Recent content on
Introduction For years, PlayStation 4 exploitation followed a predictable formula: gain code execution through the browser, escape the sandbox, then use a kernel vulnerability to take full control. Firmware 9.00 marked the last major milestone in that lineage. Firmware 11.00 broke that pattern. Not because the system got meaningfully more secure, but because the entry point moved somewhere far…
Apple’s Memory Integrity Enforcement is no joke. Five years of design, brand-new M5 silicon, hardware memory tagging on the kernel heap, hardware-locked read-only zones for the kernel’s crown jewels, and a privileged monitor sitting above the kernel that refuses every unauthorised page-table change. It’s the most serious kernel memory-safety stack any consumer OS has shipped. And…
AI coding assistants are the new hotness. Claude Code, Cursor, Continue, Copilot, you name it. Developers are adopting them faster than you can say autocomplete. But here’s the thing nobody’s talking about: these tools create local configuration directories that are silently accumulating secrets. And developers are pushing them straight to public GitHub repositories. Cue nervous…
EU Digital Sovereignty at Risk Introduction Data sovereignty refers to the problem statement that data is subject to the laws of the country in which it “resides”, which is potentially different from the data owners location. For individuals, this subject might be trivial. After all, everyone shares data online at their own discretion. The stakes increase drastically when we refer to…
MITRE Caldera: Automating Adversary Emulation This is a guest blog post written by Roger. What? Caldera is a cybersecurity framework developed by MITRE to assist security professionals in automating adversary emulation, thereby reducing the time, cost, and effort associated with manual security assessments. Built upon the MITRE ATT&CK framework, Caldera enables users to simulate real-world cyber…
For everyone in the room who is somewhat of an IT administrator to one or more Azure (including Office365) tenants, please raise your hand if you’ve been bestowed with the gift (or curse) of permanent administrative permissions. Cue nervous laughter. Sounds a bit risky, right? Imagine the chaos if that account ever fell into the wrong hands. But how could one ever fix this at all if you need…
If you also think FIDO2 and Passkeys rhyme with PITA, try this neat little detection trick to start alerting on Office365 account compromise on Azure right now. Detecting Office365 Attacker-in-the-Middle attempts in Azure Attacker-in-the-Middle (previously called Man-in-the-Middle) attacks are on the rise unlike ever before. Identity-based compromises (via e.g. Business Email Compromise) are still…
Phishing still is a very popular attack vector while MFA is supposedly the cure. Let’s prove that it isn’t. This might or might not have been inspired by a recent car sharing company incident. This is a guest blog post written by Arne. Introduction Phishing is categorized as social engineering and is used to steal credentials via email. If done right, phishing can bypass multi-factor…
In light of the WhatsApp privacy controversy, I was tempted to dive deep into the clustered web that is privacy and security for instant messaging apps. Let me guide you through the mess that is secure instant messaging. Message away! As always, skip to the Ending Remarks if you don’t have time to read it all. Introduction Since SMS (used to) be expensive and is still not secure at all,…
Questions raised since the last blog post and the recent release of macOS Big Sur and the M1 chip require some clarification. Preface My previous blog post around the T2 vulnerabilities on Apple hardware caused a wave of news articles describing the issue, ranging from terrible copied to actually being written in a better way. I’m glad the post triggered such a wide reaction and reached its…
Let’s talk about that thing nobody’s talking about. Let’s talk about a vulnerability that’s exposing 2018-2020 Macs while most are declining to act nor report about the matter. Oh, and did I mention it’s unpatchable? Buckle up buckaroo, we’re in for a wild ride. Skip to #security-issues for the technical mumbo-jumbo. Preface Attribution The following post is an…
A recent network issue with my ISP connection triggered me to delve into what my ISP could know about me, and what everyone can do about that. Let’s dive into the paranoia! A note: this is mainly a brain dump and might contain some unproven claims… so as always on the internet: YMMV. Preface My Problem For the people that not know me personally: I am kind of a data hoarder.