RE: https://infosec.exchange/@mayahustle/117406250925641406

I have an unlocked Frontier AI model at home, and I’ve spent the past month generating literally thousands of malware samples doing all kinds of things, and running them through AV scanning and EDR tools.

Basically 100% detection rate across every major vendor. Out of the box, default settings on the security tools.

It didn’t help as an attacker at all, if anything it made me easier to detect.

No idea what Jimmy’s presentation is going to be but I’d suggest attending if you’re there.

RE: https://infosec.exchange/@ciaranmartin/117486889924241077

Checking on Twitter takes of the PHP vulns was a mistake.

If you’re wondering why your million dollar cybersecurity vendor appliances don’t have ASLR enabled.

There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly.

Which is good, because patching is going to take a long time.
https://php2shell.censys.com/

@GossiTheDog

Qnap....
https://www.qnap.com/en-us/security-advisory/qsa-26-18

Synology...

https://www.synology.com/en-global/security/advisory/Synology_SA_26_14

Asustor...

https://www.asustor.com/en-gb/security/security_advisory

Terramaster...