The time has come! Yours truly has discovered his first CVE!!
www.cve.org/CVERecord?id...

#cybersec #infosec

Government employees have started a website to debunk the attacks on them! It’s at wethebuilders.org.

Jessica Craven

Wild

I say this as someone who doesn’t know what they’re talking about, but is old enough to have seen this shit before: An LLM is not intelligent. It is just a chat bot that has had gobs of money thrown at it.

Can’t believe we got to the point people are PAYING companies to intern. As if unpaid internships aren’t already bad enough. SMH 🤦‍♂️

OSINT is the cherry on top for phishing. Sure, these techniques may seem juvenile but combine them with network analysis, and impersonation of legitimate people/services you have an extremely powerful tool. I’ve heard of campaigns that clone relative’s voices with generative AI.

Not sure if it's just me but tria.ge always breaks whenever I try making search queries with more than two AND/OR statements, could be user error or I may just need to use the API.

Probably some of the worst ransomware I've found. Xelera is a PyInstaller executable that attempts to obfuscate it's code with... emojis and have long import aliases that are easily reverse-engineered.

github.com/0xBenCantCod...

Here's my first bug I got permission to disclose, found it a while back but thought I'd post it here. From XSS to account takeover in a creative way.

github.com/0xBenCantCod...