As part of our continued effort to proactively identify vulnerabilities in remote surfaces, MS has patched 3 TCP/IP bugs (CVE-2021-24086, -24094, -24074). This set is a bit more serious than previous ones. Thanks to toshi and the entire team for their amazing work.

Today at #NDSS2021's Binary Analysis Workshop, we'll be presenting a paper on PyPANDA: A new python interface for the open-source, PANDA dynamic analysis platform (panda.re). To accompany the talk, I'm going to share a 🧵 about what we did. Let's start with PANDA:

Congratulations Jack! Landing a 1-click Apple Safari to Kernel Zero-day at #Pwn2Own 2021 on behalf of RET2:

Tenet is an #IDAPro plugin for exploring execution traces. The goal of this plugin is to provide more natural, human controls for navigating execution traces against a given binary. Check it out: blog.ret2.io/2021/04/20/ten… #reverseengineering #idapython

Check out how we used 32gb of RAM to exploit a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari / JavaScriptCore at #Pwn2Own in 2021: blog.ret2.io/2021/06/02/pwn…

I wrote a guest blog post over at Margin Research 's blog on effectively reverse engineering. It's the first of a multi-part (3?) series. margin.re/media/an-opini…

.RPISEC linkedin.com/posts/jeremy-b…

Put your WiFi security skills to the test! We'll be giving a away Raspberry Pi 4s to the first challenge solvers!!! supernetworks.org/wifiturtles.ht… #wifi #turtles #ctf #raspberrypi #contest #hackers

I’m excited to announce the AI Cyber Challenge, a major, two-year DARPA competition challenging the best and the brightest in cybersecurity and AI to secure the systems on which all American rely. aicyberchallenge.com

Attention @RPI students and friends. This Friday, 4pm, Sage 4101: Boston Cybernetic's @0xjeremy will make a prized appearance on campus to host a seminar on hacking techniques taught by RPISEC and how to get involved with the club

Confirmed! Cody Gallagher makes his first #Pwn2Own a success. He used an OOB Write bug to exploit #Oracle VirtualBox. He wins $20,000 and 4 Master of Pwn points. #P2OVancouver

SPR now has a community plugin for TailScale, thanks Wilson Wong supernetworks.org/pages/blog/spr… It lets users network TailScale Peers and SPR devices with policy based access controls, or use SPR as a TailScale exit node

Hug your friends lots and take lots of pictures. You never know how long you have with them.

Statement on the passing of Sophia d’Antoine, CEO and founder of Margin Research Sophia d’Antoine

Last week, I lost a dear friend and ctf teammate, Quend. Every spring we all gather to comile together the best challenges we can for the @midnightsunctf qualifiers. The current HFS crew were all back together again this month getting things ready to launch

to say she was brilliant and generous and effervescent and clever and perspicacious is a flimsy portrayal of who she was (and was becoming — her ambition was dazzling). it’s fucked up and unfair that it had to be her.

On the passing of our dear friend and alumni, Sophia "quend" d'Antoine (Sophia d’Antoine)

OpenBSD's heap hardening doesn't want you to exploit this one... We're offering a WiFi Pod to the first person to write a reliable exploit for a heap underflow in Vixie Cron found by Dave Goldsmith of Supernetworks supernetworks.org/CVE-2024-43688… #CVE_2024_43688 #openbsd Check out

We’re excited to announce the 3rd iteration of our quadrennial CTF: Hack the Vote 🎉 🚩Fri, 01 Nov. 2024, 23:00 UTC — Sun, 03 Nov. 2024, 23:00 ctftime.org/event/2498/

📨 Hack the Vote starts tomorrow! Come join us on Discord and IRC! Discord: discord.gg/FyPFNDR5VT IRC: irc.libera.chat, #hackthevote