news
Security Leftovers
-
Tom's Hardware ☛ Hacker breaks into on-campus smart washing machines — management eventually disables devices, leaving thousands of students with no reliable laundry service
A hacker breaks into the digital washing machines of a student residence in Amsterdam and makes them free for all to use — but management catches up and deactivates the appliances altogether.
-
The Strategist ☛ Chinese cyber skirmishes in the Indo-Pacific show emerging patterns of conflict
China’s Salt Typhoon hacking campaign has taken on new urgency with revelations it may have compromised the data of millions of Australians. This demonstrates how cyber operations have evolved beyond merely gathering intelligence.
-
Kernel Space
-
William Liu ☛ Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days
What would a vulnerability researcher's magnum opus be? For me, it would be a 0-click 0-day exploit chain against a popular platform or device in the modern era. No interaction needed, system pwned.
Unfortunately, this is a difficult task to achieve these days. So towards the end of my post-grad summer, I decided to practice designing a stable (> 95% success rate) authenticated 0-click exploit from real-world CVEs. As you likely guessed from the title, we are targeting ksmbd, or Kernel SMB3 Daemon. Yes, you heard that right, Linux has a kernelspace SMB3 server because userspace just isn’t enough. Thank you, Microsoft!
-