A Program Is Secure If …
• It does what it’s supposed to
• It doesn’t do anything else
- Casey Schaufler
#PHP2Shell , Part Two
Go forth, we dumped all the detections and sigma and details on our page
threat-intelligence.redeyese…
#cybersecurity #cvd
Kontrola modułów i protokołów sieciowych na przykładzie SCTP ( nfsec.pl/security/6734 ) #linux #security
youtube.com/watch?v=8TLr4p0w…
Cmentarzysko certyfikatów oprogramowania ( nfsec.pl/security/6728 ) #codesign #security #windows
youtube.com/watch?v=OMHFHTnd…
Patryk Krawaczyński @[email protected] retweeted
The world’s largest residential proxy network runs on consent, TLS and vibes. The TV is always watching and apparently it is also available for contract work in surveillance or data acquisition? Bright Data sells access to a residential proxy network, the kind customers use to route requests through real home IP addresses instead of datacenter IPs that Cloudflare, DataDome and HUMAN are trained to block. The supply comes from an SDK embedded in consumer apps. So: CTV games, messengers, mobile apps and screensavers. With consent somewhere upstream, the device becomes an exit node. The TV is perfect for this job. It is plugged in, on WiFi, often unattended and barely supervised. It also asks for consent through a privacy policy and a remote-control UI, which is one way to make “informed choice” look like an endurance sport. One config flag tells the SDK to ignore whether the screen is on. Another tells it to ignore whether the user is on a call. In this economy, watching TV counts as downtime. blog.includesecurity.com/202…
Fragnesia (CVE-2026-46300) i DirtyDecrypt (CVE-2026-31635) ( nfsec.pl/security/6722 ) #linux #kernel #security
youtube.com/watch?v=dWAPcXh8…
Copy Fail (CVE-2026-31431): 732 bajty do przejęcia kontroli nad systemem ( nfsec.pl/security/6718 ) #linux #kernel #exploit
youtube.com/watch?v=-RuJTJga…
Uwalniamy program ping od setuid i capabilities ( nfsec.pl/root/6717 ) #linux #security #icmp
youtube.com/watch?v=AJJaWZdZ…
trap - persystencja po wyjściu z powłoki ( nfsec.pl/security/6710 ) #linux #security #bash #backdoor
youtube.com/watch?v=IACAXRp_…
Dynamic Host Configuration Protocol Daemon bez DHCPd ( nfsec.pl/root/6705 ) #linux #sysadmin
youtube.com/watch?v=Ql83FxR3…
W miarę bezpieczne przekazywanie sekretów w powłoce ( nfsec.pl/security/6702 ) #linux #bash #security
youtube.com/watch?v=7yaU0qXl…
Zabawy z Socket Cat i TCP/IP Gender Changer ( nfsec.pl/root/6699 ) #linux #socat #tcpip #tunnels
youtube.com/watch?v=XfMVF-o7…
Patryk Krawaczyński @[email protected] retweeted
🇵🇱 Poland blocked what officials described as its strongest cyberattack on the energy sector in years.
ESET links it to Russia-aligned Sandworm, which used a new DynoWiper malware to target ⚡ power plants and renewable energy systems in late Dec 2025.
🔗Details → thehackernews.com/2026/01/ne…
Dziurawimy NATy jak szmaty za pomocą UDP Hole Punching ( nfsec.pl/security/6697 ) #linux #security #network #lan #nat
youtube.com/watch?v=TEzX_Rh-…

















