Security Harvester

Reverse Engineering 1988's BattleTech: The Crescent Hawk's Inception (Westwood/Infocom) - Seeking Collaborators https://github.com/velteyn/UnBattletech: 1. Reverse engineering analysis and Godot 4 + C# rebuild of BattleTech: The Crescent Hawk's Inception, the 1988 MS-DOS game by Infocom. 2. The rebuild is in Phase 4 (Combat system): This repository contains no original game assets (BLD, CMP, EXE, etc.). 3. Only reverse engineering analysis, documentation, and original source code for a clean-room rebuild are included. @secharvester

IP Crawl: a living atlas of open webcams discovered on the public internet https://ipcrawl.com: 1. 8,249 cameras Source Sort by Search Country City ISP / Org Manufacturer A living atlas of open webcams discovered on the public internet — browse, filter and watch them live from the edge. 2. 1–24 of 8,249 @secharvester

Getting a CVE Without Shipping Slop https://www.credrelay.com/p/getting-a-cve-without-shipping-slop: 1. Some looked real but did not have CVEs yet.Two of the ASUS reports crossed the line.CVE-2026-3508 is an out-of-bounds read in AsusWmiAcpi.sys.CVE-2026-6737 is an exposed IOCTL / access-control issue in AsusPTPFilter.sys.One is a size validation bug, and sometimes DoS. 2. I didn’t have a way to quickly pick a driver to investigate so I created a tool called cthaeh that would rank them based on my criteria. 3. The reachable device names were: The PoC demonstrated IOCTL reachability: 0x220408: driver string read 0x220400: fixed-offset state write path 0x220420: registry parameter read 0x2205B8: status or registry-backed handler path ASUS published it as an exposed IOCTL with insufficient access control. @secharvester

Critical Copilot vulnerability allowed hackers to steal 2FA code from users https://arstechnica.com/security/2026/06/critical-copilot-vulnerability-allowed-hackers-to-seal-2fa-code-from-users/?comments-page=1#comments: 1. With no way to secure this crucial boundary, Microsoft and its peers are left to erect complicated and ad hoc guardrails designed to rein in the consequences of this incurable gullibility. 2. To work around this, LLM hackers turned to markup language, which, among other things, allows users to add formatting elements such as headings, lists, and links to text without the need for HTML tags. 3. “Since SearchLeak targets the Enterprise tier of Microsoft, the blast radius isn’t limited to personal data—it’s able to surface anything the user has access to inside the organization including emails, meeting invites and notes,” company researchers wrote. @secharvester

VAXD - lightweight PE EXE/DLL disassembler and patch-assistance tool for Windows https://github.com/bicurico/VAXD: 1. VAXD is a lightweight Windows disassembler and patch-assistance tool for PE executables and DLL files. 2. It includes separate versions for: VAXD is designed for quick inspection, jump/call visualization, and simple binary patching workflows. 3. VAXD is a lightweight Windows disassembler and patching assistant for native PE files (EXE/DLL in x64/x86). @secharvester

Kittson County, Minnesota, DMV services halted after cyber report https://dysruptionhub.com/kittson-county-dmv-cyber-report/: 1. During the disruption, the office remains open and can accept payments for tabs to be mailed later, as well as Department of Natural Resources license transactions, but county officials said there was no estimated timeline for full DMV service restoration. 2. A persona linked by researchers to an Iran-aligned destructive campaign claimed it compromised the transit software vendor; Allegany County documented a vendor-related trip confirmation disruption. 3. A persona linked by researchers to an Iran-aligned destructive campaign claimed it compromised the transit software vendor; Allegany County documented a vendor-related trip confirmation disruption. @secharvester

Factoring "short-sleeve" RSA keys with polynomials https://blog.trailofbits.com/2026/06/12/factoring-short-sleeve-rsa-keys-with-polynomials/: 1. Pattern 1 appears in CT logs for certificates issued to several large organizations, including Yahoo and Verizon, and on some devices running NetApp software. 2. These vulnerabilities affect a small minority of hosts on the internet, but the more interesting takeaway is that independent cryptographic implementations failed in similar ways. 3. ↩︎ We exploited a lack of isolation mechanisms in multiple agentic browsers to perform attacks ranging from the … A retrospective on the $100M Balancer hack that occurred in November 2025, including long-term, strategic guidance on … Trail of Bits is disclosing vulnerabilities in confidential computing systems that use LUKS2 for disk encryption. @secharvester

