Notices by raptor :C_H: (raptor@infosec.exchange)

@GossiTheDog @tiraniddo Dirk-jan is a friend and a fantastic hacker, but I don’t think he was the original discoverer of ZeroLogon https://dirkjanm.io/a-different-way-of-abusing-zerologon/

“Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported product is Seagate STDT4000100 763649053447.”

https://nvd.nist.gov/vuln/detail/CVE-2022-38392

rotfl https://hackerone.com/reports/2293343

Automated #Network #Security with #Rust: Detecting and Blocking Port Scanners by @synacktiv

https://www.synacktiv.com/en/publications/automated-network-security-with-rust-detecting-and-blocking-port-scanners

@ryanc @matthew_d_green awesome, thanks for sharing this!

NPM registry prank leaves developers unable to unpublish packages

On Dec. 29, a package titled “everything” was published to the registry, which is designed to install all other public packages in the registry. This created a registry-wide web of dependencies that effectively disabled the ability to unpublish packages on the site, as packages that other packages are dependent on cannot be unpublished. 🤣🤣🤣

https://www.scmagazine.com/news/npm-registry-prank-leaves-developers-unable-to-unpublish-packages

The "#Vulnerabilities 1001: C-Family Software Implementation Vulnerabilities" free course by #OpenSecurityTraining2 is awesome and very recommended to all developers and beginner code auditors.

https://ost2.fyi/Vulns1001

Also, make sure to check out all the other high-quality, free #OST2 training courses.