HAIJA INTEL REPORT

Dirty Frag: A New Universal Linux LPE https:// github.com/V4bel/dirtyfrag

It's the end of the era of binary trust. Hear Amy and researcher Diana Brown discuss how threat actors are abusing GitHub and Jira to send phishing emails through legitimate infrastructure: https:// cs.co/6013BBcBcV

Create a folder called (calc). Shift+Right click « Open PowerShell Window here » and boom you have a command injection. @podalirius_ found two command injection vulnerabilities in Windows Explorer's context menus, both exploitable since 9 years.

I had a few people tag me saying this is novel malware. This is not novel malware. This is like ... malware spearphishing, or something, I don't know a good way to describe it. Regardless, this isn't new. This malware idea of luring in nerds and using mods to deploy malware So a

Threat actors leverage LLMs to accelerate development of malicious browser extensions. These extensions masquerade as AI tools, exploiting privileges to steal sensitive data. Understand this evolving threat. Read our analysis: https:// bit.ly/3P4J2TB

Huge Happy 40th to my wife and partner in crime @Emma_Chester . It’s easy to forget that the fun we get to have on the trips, hackathons, publications and research is often supported by someone who looks after the kids during the weeks of travel, listens during the late night