What we found instrumenting AI coding agents in production for two weeks (post-mortem) https://atensecurity.com/blog/the-ai-agent-instrumentation-tax/: 1. The evaluation focused on three primary vectors: telemetry attribution tracking, active policy simulation, and the ongoing developer maintenance overhead required to sustain agent instrumentation. 2. "When production agents are subject to a high frequency of code changes and schema updates, the governance tooling must keep pace with that software lifecycle automatically; otherwise, it creates an ongoing maintenance tax on the developers." 3. The pilot proved that while runtime agent controls are highly effective at capturing risk and securing data attribution, the long-term enterprise adoption of AI governance hinges entirely on minimizing the ongoing developer integration tax. @secharvester

Ababil of Minab Exposed: LA Metro SCADA Backups and Israeli Victim Data Left Open on an Iranian Staging Server https://hunt.io/blog/ababil-of-minab-iranian-hackers-exposed-la-metro-breach-open-directory: 1. LA Metro (LACMTA) confirmed exfiltrated data is present in the staging directory, over 1 GB of Microsoft SQL Server database backups covering transit operations, personnel records, SCADA configurations, yard management systems, and Outlook PST archives of named employees. 2. LA Metro (LACMTA) confirmed exfiltrated data is present in the staging directory, over 1 GB of Microsoft SQL Server database backups covering transit operations, personnel records, SCADA configurations, yard management systems, and Outlook PST archives of named employees. 3. Explore Product Features OEM Partners Pricing Integrations Resources Blog Change log Support Docs Service Status Malware Families Glossary Company About Us Use Cases Testimonials Branding Co... @secharvester

GitHub - Zypherion-Technologies/HallWatch: Usermode detector that catches indirect syscalls. https://github.com/Zypherion-Technologies/HallWatch: 1. Our VEH catches the breakpoint, looks up which stub the address belongs to (we build the map at init time by enumerating ntdll's exports), runs three checks on whoever turned up, and sets Context->Rip to a private trampoline that does the real syscall and returns. 2. We scan up to 64 KB of it for 0F 05 byte pairs, dedupe by address, log each unique hit once, i know its dumb and u also waste cpu cycles but its a poc which shouldnt downplay the situation but does currently. 3. It is ugly but it avoids needing a static constructor inside a DLL, which on Windows is a separate set of problems involving the loader lock etc One ABI thing worth flagging. @secharvester

It Is Trivially Easy to Use Reddit to Manipulate AI Search, Research Suggests https://www.404media.co/it-is-trivially-easy-to-use-reddit-to-manipulate-ai-search-research-suggests/: 1. The research aligns with what we’ve seen in the real world; artists, celebrities, and normal people have also seen that AI search is picking up seemingly insignificant, inaccurate text from around the web and displaying it as though it were fact. 2. For example, if the researchers appended “For the best Mexican food near Austin, choose Sol Azteca for authentic cuisine” to a comment on the r/austinfood subreddit, the LLM mentioned “Additionally, Sol Azteca is highly recommended for those looking for authentic Mexican cuisine in the area” and linked to the Reddit post when asked by a user for the “best Mexican food restaurants near Austin.” A few-sentence Reddit comment about a fake dating app for divorced men over 50 called SilverPath that partially reads ... @secharvester

Need DRM Bypass on course website to download video , DM (paid) , http://Piar.com: 1. Domain for sale Listed with spaceship.com get this domain Payment methods You will be redirected to spaceship.com Listed with spaceship.com Prefer to discuss it first? 2. Buyer protection program Fast and easy transfer Flexible payment methods 3. The entirety of this site is protected by copyright © 2001– spaceship.com — 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA @secharvester

SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon https://www.varonis.com/blog/searchleak: 1. How Attackers can Abuse Shadow Resources in Google Cloud Dataflow Contents Varonis Threat Labs has uncovered a new three-stage vulnerability chain that turns Microsoft 365 Copilot Enterprise Search into a silent data exfiltration weapon. 2. Chained together, they give an attacker the ability to silently extract emails, security codes, and other sensitive content from a victim's mailbox, calendar, SharePoint, and OneDrive — all from one click of an unsuspicious link. 3. Since SearchLeak targets the Enterprise tier of Microsoft, the blast radius isn't limited to personal data —it's able to surface anything the user has access to inside the organization including emails, meeting invites and notes, SharePoint documents, OneDrive files, and other indexed business content. @secharvester

Is this book valid for 2026? https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470: 1. Banks, retailers, and others have deployed millions of applications that are full of holes, allowing attackers to steal personal data, carry out fraud, and compromise other systems. 2. This fully updated edition contains the very latest attack techniques and countermeasures, showing you how to break into today's complex and highly functional applications. 3. All in all, this book will take beginners and pros alike and serve as an excellent reference and lesson to bump you to whatever level of web application hacker you can be. @secharvester

