Great central resource here for various OSINT/Cyber tools, tutorials and articles.

osint.tools

Critical security flaws in CasaOS personal cloud software (CVE-2023-37265 and CVE-2023-37266) allow attackers to bypass authentication and gain full access to the dashboard.

thehackernews.com/2023/10/crit...

This article takes me back - I was an avid follower of the iPhone jailbreak scene from the 3G onwards. Great write up here from one of the old guard of tweak devs trying his hand at a full jailbreak.

axleos.com/exploiting-t...

NoSQL databases aren't immune to injection-style security risks. Attackers can exploit queries, leading to unauthorized access or data loss. Great article here that delves into NoSQL injection types, with a focus on MongoDB vulnerabilities -

portswigger.net/web-security...

Russian firm Operation Zero ups the ante, offering $20M for zero-day hacks on Android and iPhones, from a previous $200k. A sign of the high stakes in cybersecurity or a risky invite to gray market dealings?

techcrunch.com/2023/09/27/r...

Researchers have discovered a major GPU flaw, making GPUs susceptible to cross-origin pixel theft through compression side channels. This raises significant web security concerns due to the potential privacy vulnerabilities it introduces.

arstechnica.com/security/202...

Your digital footprint isn't just for ads anymore. Spyware delivered via ad networks is changing the game. Insanet's Sherlock, approved by the Israeli government, turns targeted ads into Trojan horses that infect your device upon viewing.

theconversation.com/spyware-can-...

Not that I disagree with the sentiment, but NFT hate is such low effort/low hanging fruit for engagement it’s getting boring. Can we not talk about something else?

If I wanted repetitive drivel like this I’d have stayed on Twitter.

The UK’s Online Safety Bill risks global internet censorship and user privacy breaches. It allows Ofcom to mandate tech scans, bypassing encryption and jeopardizing user security.

www.eff.org/deeplinks/20...

🚨 A confirmed Pegasus attack on a Russian journalist highlights the pervasive reach of state-sponsored cyber tools. Let this serve as a reminder: these tools don’t pick sides. In the digital era, we’re all on the radar.

meduza.io/en/feature/2...