/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 truesecdev.wordpress.com
Exploiting rootpipe again |
| | securitylabs.datadoghq.com
The OverlayFS vulnerability CVE-2023-0386: Overview, detection, and remediation | Datadog Security Labs
15.1 parsecs away

Travel
| | Learn how the OverlayFS vulnerability CVE-2023-0386 works, how to detect it and how to reproduce it.
| | blog.quarkslab.com
Exploiting Microsoft Teams on macOS during a Purple Team engagement - Quarkslab's blog
16.6 parsecs away

Travel
| | The following article explains how during a Purple Team engagement we were able to identify a vulnerability in Microsoft Teams on macOS allowing us to access a user's camera and microphone.
| | blog.xpnsec.com
MacOS "DirtyNIB" Vulnerability - XPN InfoSec Blog
12.6 parsecs away

Travel
| | While looking for avenues of injecting code into platform binaries back in macOS Monterey, I was able to identify a vulnerability which allowed the hijacking of Apple application entitlements. Recently I decided to revisit this vulnerability after a long time of trying to have it patched, and was surprised to see that it still works. There are some caveats introduced with later versions of macOS which we will explore, but in this post we'll look at a vulnerability in macOS Sonoma which has been around fo...
| | objective-see.org
Objective-See's Blog
18.4 parsecs away

Travel
| [AI summary] This post provides a technical analysis of OSX.DazzleSpy, a cyber-espionage macOS implant used to target pro-democracy users in Hong Kong, detailing its persistence mechanisms, remote capabilities, and detection by Objective-See's tools.