infosec

Troy Hunt 的 Weekly Update 525 讨论了关于 AI 导致数据泄露的炒作，指出目前证据显示大多数数据泄露仍由人为社会工程（如 vishing）造成，而非 AI 编排。

EvilVM is a native code Forth compiler deployed as position-independent shellcode for remote code execution in information security contexts, providing an interactive shell and capabilities for remote code delivery and compilation.

The author describes their path into information security through self-learning, CTF competitions, and programs like AIS3, sharing career advice on skills and certifications in the field.

A flash alert reports that EtherRat and TukTuk C2 infrastructure are being used to deploy The Gentleman Ransomware, warning cybersecurity professionals.

GitHub is hosting a security webinar on July 28 covering secret leak trends, public exposure monitoring, and practical steps for organizations to reduce risk and respond quickly.

Analysis of a month-long TFTP honeypot operation reveals regular scans from seven infosec companies and occasional cryptic probes.

This project is an AI skill routing package for reverse engineering and penetration testing. Through routing.md, it enables AI to automatically select the appropriate tools and methods, lowering the barriers to security offense and defense.

Soatok provides an informal introduction to threat modeling, explaining the basic questions a threat model should answer and common pitfalls to avoid, aimed at beginners in cybersecurity.

A detailed post-mortem of a sophisticated fake-interview scam targeting a Rust developer, involving a fabricated VC persona and a custom RAT delivered via a TypeScript repository. The author evades infection thanks to caution and AI-assisted code review.