Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem
sentinelone.com·21h
🦠Malware Analysis
Rtpengine: RTP Inject and RTP Bleed vulnerabilities despite proper configuration (CVSS v4.0 Score: 9.3 / Critical)
seclists.org·2d
🌐NetworkProtocols
Video: A look at Kgeotag on FreeBSD
discoverbsd.com·18h
🔌Operating system internals
Revival Hijacking: How Deleted PyPI Packages Become Threats
dev.to·2d·
Discuss: DEV
❄️Nixpkgs
Mounting Large Files to Containers Efficiently
anemos.sh·37m·
Discuss: Hacker News
📦Container Security
Mobile App Vulnerabilities Can Have Wider Implications
zimperium.com·18h
📡Feed Security
How to find Squid caching proxy installations on your network
runzero.com·11h
✅Archive Fixity
Corruption When Working Over Network/Working With File Server Best Practices
reddit.com·18h·
Discuss: r/homelab
🎵FLAC Internals
Mobile app analytics library led to the PII exposure
cossacklabs.com·15h·
Discuss: Hacker News
🚨Incident Response
Bouncing on trampolines to run eBPF programs
bootlin.com·30m
🔍eBPF
PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation
arxiv.org·3h
🧪Binary Fuzzing
PQCSA: A Gentle Introduction to Code Based PKE
esat.kuleuven.be·20h
⚗️Algebraic Coding
Nextcloud vs. CryptPad: Which Privacy-First Collaboration Tool is Right for You?
itsfoss.com·1h
🏠Homelab Federation
Akira Ramps Up Assault on SonicWall Firewalls, Suggesting Zero-Day
darkreading.com·17h
🔓Hacking
Detection Engineering: Practicing Detection-as-Code – Validation – Part 3
blog.nviso.eu·39m
✅Archive Validation
Lovense flaws expose emails and allow account takeover
securityaffairs.com·23h
🔓Hacking
OWASP ASVS 5.0.0 is here!
scotthelme.ghost.io·21h
🛡️WASM Sandboxing
Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation
embracethered.com·1d
🌳Archive Merkle Trees
Pushed an RSS Feed Update
theworksofegan.net·10h
📡RSS
Hardening systemd services via system call filter
paperless.blog·3d
📦Container Security