Seclog - #98

g3n3r4l9

1. GPS Signal Spoofing (bordergate.co.uk)

   Overview of GPS spoofing threats and mitigation techniques.

2. Ancient Monkey: Pwning a 17-Year-Old Version of SpiderMonkey (blog.pspaul.de)

   Exploiting vulnerabilities in older versions of SpiderMonkey.

3. RCE Vulnerability in QBittorrent – Sharp Security (sharpsec.run)

   Analysis of a remote code execution vulnerability in QBittorrent.

4. OSV - Open Source Vulnerabilities (osv.dev)

   Initiatives for improving data quality in open-source vulnerability reporting.

5. Email Security Analysis - Danny's Newsletter (zendannyy.substack.com)

   In-depth look into email security challenges and solutions.

6. More Models, More ProbLLMs: New Vulnerabilities in Ollama | Oligo Security (oligo.security)

   Discussing vulnerabilities introduced by new models in machine learning security.

7. Identifying Blind Spots in Your API and Application Security (beaglesecurity.substack.com)

   Strategies for identifying and addressing API security gaps.

8. ChatGPT-4o Guardrail Jailbreak: Hex Encoding for Writing CVE (0din.ai)

   Techniques for bypassing guardrails in ChatGPT-4 to write CVEs.

9. Asking Good Questions in OSINT (osintcombine.com)

   Essential questioning strategies to enhance OSINT investigations.

X1

1. Bypassing App-Bound Encrypted Keys in Chrome (@xaitax)

   Code for bypassing and decrypting App-Bound encrypted keys in Chrome 127+. View on X

g1thub3

1. tun2socks (github.com)

   A tool powered by gVisor’s TCP/IP stack for tunneling SOCKS connections. Explore on GitHub

2. gcp-ctf-workshop (github.com)

   A workshop for GCP-based capture the flag (CTF) exercises. Explore on GitHub

3. dns-triage (github.com)

   A Python script for conducting domain-focused reconnaissance. Explore on GitHub