正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

‼️🚨 Security researcher ggwhyp demonstrated a full-chain Firefox exploit on Windows. He opens an HTML page, Firefox runs the code, cmd.exe spawns, Calculator opens. Signature of a browser-to-OS exploit. Prepared for Pwn2Own. ZDI rejected it. According to the researcher, it was responsibly disclosed to Mozilla.

International Cyber Digest

209,195 subscribers

207,254 次观看 • 4 个月前 •via X (Twitter)

新闻政治科学技术

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

TrendAI Zero Day Initiative

13,649 次观看 • 11 个月前

Design Engineering Tip: If your whole page shifts 15px the moment a modal opens, it isn't the modal. It's the scrollbar disappearing, because the library sets overflow: hidden on the body to lock scrolling. Reserve the space before you ever need it: html { scrollbar-gutter: stable; }

Design Engineering Tip: If your whole page shifts 15px the moment a modal opens, it isn't the modal. It's the scrollbar disappearing, because the library sets overflow: hidden on the body to lock scrolling. Reserve the space before you ever need it: html { scrollbar-gutter: stable; }

Gabriel

31,433 次观看 • 1 个月前

🚨CRONOS IS BACK ONLINE AFTER THE HALT! Cronos Network said the chain is producing blocks again after validators stopped it to contain the Tectonic exploit. It restored the chain to a state from before that attack and restarted from block 90,896,189. Ryan Wyatt, CEO of Cronos, said the halt was meant to protect users and that services would come back shortly. Some apps, RPCs, explorers and bridges will take longer. A full postmortem is still coming.

🚨CRONOS IS BACK ONLINE AFTER THE HALT! Cronos Network said the chain is producing blocks again after validators stopped it to contain the Tectonic exploit. It restored the chain to a state from before that attack and restarted from block 90,896,189. Ryan Wyatt, CEO of Cronos, said the halt was meant to protect users and that services would come back shortly. Some apps, RPCs, explorers and bridges will take longer. A full postmortem is still coming.

Crypto Banter

15,256 次观看 • 1 个月前

🚨#BREAKING: According to FBI officials, the Trump rally shooting is being investigated as an attempted assassination and a potential act of domestic terrorism. The suspected shooter had been rejected from a high school rifle club, according to two former team members as He was asked not to come back because he was such a bad shot; it was considered dangerous," said one of the team members.

🚨#BREAKING: According to FBI officials, the Trump rally shooting is being investigated as an attempted assassination and a potential act of domestic terrorism. The suspected shooter had been rejected from a high school rifle club, according to two former team members as He was asked not to come back because he was such a bad shot; it was considered dangerous," said one of the team members.

R A W S A L E R T S

5,295,718 次观看 • 2 年前

🚨HUGE: SUI'S LATEST MILESTONE OPENS THE DOOR TO INSTITUTIONAL PARTICIPATION The Chicago Mercantile Exchange (CME) will officially launch trading for Sui futures on May 4th... ... a milestone which may cause a wave of institutional participation when it comes to the $SUI token itself. According to CoinDesk, daily notional volume on CME's growing suite of crypto offerings is already at ~$8 billion.

🚨HUGE: SUI'S LATEST MILESTONE OPENS THE DOOR TO INSTITUTIONAL PARTICIPATION The Chicago Mercantile Exchange (CME) will officially launch trading for Sui futures on May 4th... ... a milestone which may cause a wave of institutional participation when it comes to the $SUI token itself. According to CoinDesk, daily notional volume on CME's growing suite of crypto offerings is already at ~$8 billion.

BSCN

13,757 次观看 • 6 个月前

🌶️ Spicy take: Codex is better at animation than Claude 1. Gave Codex HTML of a page (39,000 lines of code) 2. Told it to recreate the page pixel perfectly 3. Verified it was pixel perfect, told it animate with Remotion like a promo video 4. Three short prompts later...

