PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Fermium-252 : The Cyber Threat Intelligence Database

theori.io | research | #threat-intelligence | #poc | #fermium-252 | #1-day | #state-sponsored
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An overview of Fermium-252, Theori’s subscription threat-intelligence service tracking 1-day exploits: 463 in-depth vulnerability reports with 461 PoCs, aimed at countering state-sponsored attacks.
Published
Collected

Related coverage

research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
research · volexity.com
Magecart Strikes Again: Newegg in the Crosshairs
Volexity has conducted the following research in collaboration with RiskIQ. We will discuss the same incident from different perspectives. RiskIQ’s report of this activity can be seen here. In another […]
Back