💻 macOS Red Teaming Comprehensive Guide Guide: https://t.co/PdZSvYaJI6

#exploit 1⃣. CVE-2025-50165: Critical Flaw (RCE) in Windows Graphics Component - https://t.co/p3KATYNDYX // Windows 11 24H2 x64/ARM64, Windows Server 2025 2⃣. CVE-2025-9491: Windows UI misrepresentation vulnerability - https://t.co/9qKIOSQ7Fd // PoC tool for demonstrating the

🚨 Indirect-Shellcode-Executor Tool Exploits Windows API Vulnerability to Evade AV and EDR Source: https://t.co/uR14i7Wq5r A new offensive security tool developed in Rust is demonstrating a novel method for bypassing modern Endpoint Detection and Response (EDR) systems by

Analysis and Exploit Demo of the CVE-2024-38077(Windows Remote Desktop Licensing Service Pre-auth 0-Click Remote Code Execute Vulnerability) https://t.co/gEWn6IkeCi #0_Click_RCE #CVE_2024_38077 #Remote_Desktop

#Malware #IoC VBA drops a DLL called "C:\\Users\\[username]\\AppData\\local\\Microsoft\\PlayReady\\pdh.dll", which loads a Trojan in memory c495119e6a30c361b2eacbb56f020f5e ("Жалоба на услуги связи.doc") 93.157.106[.]75:80

#ParallelPulse @nanosec_asia 2025 kicks off with our Technical Training series! Welcome back to KL @krNeoTra & Sangsoo Jeong of @78_lab ! The stage is set. 🦸‍♂️ 𝖶𝖾’𝗋𝖾 𝗋𝖾𝖺𝖽𝗒! 𝗍𝗁𝖾 𝗋𝖾𝖺𝗅 𝗊𝗎𝖾𝗌𝗍𝗂𝗈𝗇 𝗂𝗌: 𝖠𝖱𝖤 U?! 🔜 https://t.co/jBLXTqIf1m

#ParallelPulse wrapped up 𝐀𝐝𝐯𝐚𝐧𝐜𝐞𝐝 𝐓𝐡𝐫𝐞𝐚𝐭 𝐇𝐮𝐧𝐭𝐢𝐧𝐠 & 𝐈𝐑 training with an amazing cohort! Huge 🫶 to everyone who dug into the labs & pushed through the challenges. 🙏to @krNeoTra & Sangsoo @78_lab for your amazing sharing. Onward we go, stronger & sharper!

🔍Think #ParallelPulse is “too technical”? Nah-it’s built for everyone who cares about cyber resilience. Whether you’re in security, IT, audit, or leadership, we’ve got sessions that break down complex threats into real-world impact you can actually use. https://t.co/JUdp71IdH4

🚀 #ParallelPulse '25 agenda is LIVE! 2 days of high-impact talks, deep-dive tech sessions & max fun! +💻awesome activities! 1️⃣ @sherpasecmy SherpaCTF2025 2️⃣ @stealthmole_int OSINT Hands-On 3️⃣ The Range Village AD Range https://t.co/jBLXTqIf1m https://t.co/2pJqqwBzOk

#Lazarus have recently resorted to utilizing JSON storage services like JSON Keeper, JSONsilo, and npoint/.io to host and deliver malware from trojanized code projects, with the lure being a use case or demo project as part of an interview process. #InvisibleFerret

#exploit High severity Windows vulnerabilities: 1⃣. CVE-2025-26686: RCE in Windows 10/11/Srv TCP/IP stack - https://t.co/kswysi2zzg // leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch

🚨 New talk #ParallelPulse2025: @78_lab breaks down Gunra, a Conti-variant that hit major SK banks. Learn how @78_lab reverse-engineered the malware, found a critical vuln & replicated decryption via a known-plaintext attack. 👉 https://t.co/ZXy0cHrO9Q

김수키(Kimsuky) 한컴 에이전트-국내 A형간염 현황 및 예방접종 권고 대상자 안내.pdf.scr.exe https://t.co/c8Fbo0C8mY #김수키 #Kimsuky #악성코드

Hello, while investigating the Midnight or EndPoint ransomware, for which a decryption tool was recently released, I discovered several suspicious points and decided to compile a brief report about them Report : https://t.co/HvJZIEkkgl #Ransomware #Kimsuky #Lazarus #APT

#Lazarus malware COMEBACKER C&C Server Open Directory https://t.co/HlV1cNtRQL

Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure https://t.co/hmbhV2oDD0

*Fasoo CodeSign Malware* 1. [25.10.25]국내 A형간염 현황 및 예방접종 권고 대상자 안내.pdf.scr.exe -MD5:0f3e5058154de146fb3f1921c7f89952 2. [250908]A_HK이노션_SecuwaySSL VPN Manager U100S 100user_견적서.scr -MD5:d28f74a6b2dd6301f2d30f46600f6bd6 #APT #Lazarus

김수키(Kimsuky) 행정안전부 사칭 이메일 분석(2025.10.9) https://t.co/zAYFcoh2Bf #김수키 #Kimsuky