🌶️ Spicy take: Codex is better at animation than Claude 1. Gave Codex HTML of a page (39,000 lines of code) 2. Told it to recreate the page pixel perfectly 3. Verified it was pixel perfect, told it animate with Remotion like a promo video 4. Three short prompts later...

Jason Zook

48,373 次观看 • 3 个月前

Internet Computer smart contracts serve the web page, not just the data behind it On most chains the app you click lives on a normal web server, and only transactions touch the chain. On DFINITY Foundation's internet-computer:native, the HTML, CSS, and JavaScript sit inside a canister, the network's word for a smart contract. A browser request reaches an HTTP gateway, which turns it into a query call. An API boundary node routes that to the subnet holding the canister, and the reply comes back as ordinary HTTP. The machines doing that routing cannot change what the contract stores. On the standard domain, the gateway also checks a signature on every response, so a single bad node cannot quietly swap out the page. Sites can also be served over a raw domain that skips the signature check. The docs warn that on that route a single bad node can alter what the browser receives.

Internet Computer smart contracts serve the web page, not just the data behind it On most chains the app you click lives on a normal web server, and only transactions touch the chain. On DFINITY Foundation's internet-computer:native, the HTML, CSS, and JavaScript sit inside a canister, the network's word for a smart contract. A browser request reaches an HTTP gateway, which turns it into a query call. An API boundary node routes that to the subnet holding the canister, and the reply comes back as ordinary HTTP. The machines doing that routing cannot change what the contract stores. On the standard domain, the gateway also checks a signature on every response, so a single bad node cannot quietly swap out the page. Sites can also be served over a raw domain that skips the signature check. The docs warn that on that route a single bad node can alter what the browser receives.

BSCN

18,084 次观看 • 27 天前

Slightly odd. In April Charlie Kirk appears on Bill Maher’s Club Random. It opens with a discussion of Kirk having to have security. However on Maher’s channel the part where they both discuss using Israelis for their security is edited out. It remains on Kirk’s YouTube channel

Slightly odd. In April Charlie Kirk appears on Bill Maher’s Club Random. It opens with a discussion of Kirk having to have security. However on Maher’s channel the part where they both discuss using Israelis for their security is edited out. It remains on Kirk’s YouTube channel

Sean Padraig McCarthy

3,104,004 次观看 • 1 年前

🤯 Mind officially blown: I recorded a screen capture of a task (looking for an apartment on Zillow). Gemini was able to generate Selenium code to replicate that task, and described everything I did step-by-step. It even caught that my threshold was set to $3K, even though I didn't explicitly select it. 🤯🔥 "This code will open a Chrome browser, navigate to Zillow, enter "Cupertino, CA" in the search bar, click on the "For Rent" tab, set the price range to "Up to $3K", set the number of bedrooms to "2+", select the "Apartments/Condos/Co-ops" checkbox, click on the "Apply" button, wait for the results to load, print the results, and close the browser."

🤯 Mind officially blown: I recorded a screen capture of a task (looking for an apartment on Zillow). Gemini was able to generate Selenium code to replicate that task, and described everything I did step-by-step. It even caught that my threshold was set to $3K, even though I didn't explicitly select it. 🤯🔥 "This code will open a Chrome browser, navigate to Zillow, enter "Cupertino, CA" in the search bar, click on the "For Rent" tab, set the price range to "Up to $3K", set the number of bedrooms to "2+", select the "Apartments/Condos/Co-ops" checkbox, click on the "Apply" button, wait for the results to load, print the results, and close the browser."

👩‍💻 Paige Bailey

899,897 次观看 • 2 年前

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

c0c0n2026

10,569 次观看 • 5 个月前

The Athletics are the favorites to sign SS Johenssy Colome for around $2 million when a new international signing period opens on January 15, according to sources. Colome comes from a family with MLB pedigree. “He is one of the best in this class,” a scout said.

The Athletics are the favorites to sign SS Johenssy Colome for around $2 million when a new international signing period opens on January 15, according to sources. Colome comes from a family with MLB pedigree. “He is one of the best in this class,” a scout said.

