RME-DisCo @ UNIZAR [www.reversea.me]

VULNERABLE TARGETS #VulnerableTargets #SecurityResearch #VulnTesting #HappyHackingSpace #TemplatesCatalog https://vulnerabletarget.com/detail.html?id=vt-2026-1207

Yara-X + PacketSmith Detection Module A Sneak Peek #YaraX #PacketSmith #DNSTunneling #DenisBackdoor #NetworkDetection https://packetsmith.ca/yara-x-packetsmith-detection-module/

CVE-2025-11730: Remote Code Execution via DDNS configuration in ZYXEL ATP/USG Series (V5.41) #CVE202511730 #ZyxelFirewall #CommandInjection #DDNSExploit #RootShell https://rainpwn.blog/blog/cve-2025-11730/

Recreating uncensored Epstein PDFs from raw encoded attachments #EpsteinFiles #Base64Recovery #OCRChallenges #CourierNew #PDFForensics https://neosmart.net/blog/recreating-epstein-pdfs-from-raw-encoded-attachments/

A Deep Dive into CVE-2026-25049: n8n Remote Code Execution #CVE202625049 #n8nRCE #RemoteCodeExecution #JavaScriptDestructuring #WebhookSecurity https://blog.securelayer7.net/cve-2026-25049/

Introducing Julius: Open Source LLM Service Fingerprinting #Julius #LLMFingerprinting #ShadowAI #OpenSourceSecurity #OffensiveSecurity https://www.praetorian.com/blog/introducing-julius-open-source-llm-service-fingerprinting/

Proofs, Arguments, and Zero-Knowledge #ZeroKnowledge #ZKP #Crypto https://people.cs.georgetown.edu/jthaler/ProofsArgsAndZK.pdf

Kernel-Level Stealthy Observation of TTY Streams #LinuxKernel #TTYSubsystem #PseudoTerminal #KernelModule #SSHMonitoring https://blog.cybervelia.com/p/kernel-level-stealthy-observation-of-tty-streams

Persistent, Sandboxed, Single-Site Browser (firejail and proxychains) #SingleSiteBrowser #Firejail #Proxychains #AccountLockouts #PrivacyOpSec https://tech.michaelaltfield.net/2026/02/03/single-site-browser-firejail-proxychains/

GatewayToHeaven: Finding a Critical Cross-Tenant Exploit in GCP's Apigee #ApigeeSecurity #CrossTenantExploit #CVE202513292 #CloudVulnerability #GCPResearch https://omeramiad.com/posts/gatewaytoheaven-gcp-cross-tenant-vulnerability/

Auditing Outline. Firsthand lessons from comparing manual testing and AI security platforms #OutlineSecurityAudit #AISecurityPlatforms #FalsePositives #XSSAndSSRF #ManualPentesting https://blog.doyensec.com/2026/02/03/outline-audit-q32025.html

How LLMs Feed Your RE Habit: Following the Use-After-Free Trail in CLFS #ReverseEngineering #LLM #CLFS #UseAfterFree #PyghidraMCP https://clearbluejar.github.io/posts/how-llms-feed-your-re-habit-following-the-uaf-trail-in-clfs/

Exploiting CVE-2025-49825 #Teleport #CVE202549825 #AuthenticationBypass #SSHCertificate #ExploitDevelopment https://blog.offensive.af/posts/exploiting-cve-2025-49825/

Malicious Websites Can Exploit Openclaw (aka Clawdbot) To Steal Credentials #Openclaw #ClawdbotSecurity #CDPExploit #SessionHijacking #ZeroPath https://zeropath.com/blog/openclaw-clawdbot-credential-theft-vulnerability

WhatsApp Encryption, a Lawsuit, and a Lot of Noise #WhatsApp #EndToEndEncryption #MetaLawsuit #SignalProtocol #MessagingPrivacy https://blog.cryptographyengineering.com/2026/02/02/whatsapp-encryption-a-lawsuit-and-a-lot-of-noise/

AppLocker Rules Abuse #EDRBlocking #AppLocker #GhostLocker #DefenseEvasion #PurpleTeam https://ipurple.team/2026/02/02/applocker-rules-abuse/

Your Phone Silently Sends GPS to Your Carrier — Here's How #BasebandPrivacy #RRLP #LPPProtocol #CarrierTracking #LocationSurveillance https://fumics.in/posts/2026-02-01-phone-gps-carrier-tracking

Notepad++ Hijacked by State-Sponsored Hackers #NotepadPlusPlus #SupplyChainAttack #StateSponsoredHackers #HostingCompromise #UpdateVerification https://notepad-plus-plus.org/news/hijacked-incident-info-update/

Well, this is embarrasing. I only obey my master :_(

New post: a five-phase, MITRE ATT&CK-aligned workflow for mem forensics, from evidence preservation to binary analysis. We also flag 4 issues that bias mem evidence: paging, demand paging, smearing, and binary transforms #ICDF2C25 https://reversea.me/index.php/bringing-structure-to-memory-forensics-a-five-phase-mitre-attck-aligned-workflow/ https://webdiis.unizar.es/~ricardo/files/papers/Rodriguez-ICDF2C-27.pdf