New on the blog: MARISSA reverse-engineers network protocol formats straight from PCAPs: no specs, no delimiters. Will be presented at @IEEEEUROSP 2026, come and say hi! reversea.me/index.php/infe… tool: github.com/reverseame/MAR…
English
reverseame
5.6K posts
reverseame
@reverseame
RME-DisCo research group from University of Zaragoza. Special interest on software and systems security. Link to our Telegram channel: https://t.co/UmkcXVG8MU
Zaragoza, Spain Katılım Ocak 2016
1 Takip Edilen22.4K Takipçiler
New blog post! The simpler, the stealthier: we benchmarked 4 adversarial DGA models. The 2 simplest evade ML detectors >75% of the time and train in under 2s. Open-source: github.com/reverseame/adv…, blog post: reversea.me/index.php/the-… #DGA #MachineLearning #CyberSecurity #DIMVA2026
English
After the Takedown: Excavating Abuse Infrastructure with DNS Sinkholes #DNSSinkholes #AbuseInfrastructure #PassiveDNS #TakedownAnalysis #Badbox20 disclosing.observer/2026/01/14/exc…
English
Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK #FacebookAccountTakeover #InsecureRandomNumber #DOMXSS #MobileAppVulnerability #IframeExploitation ysamm.com/uncategorized/…
English
How I Used an Agent to Hunt Vulns #Blazelight #TerminalUI #WebNavigation #GuestPrompt #DigitalPortfolio blazelight.dev/blog/agent-vul…
English
Leaking Meta FXAuth Token leading to 2 click Account Takeover #FXAuthLeak #AccountTakeover #RedirectFlaw #MetaSecurity #BugBounty ysamm.com/uncategorized/…
English
StackWarp vulnerability #StackWarp #SEVSNP #StackManipulation #StackEngineBug #PrivilegeEscalation #home" target="_blank" rel="nofollow noopener">stackwarpattack.com/#home
English
Instagram account takeover via Meta Pixel script abuse #InstagramHack #MetaPixelAbuse #CrossWindowMessaging #OAuthCodeTheft #BugBounty ysamm.com/uncategorized/…
English
Multiple cross-site leaks disclosing Facebook users in third-party websites #XSLVulnerability #MetaSecurity #UserIdentification #PrivacyThreat #BugBountyProgram ysamm.com/uncategorized/…
English
WinBoat: Drive by Client RCE + Sandbox escape. #WinBoat #RemoteCodeExecution #SandboxEscape #DriveByAttack #UnauthenticatedAPI hack.do/posts/winboat-…
English
The ServiceNow AI Vulnerability: What Went Wrong and How to Secure Your AI Agents #ServiceNowAIHack #AIAgentSecurity #LegacyAISecurity #SupplyChainRisk #AIIdentity opena2a.org/blogs/servicen…
English
CVE-2026-20965: Cymulate Research Labs Discovers Token Validation Flaw that Leads to Tenant-Wide RCE in Azure Windows Admin Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation cymulate.com/blog/cve-2026-…
English
Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data #MicrosoftCopilot #RepromptAttack #DataTheft #SingleClickHack #AIVulnerability varonis.com/blog/reprompt
English
Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC #DroneHacking #FirmwareDumping #NANDFlash #ECCBruteforce #IoTResearch neodyme.io/en/blog/drone_…
English
Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents blog.tenzai.com/bad-vibes-comp…
English
CVE-2025-64155: Three Years of Remotely Rooting the Fortinet FortiSIEM horizon3.ai/attack-researc…
English
Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense #CybersecurityAI #GameTheory #AIAttack #AIDefense #SecurityStrategy arxiv.org/pdf/2601.05887
English
Grok’s image edits spark sexualised deepfakes and regulator probes worldwide thebias.co.uk/articles/grok_…
English
WTF Are Abliterated Models? Uncensored LLMs Explained webdecoy.com/blog/wtf-are-a…
English
Relaying NFS4 from inside a container #NFS4Security #ContainerPentest #NetworkRelay #RootUserRisk #DockerSwarmHack francesco.cc/posts/relaying…
English