Francys Romero

51,857 次观看 • 9 个月前

Substance Abuse Clinic in Minneapolis has a QR code in the window that leads to a google forms page, and on page 2 it asks people to enter their social security number. This is the clinic Ilhan Omar said would be receiving the $1.4M that was blocked. When has a person ever needed to submit their SOCIAL SECURITY NUMBER into a GOOGLE FORM?!

Substance Abuse Clinic in Minneapolis has a QR code in the window that leads to a google forms page, and on page 2 it asks people to enter their social security number. This is the clinic Ilhan Omar said would be receiving the $1.4M that was blocked. When has a person ever needed to submit their SOCIAL SECURITY NUMBER into a GOOGLE FORM?!

Angela Rose

73,217 次观看 • 5 个月前

Microsoft's new Outlook takes more than 10 seconds to open an email via notifications, while Outlook Classic opens instantly on Windows 11! The funniest part? If I ignore the notification, open Outlook manually, find the email myself, and click it, I can finish faster than the notification flow. It's all because Outlook for Windows is literally Microsoft Edge running Outlook .com in a browser window. New Outlook runs through WebView2 with around 10 separate processes: GPU process, service worker, utility processes, manager, and more. It uses roughly 490MB to 636MB RAM while idle, compared to Outlook Classic sitting around 117MB to 148MB. CPU usage is also worse: around 4% idle on new Outlook versus under 1% on Classic in my testing. Microsoft shut down Mail and Calendar, keeps pushing enterprises toward this web wrapper, and still wants people to believe it is the future of email on Windows. SHAME!

Microsoft's new Outlook takes more than 10 seconds to open an email via notifications, while Outlook Classic opens instantly on Windows 11! The funniest part? If I ignore the notification, open Outlook manually, find the email myself, and click it, I can finish faster than the notification flow. It's all because Outlook for Windows is literally Microsoft Edge running Outlook .com in a browser window. New Outlook runs through WebView2 with around 10 separate processes: GPU process, service worker, utility processes, manager, and more. It uses roughly 490MB to 636MB RAM while idle, compared to Outlook Classic sitting around 117MB to 148MB. CPU usage is also worse: around 4% idle on new Outlook versus under 1% on Classic in my testing. Microsoft shut down Mail and Calendar, keeps pushing enterprises toward this web wrapper, and still wants people to believe it is the future of email on Windows. SHAME!

Windows Latest

102,277 次观看 • 3 个月前

Katie Razzall, "People will remember Nigel Farage resigned his seat, fought (a bin), won a by-election" "In response to a Parliamentary Standards investigation into an undeclared £5,000,000 gift (from a foreign based crypto billionaire, then privately lobbying the governor of the Bank of England to drop plans for a digital pound)" "He denies any wrongdoing (because he says it was unconditional, also that it was a reward for campaigning for Brexit, also that it was for his security, or to spend on Ferraris)"

Katie Razzall, "People will remember Nigel Farage resigned his seat, fought (a bin), won a by-election" "In response to a Parliamentary Standards investigation into an undeclared £5,000,000 gift (from a foreign based crypto billionaire, then privately lobbying the governor of the Bank of England to drop plans for a digital pound)" "He denies any wrongdoing (because he says it was unconditional, also that it was a reward for campaigning for Brexit, also that it was for his security, or to spend on Ferraris)"

Farrukh

38,730 次观看 • 1 个月前

Although it is every pub’s own decision on whether they prefer to use a sparkler or not, we do recommend using one for our beer. It's good to see Daf at The Park Crescent, Brighton agrees. It softens and opens the flavours giving an attractive head of beautiful beery foam.

Although it is every pub’s own decision on whether they prefer to use a sparkler or not, we do recommend using one for our beer. It's good to see Daf at The Park Crescent, Brighton agrees. It softens and opens the flavours giving an attractive head of beautiful beery foam.

