@Marcus Hutchins :verified:
Cybersecurity
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
Really, really impressed with MSRC:
Hello Adam,
My name is Nic Fillingham and I work for the Microsoft Security Response Center (MSRC) based in Redmond, WA. I help manage Coordinated Vulnerability D...
@nprofile1q... Someone needs to check the office water coolers at Redmond. I think it might have gotten filled with lead
ComoDoS - Exploiting a Remote Kernel Zero-Day Vulnerability in Comodo Internet Security
How an IP parsing vulnerability makes it possible to remotely crash systems with a single TCP/IP packet
https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html
How an IP parsing vulnerability makes it possible to remotely crash systems with a single TCP/IP packet
https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html
It's been a while since I did a vulnerability research article. How about a little DoS zero-day as a treat?
https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html
https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html
It's been a while since I did a vulnerability research article. How about a little DoS zero-day as a treat?
https://malwaretech.com/2026/06/exploiting-a-remote-kernel-pool-overflow-in-comodo-internet-security.html
https://malwaretech.com/2026/06/exploiting-a-remote-kernel-pool-overflow-in-comodo-internet-security.html
My thoughts on Microsoft's threat to prosecute researchers for dropping zero day exploits
https://www.youtube.com/watch?v=gCkfWo5rie8
https://www.youtube.com/watch?v=gCkfWo5rie8
1
Slowly setting up my video/livestream studio again. The amount of tech required for even a half decent experience is crazy
4
@nprofile1q... Nice work dude! I assume this locks down the ABE bypasses that work via injecting into the broker and hijacking the COM session?
Does it also apply to Chrome processes launched via CreateProcess suspended for process hollowing purposes?
Does it also apply to Chrome processes launched via CreateProcess suspended for process hollowing purposes?
I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.
1