RME-DisCo @ UNIZAR [www.reversea.me]
описание
Telegram channel of RME, part of the DisCo Research Group of the University of Zaragoza (Spain) focused on cybersecurity aspects. "It’s not that I have something to hide. I have nothing I want you to see" Link to the channel: https://t.me/reverseame
3 465
подписчиков
Охват к подписчикам
23,5%
ERR
Реакции к просмотрам
0,01%
2 на 50 постов
Пересылки к просмотрам
0,99%
300
Постов в день
0,0
всего 263
Где отзываются чаще
доля реакций к просмотрам- 17 апр.How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack #SupplyChainAttack #XSS #Mintlify #CorporateSecurity #BugBounty https://gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d280,19%
- 6 июл.New on the blog: MARISSA reverse-engineers network protocol formats straight from PCAPs: no specs, no delimiters. Will be presented at @IEEEEUROSP 2026, come and say hi! https://reversea.me/index.php/inferring-network-protocols-from-traffic-with-marissa/ tool: https://github.com/reverseame/MARISSA0,08%
- 3 авг.New post: a five-phase, MITRE ATT&CK-aligned workflow for mem forensics, from evidence preservation to binary analysis. We also flag 4 issues that bias mem evidence: paging, demand paging, smearing, and binary transforms #ICDF2C25 https://reversea.me/index.php/bringing-structure-to-memory-forensics-a-five-phase-mitre-attck-aligned-workflow/ https://webdiis.unizar.es/~ricardo/files/papers/Rodriguez-ICDF2C-27.pdf0,00%
- 1 июл.New blog post! The simpler, the stealthier: we benchmarked 4 adversarial DGA models. The 2 simplest evade ML detectors >75% of the time and train in under 2s. Open-source: http://github.com/reverseame/adversarial-dga-framework, blog post: https://reversea.me/index.php/the-simpler-the-stealthier-benchmarking-adversarial-dga-models-in-a-unified-framework/ #DGA #MachineLearning #CyberSecurity #DIMVA20260,00%
- 21 июн.Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) #IvantiEPMM #PreAuthRCE #BashExploit #ArithmeticExpansion #ActivelyExploited https://labs.watchtowr.com/someone-knows-bash-far-too-well-and-we-love-it-ivanti-epmm-pre-auth-rces-cve-2026-1281-cve-2026-1340/0,00%
- 20 июн.How We Exploited Qodo: From a PR Comment to RCE and an AWS Admin Key - Leaked Twice #QodoSecurity #RCEAWSAdminKey #PRCommentExploit #SupplyChainAttack #VulnerabilityBypass https://kudelskisecurity.com/research/qodo-dynaconf-aws-admin-key-leaked-twice0,00%
- 5 июн.Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI #PHPObjectInjection #ProfileBuilderPro #WordPressSecurity #RemoteCodeExecution #AIAssistedExploit https://blog.sicuranext.com/exploiting-a-php-object-injection-in-profile-builder-pro-in-the-era-of-ai/0,00%
- 3 июн.Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense #CybersecurityAI #GameTheoretic #AttackDefense #LLMGuidance #StrategicAI https://arxiv.org/abs/2601.058870,00%
- 3 июн.One-click RCE on OpenClaw in under 2 hours with an Autonomous Hacking Agent https://ethiack.com/news/blog/one-click-rce-openclaw0,00%
- 2 июн.ZK credential sharing #ShareMyLogin #ZeroKnowledge #CredentialSharing #SecureSharing #PrivacyTech https://sharemylogin.com/0,00%
- 2 июн.General Graboids: Worms and Remote Code Execution in Command & Conquer #CommandAndConquer #GameVulnerabilities #RemoteCodeExecution #P2PWorm #SecurityResearch https://www.atredis.com/blog/2026/1/26/generals0,00%
- 2 июн.CVE-2025-40551: Another Solarwinds Web Help Desk Deserialization Issue #SolarWindsWHD #RCEVulnerability #DeserializationIssue #PatchBypass #CVE202540551 https://horizon3.ai/attack-research/cve-2025-40551-another-solarwinds-web-help-desk-deserialization-issue/0,00%