About time someone said what needed to be said: seclists.org/oss-sec/2025/q…

Real Human Hacker vs AI Agent Hacker

RE: gitlab.gnome.org/GNOME/libxml2/… -- libxml2 maintainer will no longer embargo security bugs, and they will be fixed whenever maintainers find time, not ASAP. Good for him! Maybe Apple/Google/et al should adopt or rewrite the project, not rely on unpaid volunteers. Toxic culture.

for the app control nerds - new driver blocklist version has rolled to Windows Insider Canary. adds a few loldrivers found by Northwave Labs a while back: neofltr.sys, ProcObsrvesx.sys, and SeasunProtect.sys github.com/pl4nty/data/co…

can we stop trusting nvram pls

⚡ New for BSides Canberra 2025: Speedrun CTF ⚡ Race the clock in a 15-minute qualifier- 2 challenges, no retries. The 8 fastest hackers advance to the live on-stage finale. Round robin. Head-to-head. Fastest wins. Only one takes the crown. Are you in? cfp.bsidescbr.com.au/bsides-canberr…

automating reverse engineering would increase training data by an order of magnitude. consider decomposing every closed source application in the world. you could start with easily reversible formats like JARs/APKs before going after stripped executables.

Very awesome!! It looks like code to support SMAP is beginning to appear the latest Canary build!

Team Atlanta wins the AIxCC Grand Final! 🏆

A Letter to Our 42-b3yond-6ug Team, Collaborators, and Supporters — From the Heart #AIxCC docs.google.com/document/d/1-1…

$5 Membership sale is live for the next 24 hours: account.shodan.io/billing/member

Python is without doubt the worst language ive ever had this displeasure of working with. Its not even the language, its the piss poor dependency, env, and version management. When ur 8 venvs in, u know we've fucked up as a society.

LET'S GET THE BALL (BEARINGS) ROLLING ONLY 4 WEEKS LEFT UNTIL SKATEBOARDING DOG CTF BSidesCanberra 2025 WATCH THE COUNTDOWN ON OUR WEBSITE: 2025.sk8.dog

Preview of PHRACK #72 BSidesCanberra edition. 👉Release: 25th of September. GET READY👈 How many logos of famous Australian/New-Zealand cons can you spot on the back cover?

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

The curse has been broken! 🏆We finally won BSides Canberra CTF 2025!🥇 Congratulations to our close competition FrenchRoomba and SoberOstrich. Thanks to BSidesCanberra for the outstanding conference, and of course skateboarding dog 🛹🐶 for the amazing CTF this year.

Credential Guard was supposed to end credential dumping. It didn't. Valdemar Carøe just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled. Read for more ⤵️ ghst.ly/4qtl2rm

Brand-new admin protection bypasses by James Forshaw As usual, awesome work! 💪💪💪 project-zero.issues.chromium.org/issues/4323136… and project-zero.issues.chromium.org/issues/4324396…

👀 con.emu.team

You can really call *anything* RISC-V (This is from Tenstorrent documentation)