04 November 2024 Show Notes 261 - Attacking Browser Extensions and CyberPanel 00:01:56 Autonomous Discovery of Critical Zero-Days Additional Links: https://arxiv.org/abs/2210.03629 https://arxiv.org/abs/2305.10601 https://training.absoluteappsec.com/ 00:14:43 Attacking browser extensions 00:25:26 What Are My OPTIONS? CyberPanel v2.3.6 pre-auth RCE Additional Links: https://www.securityweek.com/cyberpanel-vulnerabilities-exploited-in-ransomware-attacks-shortly-after-disclosure/ https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-faq.html https://googleprojectzero.blogspot.com/2021/04/policy-and-disclosure-2021-edition.html 00:52:15 Security research on Private Cloud Compute Additional Links: https://github.com/apple/security-pcc/blob/main/LICENSE https://security.apple.com/documentation/private-cloud-compute 01:01:02 Bluetooth Low Energy GATT Fuzzing