GitHub - Nightmare-Eclipse/GreenPlasma: GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability

GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability - Nightmare-Eclipse/GreenPlasma

Le logiciel espion utilisé par le renseignement russe avait bien été développé pour la NSA - Next

Exploiting zero days in abandoned hardware

We successfully exploited two discontinued network devices at DistrictCon’s inaugural Junkyard competition in February, winning runner-up for Most Innovative Exploitation Technique. Our exploit chains demonstrate why end-of-life hardware poses persistent security risks.

UNC3886 Hackers Exploiting 0-Days in VMware vCenter/ESXi, Fortinet FortiOS, and Junos OS

Singapore’s critical infrastructure is under siege from UNC3886, a sophisticated China-linked advanced persistent threat (APT) group. As of July 2025, the group has been actively targeting essential services like energy, water, telecommunications, and government systems, prompting urgent warnings from officials. This isn’t just another hack, it’s a calculated assault exploiting zero-day vulnerabilities in widely used […]

Installazioni SharePoint on-premise: vulnerabilità ToolShell

Patch d'emergenza Microsoft per SharePoint on-premise: vulnerabilità ToolShell consente accessi remoti, colpite agenzie governative, università e aziende.

Crash (exploit) and burn: Securing the offensive cyber supply chain to counter China in cyberspace 

If the United States wishes to compete in cyberspace, it must compete against China to secure its offensive cyber supply chain.

Government hackers are leading the use of attributed zero-days, Google says | TechCrunch

Governments like China and North Korea, along with spyware makers, used the most recorded zero-days in 2024.