/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

blog.xpnsec.com
| | truesecdev.wordpress.com

Background and acknowledgement This full disclosure is based on my discovery of a privilege escalation vulnerability in Apple OS X called rootpipe. Read my full disclosure on rootpipe here for some background info. Big thanks to Patrick Wardle who inspired me to start new investigations, by saying that he found a way to re-abuse rootpipe...
12.6 parsecs

Travel
| |
| | macops.ca

[AI summary] The post details a technical method for system administrators to monitor Apple's XProtect meta feed changes using command-line tools to handle updated malware definitions and plugin requirements.
13.1 parsecs

Travel
| |
| | blog.quarkslab.com

The following article explains how during a Purple Team engagement we were able to identify a vulnerability in Microsoft Teams on macOS allowing us to access a user's camera and microphone.
9.6 parsecs

Travel
| |
| | www.oligo.security

Oligo unveils ShellTorch: critical vulnerabilities in TorchServe (PyTorch Model Server), including CVE-2023-43654 (SSRF) & CVE-2022-1471 (RCE), threaten AI users.
37.3 parsecs

Travel
|