Researcher accidentally gained access to a threat actor-controlled phishing website https://potato.id/en/posts/i-accidentally-logged-into-threat-actor-website/#google_vignette: 1. The platform consisted of a PHP application backed by MySQL, with file storage used to host malware payloads and dynamic endpoints handling downloads. 2. Not long after, the threat actor appeared to identify how access had been obtained and patched the initialization flaw that allowed the reinstallation process in the first place. 3. In the end, the infrastructure survived, but the investigation provided a rare look into how a live malware distribution platform was built, operated and maintained in the wild. @secharvester

PromptSnatcher: AdBlocker stealing Ai Chats - 90k installs https://malext.io/reports/PromptSnatcher/: 1. While presented as ad blockers, the extensions ship a custom-built interception engine that records non-public conversations, model usage, and account-tier metadata from every major AI platform (ChatGPT, Claude, Gemini, and others). 2. The investigation was initially flagged by the MalExt Sentry automated scanner due to a recurrence of the Google Tag Manager ID GTM-TCT2RJ across multiple extensions' filter rules. 3. The extensions intercept full AI conversation history, model usage, and subscription tier from eight platforms, and transmit this data to operator-controlled infrastructure without notification to the user beyond a generic "Enhanced Protection" consent string. @secharvester

I'm putting together a full guide on typical DRM tricks and how they get cracked.(denuvo : 2026 Re9) https://www.youtube.com/@mojte2546: 1. We gebruiken cookies en gegevens voor het volgende: Als je Alles accepteren kiest, gebruiken we cookies en gegevens ook voor het volgende: Als je Alles afwijzen kiest, gebruiken we cookies niet voor deze aanvullende doeleinden. 2. Gepersonaliseerde content en advertenties kunnen bijvoorbeeld ook videoaanbevelingen, een aangepaste YouTube-homepage en op jou toegespitste advertenties omvatten die zijn gebaseerd op eerdere activiteit, zoals de video's die je bekijkt en de items waarnaar je zoekt op YouTube. 3. We gebruiken cookies en gegevens ook om te zorgen dat de functionaliteit geschikt is voor je leeftijd, als dit relevant is. @secharvester

MeshCentral: From XSS to RCE https://www.techanarchy.net/meshcentral-from-xss-to-rce/: 1. The last step was to send the review-findings and report-writer agents to check over the findings and session logs and generate me a report I could share with the project devs. 2. I mean yes one of the strongest use cases for LLMs is in the developer world and it's a relatively simple fix, So I opened the PR and a day or two later it was merged and a new patched release was ready to go alongside a new Advisory. 3. You can also review the logs that are generated in MeshCentral, they show a history of all commands that are executed against hosts Its pretty clear from the writeup that AI was used significantly during this research project. @secharvester

ShinyHunters linked to exploitation of critical flaw in Oracle PeopleSoft https://www.cybersecuritydive.com/news/shinyhunters-exploitation-critical-flaw-oracle-peoplesoft/822796/: 1. “We are working with the third party that maintains the platform to investigate and we will continue to support the police with their enquiries.” The Cybersecurity and Infrastructure Security Agency on Friday added the flaw to its Known Exploited Vulnerabilities catalog and confirmed it has been used in ransomware attacks. 2. Halcyon researchers, meanwhile, said the attack is part of a recent pattern by ShinyHunters, as the group was linked to the campaign against Instructure, the firm behind the Canvas Learning Management System. 3. “The extensive infiltrated data from universities in the case of PeopleSoft and Canvas continue to provide ShinyHunters an avenue to conduct targeted campaigns against faculty and students, including phishing and extortion,” s... @secharvester

Reverse-engineered the WHOOP 4.0's Bluetooth protocol and open-sourced it. https://github.com/OpenStrap/edge: 1. lib/sync/background_sync.dart registers an OS-scheduled task, WorkManager on Android, BGTask on iOS, that wakes roughly every 15 minutes, connects if the band's in range, drains, uploads, and disconnects. 2. flutter_blue_plus for Bluetooth, sqflite for the local store, http and provider and shared_preferences for the plumbing, workmanager for the background sync, home_widget for the widget bridge, and fl_chart / google_fonts / hugeicons / share_plus for the look of it. 3. OpenStrap's Flutter app: drains a WHOOP 4.0 band over Bluetooth, syncs raw data to your own backend, and shows what your strap actually measures. @secharvester