March 17, 2023

Lukasz Olejnik (@LukaszOlejnik@Mastodon.Social) @lukOlejnik

Seized cameras, electronic equipment and GPS transmitters, which the suspects planned to PLACE ON transports with the equipment. To aid in its localisation….?

Lukasz Olejnik (@LukaszOlejnik@Mastodon.Social) @lukOlejnik

Polish security services detained members of a Russian espionage ring preparing acts of sabotage in Poland and had been monitoring railroad routes used for the transport of weapons into Ukraine. https://t.co/LtJje8wrQO

-

Exchange bug is apparently pretty sweet. RCE with invisible emails.

https://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability/

https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY

-

This ICMP bug raised quite a bit of interest in certain circles, but exploitation seems to be in the theoretical stage for now.

https://doublepulsar.com/a-look-at-cve-2023-23415-a-windows-icmp-vulnerability-mitigations-which-is-not-a-cyber-meltdown-78a9f7e3e538

-

Tufail Ahmed @7ufail

🚨 NEW Blog from @Mandiant 🚨  Suspected Chinese Threat Actor (#UNC3886) involved in Espionage Operations. mandiant.com/resources/blog… 🧵

mandiant.comFortinet Zero-Day and Custom Malware Used by Suspected Chinese Actor in Espionage Operation | MandiantA suspected Chinese actor used a zero-day vulnerability in FortiOS and custom malware for espionage.

-

Runa Sandvik @runasand

Latest post for my Journalist and Spy newsletter is about Peruvian journalist Vicky Peláez. In 2010, Peláez, her husband and eight others were arrested by the FBI for carrying out long-term, deep-cover assignments in the U.S. on behalf of Russia.

journalistandspy.substack.comVicky PeláezVicky Peláez is a Peruvian journalist and columnist, currently writing for The Moscow News and Sputnik. In June 2010, Peláez, her husband Mikhail Vasenkov, and eight others were arrested by the FBI for allegedly carrying out long-term, deep-cover assignments in the U.S. on behalf of Russia. All ten…

-

Joseph Cox @josephfcox

New: hacker who allegedly breached a U.S. federal law enforcement tool that let them look up info on "anyone in the US" was on-the-run. Now found he's been arrested in Florida

vice.comOn-the-Run Hacker Who Allegedly Breached Federal Cop Database Arrested in FloridaNicholas Ceraolo, who faces years in prison for allegedly accessing a U.S. federal law enforcement database and other crimes, was still at large when authorities announced the charges against him.

-

Marcel Böhme👨‍🔬 @mboehme_

Fuzzing a formally verified compiler for six CPU years: Found unbreakable. From [PLDI'11] "Finding and Understanding Bugs in C Compilers" by Yang, Chen, Eide, and Regehr: users.cs.utah.edu/~regehr/papers…

Manuel Rigger @RiggerManuel

@mboehme_ CompCert contains/contained unverified parts for builtin handling, in which we have found bugs.

github.comSupport of GCC Builtins · Issue #243 · AbsInt/CompCertWe are currently studying the usage of GCC builtins by GitHub projects and how well various tools support them. To that end, we are also developing a test suite for the most frequently used machine...

Paper:

https://www.manuelrigger.at/papers/GCCBuiltins-ESECFSE19-preprint.pdf

-

Brad Heath @bradheath

Amazing work by @Reuters: An insider account of Wagner Group, the convict army feeding men into the "meat grinder" of Russia's war in Ukraine. reuters.com/investigates/s…

-

Giorgi Revishvili @revishvilig

Father of 39-year-old Russian Igor Nebivaev, the executive director of the Council of Europe's anti-money laundering programme Moneyval, is believed to be a general in Russia's Foreign Intelligence Service - 68-year-old Vladimir Nebivaev

-

Silvija Krebs(a)🇱🇻🇪🇪🇱🇹💙💛🌻🇪🇺 @SilvijaKrebs

“Drone crashed in 4,000 to 5,000 ft of water. Before it was downed, operators took steps to wipe its electronics in hopes of rendering the wreckage useless for intelligence collection.” ~ NSC spokesman

washingtonpost.comPentagon rejects Russian airspace claims after downing of U.S. droneBoth sides warned that the Black Sea encounter had a potential to escalate into direct conflict.

-

After the Exchange bug what are the odds that we’d get a second awesome bug in the same week? Turns out pretty good. This one is really juicy. RCE via VoLTE. Since P0 found this bug in this attack surface, my suspicion is that there are more of these out there.

Word to the wise — disable VoLTE

SecurityWeek @SecurityWeek

Critical flaws expose Samsung’s Exynos modems to “Internet-to-baseband remote code execution” attacks with no user interaction. Project Zero says an attacker only needs the victim’s phone number. @ryanaraine reports: -

securityweek.comProject Zero: Samsung Mobile Chipsets Vulnerable to Baseband Code Execution ExploitsCritical security flaws expose Samsung’s Exynos modems to “Internet-to-baseband remote code execution” attacks with no user interaction.

-

pixelatedboat aka “mr tweets” @pixelatedboat

Wow it’s popping off in France 😧

-

STÖK ✌️ @stokfredrik

The original find by Metabaseq is 🔥 gonna deep dive into tEXt and other png chunks for a few days. Poc here : github.com/duc-nt/CVE-202…

publiclyDisclosed @disclosedh1

HackerOne disclosed a bug submitted by mikkocarreon: https://t.co/Y71N8FlXRY - Bounty: $25,000 #hackerone #bugbounty https://t.co/lfpg5ZWMqu

-

Alex @alexalbert__

Well, that was fast… I just helped create the first jailbreak for ChatGPT-4 that gets around the content filters every time credit to @vaibhavk97 for the idea, I just generalized it to make it work on ChatGPT here's GPT-4 writing instructions on how to hack someone's computer

-