VayFul Security - July 05 2024

Hi all!

Welcome back, here is your dose of VayFul Security, a list of what we are enjoying…

📰 SECURITY BYTES

Multiple Flaws in Splunk Enterprise Let Attackers Execute Arbitrary Code - Splunk has released security updates to address multiple critical vulnerabilities in Splunk Enterprise that could allow attackers to execute arbitrary code remotely. These flaws discovered by both internal and external security researchers affect Splunk Enterprise versions 9.0.x, 9.1.x, and 9.2.x. #splunk #cve’s #xss #rce

Intel CPU Vulnerability: "Indirector" Unveils Novel High-Precision Branch Target Injection Attacks leads to sensitive data leak - These attacks exploit vulnerabilities within the Indirect Branch Predictor (IBP) and Branch Target Buffer (BTB) hardware to potentially bypass security measures like Address Space Layout Randomization (ASLR). And demonstrates potential avenues for attackers to gain unauthorized code execution on vulnerable systems. #intel #cpu #injection #unauthorized-access

Rust Standard Library has a HUGE supply chain security problem - Rust Standard Library (std) boasts strong memory safety and other security features, the reliance on a large standard library could introduce vulnerabilities through unexpected dependencies or hidden code within std itself. #rust #lib #security

0patch platform Offers Unofficial Security Updates for windows 10 - 0patch offers a glimmer of hope for those facing the looming end of extended support for Windows 10. 0patch plans to provide security patches for 5 years, but will extend that period if there is sufficient demand. #windows10 #security #patches

Ghostscript Vulnerabilities Fixed in Recent Ubuntu Updates- Upgrade Now - Critical vulnerabilities in Ghostscript, a widely used tool for interpreting PDF and PostScript files. These vulnerabilities could have allowed attackers to bypass security restrictions or even execute malicious code on your system. #ubuntu #cve’s #patch

🔥 INTERESTING WRITEUPS

Malicious reinstallation of jsm widget app (installed by default in JSM) allows extracting private oauth tokens and user data -  [10000$ Bounty] 

CVE-2024-32760 in nginx - [2600$ Bounty]

📝 BLOGS & ARTICLES

Securing Your htmx Applications: A Guide to Content Security Policy (CSP) -  This article explores the importance of Content Security Policy (CSP) for htmx apps. It explains how CSP helps prevent malicious code injection and outlines best practices for implementing a secure CSP with htmx. #csp #secure #htmx #apps

Security Implications of AI-Generated Code - The research explores how AI's limited understanding of context and potential biases could lead to security flaws in generated code. The article emphasizes the importance of human oversight and security testing when integrating AI-generated code into projects. #AI #code #security

Programmers Should Never Trust Anyone, Not Even Themselves - The author uses real-world examples to illustrate how we rely on abstractions daily, even outside of coding. The article emphasizes the importance of understanding abstractions for greater programming proficiency. #zeroTrust #coding

Debugging the Linux Kernel through Tracing - This article explores the world of kernel tracing, a technique used to monitor and analyze the activity happening within the Linux kernel (the core of the operating system). #debugging #kernel

🛠️TOOLS

L7ide - Secure terminal-based IDE for local JS development. #secure #IDE

Diff-pdf - A simple tool for visually comparing two PDF files. #diff #pdf

Dev-Proxy - Dev Proxy is an API simulator that helps you effortlessly test your app beyond the happy path. #dev #proxy 

Domain-protect-gcp - Protect against subdomain takeover. #gcp #STO #protection

🧠 TUTORIALS & SKILL-BUILDING

Introduction to Binary Exploitation - Nicola Vella - This lesson introduces the underlying principles and techniques of binary exploitation, with an emphasis on the most common bugs in C programming language that result in memory corruption. #binary #exploitation

Intro to kernel exploitation - Pedro Guerra - The bread and butter of kernel pwn: Talking to ioctls and ROPing in kernel space. #kernel #exploitation

Pwning in the "Hardening" era - James Wang - In this session, we’ll explore some common questions related to real world binary exploitation in face of those new challenges, and navigate the landscape of modern pwning through 3 case studies. #pwning #realtime #apps

The Exploit that Ruined Ranked for a day in a League of Legends game - Two lines message will disconnect the enemies in the game and the player will win the game. First we had Nasus and Renekton quest broken, but I guess it wasn't the end of dog issues in League of Legends. #game #spam #exploit

🎁 MISCELLANEOUS

Securing the Future: NVIDIA Unveils Advancements in Large Language Model Security - NVIDIA highlights how their new GPUs and Edgeless Systems, combined with confidential computing technologies, can enhance LLM security.  The solution focuses on encrypting prompts and ensuring the integrity of worker nodes, fostering a more secure environment for these powerful AI tools. #LLM #security

Decentralized Exchange Bluefin Prepares Token Launch After $17 Million Funding Round - Bluefin, a decentralized exchange (DEX) focused on perpetual swaps on the Sui network, is gearing up to launch its own token (BLUE) in July. This news comes after the DEX secured a total of $17 million in funding. #blockchain #DEX

OpenGPA - It is an Open-source General Purpose Agent. A self-hosted solution boasting capabilities similar to popular GPTs. #GPT #agent

CTRLF Demo - CTRLF is kind of a CTRL + F powered with AI. You can ask questions in natural language and get answers directly from the webpage content using AI. #AI #LLM #browser #extension

🎯 QUOTE OF THE DAY

⭐ HOW DID WE DO?

Enjoyed this newsletter? Friends don’t keep good things to themselves - forward this to your friends and have them sign up here.

That’s a wrap!

Thank you for reading,
VayFul Team