Remember the linpeas.sh saga from about a year ago?
I’ve finally written it up. The findings include LinPEAS being run as root, during active pentests, on compromised web servers, and even on live production systems.
hattonsec.com/a-linpeas-saga…
📣 The Fal.Con 2024 session line-up is here. We have 200 sessions this year, including:
⚡ How to Win in the Age of AI-Fueled Adversaries
☁️ Strengthening Cloud Security: Beyond Compliance in the Age of Persistent Threats
👉 Full session list: crwdstr.ke/6015gOKUT
It's been a week now and I can confirm robot vacuum cleaners are 100% worth it. The place has never looked so consistently clean, it's insane. I welcome our cleaning robot overlords.
I found an IDOR vulnerability in two @Halfords_uk services in January and April that is leaking customer data such as: full name, home address, email, phone number, VRM more. I've tried to responsibly disclose this for over 5 months but have had no real response.