Andrew Martin’s Post

It is #ITUGLIB update time. #Curl 8.7.1 has been released, covering two medium CVEs: CVE-2024-2466: TLS certificate check bypass with mbedTLS (medium) CVE-2024-2398: HTTP/2 push headers memory-leak (medium) CVE-2024-2379: QUIC certificate check bypass with wolfSSL (low) CVE-2024-2004: Usage of disabled protocol (low) As usual, builds are available for TNS/E and TNS/X,V for OpenSSL 3.2, 3.1, 3.0, 1.1.1, and 1.0.2. Of course, 1.1.1 and 1.0.2 versions of OpenSSL are out of support, but if you need support for those, Nexbridge is authorized to help out with those. Note: The 3.2 build or TNS/E may be slightly delayed.

PixieFail flaws impact PXE network boot in enterprise systems https://buff.ly/48S7Oe4

musl's dedication to memory safety pays off again with the openssh regreSSHion vulnerability (CVE-2024-6387). this time, it is because musl does not use dynamic memory allocation for formatting in printf, due to the fact that it could fail under memory pressure. this eliminates a key precondition for exploiting CVE-2024-6387, although the use of syslog(), which is not signal-safe in a signal handling context is still problematic.

As part of our lecture series on software protection at the Ruhr-Universitaet Bochum, Maurice H. gave a guest lecture on analyzing modern DRM systems with emulation and hypervisors. Thanks for this great talk! Slides, code & samples: https://lnkd.in/gPGRDNnp Recording (German): https://lnkd.in/gEr7FbeG #reverseengineering #piracy #drm #malwareanalysis

This. Also, have something ready to go so you can start testing and verifying articles of threat intel. Try to trace back proof of concepts given and learn to pause before just buying into provided intelligence. Sometimes even trusted sources can get things wrong and periodically testing hypothesis/theories is how science evolves forward instead of stagnating.

What do Office Space and cryptographic blockchains have in common? A bat and some smashing! 🔨😄 We recreated the famous movie scene to educate on our trusted setup ceremony, where we destroy a laptop to protect a piece of our cryptographic key. #SecureTheKey

Don't start from scratch! Discover the magic of #HITRUSTMyCSF. Control inheritance, cloning, and offline assessments pave the way to smoother assessments. Learn how to make the most of your MyCSF subscription. https://hubs.ly/Q02sHd1Q0 #SecurityAssessment

Firebeam CVE-2024-26229 Plugin: A small firebeam (kaine's risc-v vm) plugin to exploit the CVE-2024-26229 vulnerability that utilizes a vulnerable IOCTL in csc.sys. The vulnerability is used to get kernel R/W memory access to corrupt the KTHREAD->PreviousMode and then to leveraging DKOM to achieve LPE by copying over the token from the system process over to the current process token.

“Once you give access to the kernel, it’s hard to stop these issues, but companies like Oligo Security are using non-invasive approaches for safer solutions." Unlike traditional kernel drivers, Oligo’s technology leverages #eBPF programs that are sandboxed and verified by the kernel, ensuring they cannot modify or break the kernel, by design. This makes eBPF a much safer and more reliable option for security and observability tasks. Check the full TechCrunch article >> https://lnkd.in/g6PkXkDf

IWIRE NTX: What You Need To Know