Sep 30 2024 Last Week in Security (LWiS) - 2024-09-30

CUPS RCE (@evilsocket), driver vulns (@vinopaljiri), NamelessC2 release (@trickster012), liveness detection bypass (@CaptMeelo), Windows LPE (@ricnar456), and more!

Sep 23 2024 Last Week in Security (LWiS) - 2024-09-23

0-click macOS RCE (@Turmio_), sudo iptables LPE (@suidpit + @smaury92), SkeletonCookie ☠️🍪 (@buffaloverflow), and more!

Sep 16 2024 Last Week in Security (LWiS) - 2024-09-16

MSSQL domain privesc (@_nullbind), .mobi whois takeover (@watchtowrcyber), LLM CTF (@bishopfox), mac filesystem 🪄 (@gergely_kalman), AlcaWASM writeup (@suidpit), and more!

Sep 09 2024 Last Week in Security (LWiS) - 2024-09-09

Windows heap overflow (@esj4y), Linux TCP UAF (@v4bel), Goffloader (@BouncyHat), Intune lat-movement (@h4wkst3r), browser attack detection (@mega_spl0it), and more!

Sep 03 2024 Last Week in Security (LWiS) - 2024-09-03

argv[0] tampering (@Wietze), Moodle eval() misuse (@RedTeamPT), ntoskrnl.exe PoC (@b1thvn_), 4x wappd exploits (@hyprdude), and more!

Aug 26 2024 Last Week in Security (LWiS) - 2024-08-26

"USDoD" doxed, VEH research (@passthehashbrwn), Defender exclusions (@dazzyddos), CSS history leak (@TheXC3LL), Cobalt Strike DNS listeners (@VirtualAllocEx), and more!

Aug 19 2024 Last Week in Security (LWiS) - 2024-08-19

DEF CON 32 Tools and Talks, Apache confusion (Orange Tsai), private TLDs (@N7WEra), UDL 🎣 (@Oddvarmoe), crash analysis (@patrickwardle), and more!

Jul 29 2024 Last Week in Security (LWiS) - 2024-07-29

Specula (@Oddvarmoe + @freefirex2), 🧵 namecalling (@hasherezade), North Korean 🇰🇵 agents, Llama 3.1 (@Meta), GraphSpy updates (@RedByte1337), and more!

Jul 22 2024 Last Week in Security (LWiS) - 2024-07-22

REx (@br0k3ns0und), EV charger exploits (@ret2systems), CerealKiller (@two06), payload encoding (@MoritzLThomas), responder honeypot (@lawndoc), and more!

Jul 15 2024 Last Week in Security (LWiS) - 2024-07-15

HavocC2 SSRF (@_chebuya), PDF rendering diffs (@d4d89704243), Windows phishing 0day (@_CPResearch_), 3x Sharepoint RCEs (@testanull), Dynamics 365 flaws (@frycos), Mythic 3.3 Beta (@its_a_feature_), and more!