Laser Fault Injection on a Budget: RP2350 Edition

WorstFit: Unveiling Hidden Transformers in Windows ANSI

Backdooring your backdoors – Another $20 domain, more governments

Using AFL++ on bug bounty programs: an example with Gnome libsoup

CVE-2024-45844: Privilege escalation in F5 BIG-IP

Tinkerers Are Taking Old Redbox Kiosks Home and Reverse Engineering Them

CVE-2024-23113 a Super Complex Vulnerability in a Super Secure Appliance in 2024

Vulnerabilities in the Feeld dating app

We spent $20 to achieve RCE and accidentally became the admins of .mobi

PHPFuck: Using only 7 different characters to write and execute PHP

The Certification Trap

NAS Performance: NFS vs. SMB vs. Sshfs (2019)

Mark Dowd – Inside the 0day market [pdf]

Tombolo

Deep Diving into F5 Secure Vault

Post-Exploiting an F5 Big-IP: root, and now what?

Palo Alto – Putting the Protecc in GlobalProtect (CVE-2024-3400)

Microsoft Edge's Marketing API Exploited for Covert Extension Installation

Same Same, but Different

Ivanti Connect Secure CVE-2024-22024 – Are We Now Part of Ivanti?

Building a Password Cracker in 2024

Rare usernames and 11 chances to win Proton's most exclusive plan

LDAP authentication in Active Directory environments

Cutcutgo: Open-source firmware for Cricut Maker

Russian 0day broker pays $20M for 0day exploits for iPhones devices

Phineas Fisher, Hacktivism, and Magic Tricks

Silk Road’s Second-in-Command Gets 20 Years in Prison

XORtigate: Pre-Authentication Remote Code Execution on Fortigate VPN

Iconic Torrent Site Rarbg Shuts Down, All Content Releases Stop

Shell in the Ghost: Ghostscript CVE-2023-28879 writeup

Ghost in the Shellcode

LDAP relays for initial foothold in dire situations

Fight Club author praises Chinese cut of film: ‘Super wonderful ’

Hello IPv6: a minimal tutorial for IPv4 users

MI6 backed ‘right-wing religious fanatics’ in Afghanistan

Find all GitHub Copilot banned suggestions

Who's on the List? – The Pegasus Project

Classified Challenger tank specs leaked online for videogame

Apple Security Bounty: A personal experience

A Breakdown of AI Chip Companies

Mistune: iOS RCE vulnerabilities that have been hiding for a decade

Source engine remote code execution via game invites

Reddit’s Public Bug Bounty Program Launch

Intercept mutually-authenticated TLS communications of a Java thick client

The Many Facts Pointing to Cypherpunk Len Sassaman Being Satoshi Nakamoto

Unauthorized RCE in VMware VCenter

Blind XSS in Google Analytics Admin Panel – $3133.70

Unmasking the Deceased Programmer Who Donated 28 Bitcoin to Capitol Hill Rioters

The Hacker Who Archived Parler Explains How She Did It (and What Comes Next)

OxyContin maker Purdue Pharma pleads guilty in criminal case

Hacking in Among US

$1B was moved from a dormant Bitcoin wallet

A tool to generate binary polyglots files (valid with several file formats)

John McAfee has been arrested in Spain and is facing extradition

A secret from everyone but the film industry

Security reports reveal how Assange turned an embassy into a command post (2019)

Hidden standards make USB-C a pain to deal with

NSO, Israel’s billion-dollar spyware giant

A man who built the spyware empire says it’s time to come out of the shadows

We Found the Person Responsible for the Flight Simulator Melbourne Monolith

Testing how Bug Bounty platforms respond to Personal Data requests

PS4 kernel exploit for FW 7.02 and below (10k $ bounty)

DisplayLink USB Graphics Software Arbitrary File Write Elevation of Privilege

RCE in Google Cloud Deployment Manager

QNAP Pre-Auth Root RCE Affecting ~450K Devices on the Internet

Playing with Gzip: RCE in GLPI (CVE-2020-11060)

Testing the testers: solving a customer's private CTF

The Scoop on a Six-Figure Nigerian Fraud Campaign

(Super) Magic Hashes

The Hunt for Narco Subs (2015)

Is Zero Hedge a Russian Trojan Horse?

Trapped in Iran