#vulnresearch — Public Fediverse posts

🚨 CVE-2026-5033 (MEDIUM): SQL injection in code-projects Accounting System 1.0 (/view_costumer.php, cos_id) is being actively exploited. Remote risk — monitor and patch as soon as fixes arrive. More: https://radar.offseq.com/threat/cve-2026-5033-sql-injection-in-code-projects-accou-9e1a8bbd #OffSeq #SQLInjection #VulnResearch

Google’s December Android update addresses 107 security flaws, including two Framework vulnerabilities already exploited in targeted scenarios. The release also patches a critical DoS issue and multiple vendor-specific components across major chipsets.

How should mobile ecosystems improve patch adoption across fragmented devices?
Follow us for more neutral, technical cybersecurity updates.

Source: https://thehackernews.com/2025/12/google-patches-107-android-flaws.html

#infosec #androidsecurity #zeroday #vulnresearch #mobilesecurity #threatintel #googlepatch #securitybulletin #technadu

Quote of the day: "Nicely done. It doesn’t undo all the (often rightly deserved) bad press that AI agents have received lately, but good news is good news."

https://www.vice.com/en/article/google-big-sleep-first-ai-to-ever-prevent-cyberattack/

#BigSleep #VulnResearch

Quote of the day: "Nicely done. It doesn’t undo all the (often rightly deserved) bad press that AI agents have received lately, but good news is good news."

https://www.vice.com/en/article/google-big-sleep-first-ai-to-ever-prevent-cyberattack/

#BigSleep #VulnResearch

Apparently I missed my original calling as a sociologist, so I’m making up for lost time by asking you about your thoughts on infosec! Do you feel you do meaningful work? How much is ritual compliance to appease the audit gods? Tell me your bullshit job stories.

https://cryptpad.fr/form/#/2/form/view/0LcyFXPJZeAxygGbkXq7T98f+mx2i6gJeaGpYZIy-AA/

Please reboost ❤️

#infosec #cyberSecurity #vulnResearch

Apparently I missed my original calling as a sociologist, so I’m making up for lost time by asking you about your thoughts on infosec! Do you feel you do meaningful work? How much is ritual compliance to appease the audit gods? Tell me your bullshit job stories.

https://cryptpad.fr/form/#/2/form/view/0LcyFXPJZeAxygGbkXq7T98f+mx2i6gJeaGpYZIy-AA/

Please reboost ❤️

#infosec #cyberSecurity #vulnResearch

Vulnerability hunting: it’s like hide-and-seek, but the bugs didn’t realize they were playing.

#VulnResearch #Infosec

Vulnerability hunting: it’s like hide-and-seek, but the bugs didn’t realize they were playing.

#VulnResearch #Infosec

#introduction

👋 Hi, I’m Alison Breacher (she/her), a cybersecurity researcher focused on finding vulnerabilities and helping make everyday systems more secure. I enjoy digging into the details to turn security gaps into solutions. When I’m not reverse engineering or testing systems, I’m usually learning new tools or collaborating on projects with the infosec community.

Always up for a good challenge and excited to see where this journey takes me next. #Cybersecurity #BugHunter #VulnResearch

#introduction

👋 Hi, I’m Alison Breacher (she/her), a cybersecurity researcher focused on finding vulnerabilities and helping make everyday systems more secure. I enjoy digging into the details to turn security gaps into solutions. When I’m not reverse engineering or testing systems, I’m usually learning new tools or collaborating on projects with the infosec community.

Always up for a good challenge and excited to see where this journey takes me next. #Cybersecurity #BugHunter #VulnResearch

Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models

https://googleprojectzero.blogspot.com/2024/06/project-naptime.html

#llm #cybersecurity #vulnresearch

A colleague just recommended me LLEF: LLDB that feels like GDB+GEF 😍

https://github.com/foundryzero/llef

#reverseengineering #debugging #vulnresearch #gdb #gef #lldb #llef

I know nobody gives a fuck, but this is my next research topic for this year: Finding #bugs & #vulnerabilities by #diffing binaries against sources. It sounds much harder than it actually is.

#ProgramDiffing #VulnDev #VulnResearch #VulnerabilityDevelopment #VulnerabilityResearch #ReverseEngineering
#Compilers #CompilerOptimizations #CompilersBugs #Miscompilations

I know nobody gives a fuck, but this is my next research topic for this year: Finding #bugs & #vulnerabilities by #diffing binaries against sources. It sounds much harder than it actually is.

#ProgramDiffing #VulnDev #VulnResearch #VulnerabilityDevelopment #VulnerabilityResearch #ReverseEngineering
#Compilers #CompilerOptimizations #CompilersBugs #Miscompilations

Digging into the latest #Veeam Backup vulnerability (#CVE-2023-27532) by @JohnHammond and Caleb Stewart from @huntress

https://www.huntress.com/blog/veeam-backup-replication-cve-2023-27532-response

#dfir #infosecurity #Vulnerability #vulnresearch #CVE

Digging into the latest #Veeam Backup vulnerability (#CVE-2023-27532) by @JohnHammond and Caleb Stewart from @huntress

https://www.huntress.com/blog/veeam-backup-replication-cve-2023-27532-response

#dfir #infosecurity #Vulnerability #vulnresearch #CVE

I’ve just migrated to infosec.exchange to fill my local feed with all the cyber. Boosting my old #introduction seems weird, so…

I’m using the rise of Mastodon as an excuse to contribute more to internet discourse which I’ve neglected but grew up doing on SA, Digg, Slashdot, and through my sweet geocities websites. I’m employed as a security researcher and I’m working on my PhD Cyber Operations at DSU. Follow me! #cybersecurity #privacy #osint #cryptography #python #netsec #vulnresearch #education #scotch #adhd #hydrohomies #homechef #sjsharks

I’ve just migrated to infosec.exchange to fill my local feed with all the cyber. Boosting my old #introduction seems weird, so…

I’m using the rise of Mastodon as an excuse to contribute more to internet discourse which I’ve neglected but grew up doing on SA, Digg, Slashdot, and through my sweet geocities websites. I’m employed as a security researcher and I’m working on my PhD Cyber Operations at DSU. Follow me! #cybersecurity #privacy #osint #cryptography #python #netsec #vulnresearch #education #scotch #adhd #hydrohomies #homechef #sjsharks