Timothy Taylor's Brewery

26,531 次观看 • 2 年前

Something of a rarity these days, but back in 1975, it wasn't unusual to see a keeper catch the ball cleanly then try to get an attack underway, as demonstrated by QPR's Phil Parkes against Burnley. Unfortunately for Parkes, the ref decided it was time to blow for half-time...

Something of a rarity these days, but back in 1975, it wasn't unusual to see a keeper catch the ball cleanly then try to get an attack underway, as demonstrated by QPR's Phil Parkes against Burnley. Unfortunately for Parkes, the ref decided it was time to blow for half-time...

GoaliesAreDifferent

29,252 次观看 • 4 个月前

They told you it was just an acceptance speech. They told you to applaud and move on. But what if Jim Carrey didn't come to collect an award he came to deliver a verdict, and the silence that followed wasn't respect... it was shock. Here's what they don't tell you: Jim Carrey didn't just thank Hollywood, he indicted it. In a room full of stars, producers, and power brokers, he spoke a truth so dangerous the air left the building: Kidnapping children is not what great nations do. He didn't say it quietly. He declared it. And in that moment, the mask of entertainment slipped, and the monster beneath was named. That silence wasn't awe. It was tension. It was the sound of a system recognizing one of its own had broken the code. Celebrities aren't supposed to mention the unmentionable the trafficking, the corruption, the war crimes dressed as patriotism. Carrey didn't just cross a line. He erased it.

They told you it was just an acceptance speech. They told you to applaud and move on. But what if Jim Carrey didn't come to collect an award he came to deliver a verdict, and the silence that followed wasn't respect... it was shock. Here's what they don't tell you: Jim Carrey didn't just thank Hollywood, he indicted it. In a room full of stars, producers, and power brokers, he spoke a truth so dangerous the air left the building: Kidnapping children is not what great nations do. He didn't say it quietly. He declared it. And in that moment, the mask of entertainment slipped, and the monster beneath was named. That silence wasn't awe. It was tension. It was the sound of a system recognizing one of its own had broken the code. Celebrities aren't supposed to mention the unmentionable the trafficking, the corruption, the war crimes dressed as patriotism. Carrey didn't just cross a line. He erased it.

IRISH PATRIOT

659,716 次观看 • 8 个月前

A guy in Vancouver built an entire operating system inside a Chrome tab. By himself. Over six years. His personal website is the OS. You open and a Windows-style desktop loads. File explorer. Start menu. Taskbar. You can drag in a zip and extract it. You can play DOOM. You can play Quake III Arena. You can boot Linux from an ISO. You can run Stable Diffusion locally for image generation. You can open a Python terminal. You can edit code in Monaco, the same engine that powers VS Code. All of it runs in your browser tab. Nothing installs. His name is Dustin Brett. Self-taught engineer. Father. Husband. 4,473 commits. All his. He had to swap the Windows icon for the π symbol because of legal pressure. The repo has 12,883 stars. MIT license. His hosting bill is one dollar a month. A single Cloudflare CDN does the rest. This is what the open web was built for. (Link in the comments)

A guy in Vancouver built an entire operating system inside a Chrome tab. By himself. Over six years. His personal website is the OS. You open and a Windows-style desktop loads. File explorer. Start menu. Taskbar. You can drag in a zip and extract it. You can play DOOM. You can play Quake III Arena. You can boot Linux from an ISO. You can run Stable Diffusion locally for image generation. You can open a Python terminal. You can edit code in Monaco, the same engine that powers VS Code. All of it runs in your browser tab. Nothing installs. His name is Dustin Brett. Self-taught engineer. Father. Husband. 4,473 commits. All his. He had to swap the Windows icon for the π symbol because of legal pressure. The repo has 12,883 stars. MIT license. His hosting bill is one dollar a month. A single Cloudflare CDN does the rest. This is what the open web was built for. (Link in the comments)

Nav Toor

72,629 次观看 • 3 个月前