Show Notes

62 - OSED, North Korean hackers, NAT Slipstream 2.0, and PGP (in)security

00:00:52
About the security content of iOS 14.4 and iPadOS 14.4
00:02:42
New campaign targeting security researchers
Additional Links: https://www.microsoft.com/security/blog/2021/01/28/zinc-attacks-against-security-researchers/ https://twitter.com/pwn_expoit/status/1354024291398950913 https://twitter.com/chris_salls/status/1353989045617975297
00:44:45
New Exploit Dev Course: EXP-301
Additional Links: https://wargames.ret2.systems/
01:04:53
Linksys WRT160NL – Authenticated Command Injection [CVE-2021-25310]
01:07:13
Vulnerabilities within TikTok Friend-Finder
01:14:07
BitLocker touch-device lockscreen bypass
01:20:53
NAT Slipstreaming v2.0
Additional Links: https://samy.pl/slipstream/
01:26:35
[Security fix] Libgcrypt 1.9.1 released
Additional Links: https://dev.gnupg.org/rC512c0c75276949f13b6373b5c04f7065af750b08
01:30:44
Baron Samedit: Heap-based buffer overflow in Sudo [CVE-2021-3156]
Additional Links: https://github.com/sudo-project/sudo/commit/1f8638577d0c80a4ff864a2aad80a0d95488e9a8 https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2021-3156
01:44:49
Exploiting a “Simple” Vulnerability – Part 1.5 – The Info Leak
01:50:53
Windows Kernel DoS/Privilege Escalation via a NULL Pointer Deref
01:56:31
XS-Leaks in redirect flows
02:02:13
Keeping your GitHub Actions and workflows secure: Untrusted input
02:08:04
iOS Security Tutorial - Patching ASLR in the Kernel
02:08:58
Project Zero: A Look at iMessage in iOS 14
02:09:37
Effectively Fuzzing the IPC Layer in Firefox