● NEWS ● #PortSwigger #Privacy #Surveillance ☞ #AirTag clone bypassed Apple’s tracking-protection features, claims researcher https://portswigger.net/daily-swig/airtag-clone-bypassed-apples-tracking-protection-features-claims-researcher

● NEWS ● #PortSwigger #Programming ☞ Top 10 web [cracking] techniques of 2021 https://portswigger.net/research/top-10-web-hacking-techniques-of-2021

#SnapFuzz : New #fuzzing tool speeds up testing of network applications | The Daily Swig ⚓ https://portswigger.net/daily-swig/snapfuzz-new-fuzzing-tool-speeds-up-testing-of-network-applications ䷉ #portswigger | more in http://schestowitz.com/2022/02/06/#latest

Researcher discloses alleged zero-day vulnerabilities in NUUO NVRmini2 recording device | The Daily Swig ⚓ https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device ䷉ #portswigger

#Kazakhstan government shuts down internet following country-wide protests | The Daily Swig ⚓ https://portswigger.net/daily-swig/kazakhstan-government-shuts-down-internet-following-country-wide-protests ䷉ #portswigger #internet

● NEWS ● #PortSwigger ☞ Wireless coexistence – New attack technique exploits Bluetooth, WiFi performance features for ‘inter-chip privilege escalation’ https://portswigger.net/daily-swig/wireless-coexistence-new-attack-technique-exploits-bluetooth-wifi-performance-features-for-inter-chip-privilege-escalation

● NEWS ● #PortSwigger #ProprietarySoftware ☞ Anti-cheating browser extension fails web security examination https://portswigger.net/daily-swig/anti-cheating-browser-extension-fails-web-security-examination

● NEWS ● #PortSwigger #Confidentiality ☞ #uBlock , I exfiltrate: exploiting ad blockers with CSS https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css

● NEWS ● #PortSwigger #Privacy #Surveillance ☞ #TorProject unveils plans to route device traffic through #Tor anonymity network with new VPN-like service https://portswigger.net/daily-swig/tor-project-unveils-plans-to-route-device-traffic-through-tor-anonymity-network-with-new-vpn-like-service

● NEWS ● #PortSwigger #ProprietarySoftware ☞ Number of cyber-attacks infiltrating critical #NewZealand networks soars https://portswigger.net/daily-swig/number-of-cyber-attacks-infiltrating-critical-new-zealand-networks-soars http://techrights.org/2021/10/29/microsoft-national-security-threat/

● NEWS ● #PortSwigger #ProprietarySoftware ☞ #Interpol issues arrest warrants for members of Clop #ransomware gang https://portswigger.net/daily-swig/interpol-issues-arrest-warrants-for-members-of-clop-ransomware-gang http://techrights.org/2021/05/02/ransomware-task-force/

● NEWS ● #PortSwigger #ProprietarySoftware ☞ Africa sees increase in #ransomware, botnet attacks – but online scams still pose biggest threat https://portswigger.net/daily-swig/africa-sees-increase-in-ransomware-botnet-attacks-but-online-scams-still-pose-biggest-threat http://techrights.org/2021/10/29/microsoft-national-security-threat/

● NEWS ● #PortSwigger ☞ #NSA warns of heightened wildcard TLS certificate risk https://portswigger.net/daily-swig/nsa-warns-of-heightened-wildcard-tls-certificate-risk NSA does not care about real security though. http://techrights.org/2020/11/07/free-privacy-lunch/

PoC released for #Ghostscript vulnerability that exposed Airbnb, Dropbox | The Daily Swig ⚓ https://portswigger.net/daily-swig/poc-released-for-ghostscript-vulnerability-that-exposed-airbnb-dropbox ䷉ #portswigger | more in http://schestowitz.com/2021/09/07/#latest

PoC released for Ghostscript vulnerability that exposed Airbnb, Dropbox

Server-side image conversion vector laid bare

● NEWS ● #PortSwigger ☞ #BlackHat USA: HTTP/2 flaws expose organizations to fresh wave of request smuggling attacks https://portswigger.net/daily-swig/black-hat-usa-http-2-flaws-expose-organizations-to-fresh-wave-of-request-smuggling-attacks

Black Hat USA: HTTP/2 flaws expose organizations to fresh wave of request smuggling attacks

Security researcher James Kettle digs deep into the web stack to reveal some shiny new attack surface

● NEWS ● #PortSwigger #Standards ☞ HTTP/2: The Sequel is Always Worse https://portswigger.net/research/http2

HTTP/2: The Sequel is Always Worse

In this research paper James Kettle introduces multiple new classes of HTTP/2-exclusive attacks, demonstrated on popular websites and servers.

● NEWS ● #PortSwigger ☞ #cURL developers take a second shot at fixing information disclosure flaw https://portswigger.net/daily-swig/curl-developers-take-a-second-shot-at-fixing-information-disclosure-flaw #deletegithub

cURL developers take a second shot at fixing information disclosure flaw

‘We borked the fix,’ developer candidly admits