We have found an interesting vulnerability in a #Matrix #Android client:

🧩 Software: #Element X Android
📦 Affected Version: <= 25.04.1
🆔 CVE: CVE-2025-27599
📊 CVSSv3.1: MEDIUM
⚠️ Prerequisites: Clicking on a crafted hyperlink or using a malicious app

Since Element X Android usually has the permission to access camera and microphone, this can be used to record audio and video from the victim. Pretty bad! 😨

🔗 Read more: https://herolab.usd.de/security-advisories/usd-2025-0010/

#InfoSec #CyberSecurity #Pentesting #Hacking #CVE_2025_27599 #SpyWare #Phishing

Did you know that apparently completely different strings are interpreted as identical by some tools?

This is due to redundant UTF-8 encodings of the same Unicode characters.

Read more below 🧵

#InfoSec #CyberSecurity #Hacking #Pentesting #UTF #Unicode

#CantWait 😻 Tomorrow is #usdHackingNight again! Until tonight you still have the chance to register and take part. Go to the registration page, get set, go!

#SignUpNow: https://www.usd.de/cst-academy/events/usd-hacking-night/

Vulnerabilities in #webapps, #standardsoftware and #crypto in 6 machines await you on Friday at #usdHackingNight. Can you root them all?

#SignUpNow: https://www.usd.de/cst-academy/events/usd-hacking-night/

Hey hackers! Are you aware that there are only 15 days left until #usdHackingNight? This is your chance to show off your skills and compete with others.

#SignUpNow: https://www.usd.de/cst-academy/events/usd-hacking-night/

The #countdown to #usdHackingNight is on. Be there when it's once again: On the tokens, ready, steady, go!

#Signupnow: https://usd.de/cst-academy/events/usd-hacking-night/

Understanding a Hacker's Mind. who doesn't wish for it? Our usd AG Advanced Seminar makes it possible. Only if you know and understand the relevant #threats in IT environments, you can take effective countermeasures. Experienced security analysts from the #usdHeroLab will use theory and a lot of practice to show you the intentions and methods of a #hacker and how to protect your #systems in the best possible way.

Due to the great interest in the 1st half of the year, we are offering another date of the two-day attendance seminar in September.
👉​https://www.usd.de/cst-academy/events/usd-seminar-understanding-hackers-mind/

#UnderstandingAHackersMind #CSTAcademy #moresecurity

Our #HeroesOnTour are sending greetings from #LasVegas. Nicolas, Florian and Matthias presented our #pentesting #tools #FlowMate, #SNCScan and #CSTC to the global #HackerCommunity at #BlackHat and @defcon For those who couldn't join us live and want to learn more about the tools 💡 check out the GitHub repositories here 👇​👨‍💻

📢​https://github.com/usdAG/FlowMate
📢 https://github.com/usdAG/sncscan
📢​ https://github.com/usdAG/cstc

#moresecurity #usdHeroLab

To counteract the increasing complexity of #hacker attacks, high-quality #pentests are essential. This is best achieved when the knowledge and instinct of #pentest professionals are complemented by suitable #tools. 🛠️​

That's why our extensive experience with #TechnicalSecurityAnalyses is continuously contributes to the development of helpful tools. As a result, we proudly present our in-house developments #FlowMate, #SNCScan and #CSTC to the global #SecurityCommunity at #BlackHat and @support. We are proud to provide international security experts with tools for #moresecurity

Our Colleagues Matthias Göhring, Nicolas Schickert and Florian Haag are fine-tuning the very last details before heading to #LasVegas next week. We wish our Heroes great presentations and keep our fingers crossed!🤞​

#CyberSecurity #Innovation #ExcitedToPresent #usdHeroLab