How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Passkeys – Under the Hood(research.kudelskisecurity.com)

140 points by paulgerhardt 2 years ago | 69 comments

GSMA considers giving away mobile device locations through API(gsma.com)

134 points by louismerlin 3 years ago | 51 comments

Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability(blog.sonicwall.com)

232 points by pjf 2 years ago | 90 comments

Operation Triangulation: iOS devices targeted with previously unknown malware(securelist.com)

114 points by fortran77 3 years ago | 23 comments

Exploring GrapheneOS secure allocator: Hardened Malloc(synacktiv.com)

80 points by r4um 1 year ago | 4 comments