Vulnerabilities
Does PhantomBuffer bypass EDR using WM_SETTEXT and stealth injection?
A new report details how PhantomBuffer evades endpoint detection by avoiding standard memory APIs in favour of stealth injection techniques.
r/netsec
Everything Honeypot Daily has reported about r/netsec: 2 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Can Race Conditions and JPEG Injection Let Attackers Run Unauthorized Code in Discourse?
Security researchers demonstrated how Discourse’s image processing can be bypassed using a race condition and JPEG injection to execute unauthorised code.