Cyber Santa & Giveaways

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

   They want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with them, and Apple’s Security Engineering and Architecture (SEAR) group for collaborating with them on the technical analysis.

   Read : A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution
2. /02

   Hackers vs. Developers // CVE-2021-44228 Log4Shell

   Let's try to make sense of the Log4j vulnerability. First we look at the Log4j features and JNDI, and then we explore the history of the recent log4shell vulnerability. This is part 1 of a two part series into log4j.

   Watch : Hackers vs. Developers // CVE-2021-44228 Log4Shell
3. /03

   Cyber Santa is Coming to Town - Hacking Party

   check it out if you're into bounties, web hacking, reversing, crypto or forensics.

   Watch : Cyber Santa is Coming to Town - Hacking Party
4. /04

   ThinkstScapes Research Roundup - Q4 - 2021

   Receive vendor neutral reports on key events and research findings as they occur with context, commentary and guidance.

   Read : ThinkstScapes Research Roundup - Q4 - 2021
5. /05

   Tunneling For Offensive Security

   One thing that comes up a lot when it comes to red teaming, penetration testing and breaching a network is proxy or tunnel traffic into multiple environments. The most common methods are using SSH port forwarding or Socket Secure (SOCKS) proxies.

   Read : Tunneling For Offensive Security