OpenBSD has a use-after-free allowing local privilege escalation to root(nvd.nist.gov)

243 points by linggen 3 months ago | 125 comments

LockBit claims to exfiltrate 33TB of data from US Federal Reserve(securityaffairs.com)

67 points by cuuupid 2 years ago | 55 comments

Security issues discovered in sudo-rs(lists.debian.org)

7 points by kahlonel 11 months ago | 3 comments

Vulnerability in partner.microsoft.com allows unauthenticated access(nvd.nist.gov)

10 points by speckx 1 year ago | 0 comments

GTFOBins(gtfobins.org)

325 points by StefanBatory 6 months ago | 82 comments

GTFOBins is a curated list of Unix-like executables whose legitimate functions can be abused to bypass local security restrictions in misconfigured systems.

ASP.NET Security Feature Bypass Vulnerability(nvd.nist.gov)

77 points by zeraye 1 year ago | 50 comments

Cyber Security: A pre-war reality check(berthub.eu)

446 points by edent 2 years ago | 199 comments

Bert Hubert's lightly edited transcript of his talk at the ACCSS/NCSC/Surf 'Cyber Security and Society' seminar on cybersecurity preparedness ahead of potential war.

900 Sites, 125M accounts, 1 Vulnerability(env.fail)

499 points by MrBruh 2 years ago | 111 comments

Security researchers' write-up on scanning the internet for misconfigured Firebase instances, finding 900 sites exposing about 125 million user records.

LinkedIn scans for 6,278 extensions and encrypts the results into every request(404privacy.com)

398 points by un-nf 5 months ago | 172 comments

A 404 Privacy blog post reporting that LinkedIn probes for 6,278 browser extensions and encrypts the results into requests, and how the data is used.

Xray-core concealed a certificate verification bypass vulnerability(github.com)

83 points by timbill 22 days ago | 11 comments

GitHub issue in net4people/bbs where a reporter alleges Xray-core maintainers concealed a certificate verification bypass vulnerability for half a year.

Eloquent JavaScript 4th edition (2024)(eloquentjavascript.net)

1159 points by vajdagabor 2 years ago | 208 comments

Website for Eloquent JavaScript, Fourth Edition (2024), a free online book by Marijn Haverbeke teaching JavaScript programming.

Evolving Threat: http2shell is an RCE in Node, Python, and more(nitter.click)

154 points by cowlevel 2 days ago | 85 comments

A Nitter mirror of an Aikido Security post about http2shell, an HTTP/2-related remote code execution vulnerability affecting Node, Python and others; the page shows only a bot-check link.