zer0

@cR0w@infosec.exchange #directoryTraversalMemes

BIOS Password Recovery from SPI Flash (CVE-2026-40639) | https://blog.amberwolf.com/blog/2026/july/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639

@DarkWebInformer@infosec.exchange nice to see you back posting here (:

⚓ Calculation error: I forgot to carry the 1, and now my packet sniffer thinks we are in the middle of the Pacific Ocean. #balccon2k26 Save the date: 18 | 19 | 20 September 2026 Congress Center Location: Hajduk Veljkova 11 Novi Sad, Serbia, Earth, Milky Way Join the conversation: Mastodon - @BalCCon@chaos.social Matrix - https://matrix.to/#/#balccon:ch405labs.net Discord - https://discord.gg/hWNSNtab89

A Perfect Circle - The Hollow https://www.youtube.com/watch?v=CjMU60FZETY

I found webOS. Wish me luck 🤞

Examining the security posture of an Anti-Crime Ecosystem | https://github.com/GainSec/anti-crime-ecosystem-research/blob/main/whitepaper/GainSec_Whitepaper_AntiCrimeEcosystem.pdf

CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2 | https://www.safateam.com/intelligence-hub/research/technical-articles/cve-2025-13032-entering-and-breaking-the-avast-antivirus-sandbox-part-2

Can a language model run in Linux eBPF? | https://eunomia.dev/blog/2026/09/24/qwen3-ebpf-in-kernel-inference

@Gina@fosstodon.org @Phipe@diaspodon.fr @openproject@fosstodon.org I miss these

@cR0w@infosec.exchange good on them for even reporting to CISA. In the telco world vendors run their own thing instead, in varying maturity as you can imagine. If this intercaps network stack is available via their devkit for free somewhere, I'm happy to check if it can be rce'd. Segger embOS on arm 16&32bit and RISC-V appear to be of particular interest. tldr; Something happened which forced their hand. The CVE before this is from 2022 .