Jun 17 2024 Last Week in Security (LWiS) - 2024-06-17

Nighthawk 0.3 (@MDSecLabs), Musl heap exploit (@NCCsecurityUS), Copilot chat 💉 (@wunderwuzzi23), allowPrivilegeEscalation in K8s (@christophetd), and more!

Jun 10 2024 Last Week in Security (LWiS) - 2024-06-10

SCCM ansible role (@synzack21), Hacking millions of modems (@samwcyo), F5 Secure Vault (@myst404_), Secure Kerrnel (@33y0re), and more!

Jun 03 2024 Last Week in Security (LWiS) - 2024-06-03

F5 TLS MITM (@lowercase_drm + @myst404_), WASM phishing tool (@JumpsecLabs), MS Recall info (@GossiTheDog), Checkpoint path traversal (@watchtowrcyber), smbclient-ng (@podalirius_), and more!

May 29 2024 Last Week in Security (LWiS) - 2024-05-29

A special two week edition!

May 13 2024 Last Week in Security (LWiS) - 2024-05-13

Evading MDI (@yaumn_), TAP->NTLM (@_dirkjan), ELF verifier (@kev169), Kerberos delegation + 🦀 in beacons (@_RastaMouse), and more!

May 06 2024 Last Week in Security (LWiS) - 2024-05-06

Entra to on-prem (@_dirkjan), new bloodhound edges (@Jonas_B_K ), Chrome type confusion (@_manfp), GitHub RCE via actions (@Creastery), and more!

Apr 29 2024 Last Week in Security (LWiS) - 2024-04-29

AD Group abuse (@decoder_it), NetNTLM leak attacks (@pfiatde), 'adversary flywheels' (@WHITEHACKSEC), Nemesis 1.0 (@harmj0y + team) and more!

Apr 22 2024 Last Week in Security (LWiS) - 2024-04-22

LSA Whisperer (@mcbroom_evan), VirtualBox LPE (@mansk1es), Android Intent exploitation (@suidpit), MagicDot "rootkit" (@oryair1999), and more!

Apr 16 2024 Last Week in Security (LWiS) - 2024-04-16

Dev tunnels for C2 (@RedSiege), UAF Windows LPE (@KeyZ3r0), SCCM enum script (@_Mayyhem), ETW patching (@jsecurity101), and more!

Apr 08 2024 Last Week in Security (LWiS) - 2024-04-08

Evilginx + GoPhish (@mrgretzky), Ghostwriter updates (@cmaddalena), Intune EPM privesc (@synzack21 + team) 🎣 page bot defense (@fin3ss3g0d), and more!