ππ€π€π©πππ
Open in Telegram
Free content of OFF-SEC, SANS, ec-council, INE, eLearnSecurity, udemy coupons and many more #Malware_analysis #RootSec
Show more1 774
Subscribers
+224 hours
+127 days
+2830 days
Posts Archive
#Tech_book
#Kernel_Security
"Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security", 2023.
]-> Repo
Vibe_Coding:_AI_Driven_Software_Development_and_Testing_2025.zip2136.24 MB
Burp Suite Professional v2026.4.3 + JDK 24
NOTE - Run this version With Java SE JDK 24
Released 13 May 2026
#pentest #security
#AppSec
#Threat_Research
How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
https://securelist.com/exiftool-compromise-mac/119866
// critical RCE vulnerability in ExifTool β€13.49 on macOS, exploitable via malicious image metadata
#Research
"Auditing Apple's Differential Privacy Framework: Implementation Bugs, Misconfigurations, and Practical Risks", May 2026.
// Multiple implementation bugs and misconfigurations. Every audited mechanism that relies on floating-point noise fails to meet its advertised DP or zero-knowledge proof guarantee, due to insecure samplers with known floating-point vulnerabilities
#MLSecOps
"Adaptive Probe-based Steering for Robust LLM Jailbreaking", May 2026.
]-> https://github.com/fhdnskfbeuv/adaptiveSteering
]-> https://github.com/MuyuenLP/AdaSteer
// Being an attack paper, this paper focuses on revealing the breakdown of fortified LLMs, raising the average harmfulness score from 6 to 70%
#tools
#exploit
#Kernel_Security
Linux Integrity Drift (LID):
Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footprint
https://github.com/azqzazq1/LID
// LID finds kernel code paths that bypass LSM hooks entirely - subsystems that perform security-sensitive operations without consulting the LSM framework. The security check is correct. The problem is that the kernel never asks
#Malware_analysis
1β£ CrystalX: unpacking a Go RAT through three encrypted layers
https://www.derp.ca/research/crystalx-go-rat
2β£ SHub Reaper (macOS Stealer)
https://www.sentinelone.com/blog/shub-reaper-macos-stealer-spoofs-apple-google-and-microsoft-in-a-single-attack-chain
3β£ Benchmarking LLMs for malware triage and static unpacking with Malcat
https://malcat.fr/blog/benchmarking-llms-for-malware-triage-and-static-unpacking-with-malcat
#Analytics
#MLSecOps
Mapping NIST AI RMF + Forrester RACI -> Microsoft Security Stack
// Key takeaways:
- NIST AI RMF -> the risk lifecycle (Govern -> Map -> Measure -> Manage)
- Forrester RACI -> the ownership model (one clear "A" per activity)
- Microsoft Security -> the governance and protection plane (identity, telemetry, tool gateway, protection, etc.)
#MLSecOps
#Tech_book
"Generative AI with LangChain:
Build production-ready LLM applications and advanced agents using Python, LangChain, and LangGraph",
2nd Edition, 2025.
// Go beyond foundational LangChain documentation with detailed coverage of LangGraph interfaces, design patterns for building AI agents, and scalable architectures used in production - ideal for Python developers building GenAI applications
#SCA
#Research
#Mobile_security
"Capacitive Touchscreens at Risk:
A Practical Side-Channel Attack on Smartphones via Electromagnetic Emanations", May 2026.
// This paper presents TESLA, a novel, contactless electromagnetic side-channel attack that exploits inherent EM emanations during touchscreen scanning. We demonstrate that these emanations encode the spatiotemporal evolution of touch interactions, forming a unified leakage basis
#tools
#Fuzzing
"PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations", May 2026.
]-> https://github.com/Legoclones/PickleFuzzer
// Python's native serialization protocol, pickle, is a powerful but insecure format for transferring untrusted data. It is frequently used, especially for saving machine learning models, despite known security challenges. PickleFuzzer - custom generation-based fuzzer that identifies inconsistencies across pickle implementations
