




IIS Backdoors! Let's ride this 🚄! Let's expose 👀these modules and see what we get! Level set what modules are, ship some atomics #AtomicRedTeam down range and dive into how to hunt for modules. The latest Splunk Threat Research blog is out! splunk.com/en_us/blog/sec…







Red teamers this one is for you! Do you use ShareFinder on your engagements? Why or why not? Discuss below
