Nos escuchan loquesomos.org/nos-escuchan...
Nos escuchan - LoQueSomos
Nos escuchan, Ciencia, divulgación científica, Pegasus, Patternz, Predator, intellexa, Citizen Lab, Amnistía Internacional, securitylab, Proyecto App-PI, INCIBE, Belén Gopegui
loquesomos.org
April 16, 2025 at 5:59 AM
Nos escuchan loquesomos.org/nos-escuchan...
👑🩵 "Security Lab was created to specifically investigate the sophisticated #DigitalThreats that civil society was facing, and to help civil society constructively confront those threats," says Molly Cyr, @amnesty.org’s #SecurityLab Training and Community Engagement Lead. https://buff.ly/3WAqeMC
February 3, 2025 at 6:00 AM
👑🩵 "Security Lab was created to specifically investigate the sophisticated #DigitalThreats that civil society was facing, and to help civil society constructively confront those threats," says Molly Cyr, @amnesty.org’s #SecurityLab Training and Community Engagement Lead. https://buff.ly/3WAqeMC
👑🩵 Are you a Digital Rights Defender interested in #DigitalForensicAnalysis to uncover spyware and surveillance tools? Check out the latest #CommunitySeries with @amnesty.org’s #SecurityLab https://buff.ly/3WAqeMC
February 13, 2025 at 6:02 PM
👑🩵 Are you a Digital Rights Defender interested in #DigitalForensicAnalysis to uncover spyware and surveillance tools? Check out the latest #CommunitySeries with @amnesty.org’s #SecurityLab https://buff.ly/3WAqeMC
👑🩵 The world of #TechSecurity isn’t just about code—it’s also about people. @amnesty.org’s #SecurityLab dives deep into how we can make the digital space safer for everyone. Read more: https://buff.ly/3WAqeMC
February 5, 2025 at 6:00 AM
👑🩵 The world of #TechSecurity isn’t just about code—it’s also about people. @amnesty.org’s #SecurityLab dives deep into how we can make the digital space safer for everyone. Read more: https://buff.ly/3WAqeMC
👑🩵 “The rapidly evolving spyware landscape has meant that civil society has been forced to adapt and change detection and protection tactics,” says Molly Cyr, @amnesty.org’s #SecurityLab Training and Community Engagement Lead in the latest Community Series
Security Lab | Amnesty Tech | Spyware | Surveillance | Digital Forensics Fellowship
Amnesty Tech’s Security Lab is dedicated to protecting civil society from digital surveillance, spyware, and tech-driven human rights violations. We talked with Molly Rose Freeman Cyr, their Training…
buff.ly
February 11, 2025 at 6:04 PM
👑🩵 “The rapidly evolving spyware landscape has meant that civil society has been forced to adapt and change detection and protection tactics,” says Molly Cyr, @amnesty.org’s #SecurityLab Training and Community Engagement Lead in the latest Community Series
Author published an exploit for this bug that disable SELinux and gains root privileges on Pixel 8 running from the untrusted_app context. The exploit is not affected by MTE.
github.com/github/secur...
github.com/github/secur...
securitylab/SecurityExploits/Android/Mali/CVE-2025-0072 at main · github/securitylab
Resources related to GitHub Security Lab. Contribute to github/securitylab development by creating an account on GitHub.
github.com
June 9, 2025 at 1:35 PM
Author published an exploit for this bug that disable SELinux and gains root privileges on Pixel 8 running from the untrusted_app context. The exploit is not affected by MTE.
github.com/github/secur...
github.com/github/secur...
Re: CVE-2025-53367: An exploitable OOB write in DjVuLibre
oss-sec: Re: CVE-2025-53367: An exploitable OOB write in DjVuLibre
Posted by Kevin Backhouse on Jul 18 As promised, I've now published the full poc that achieves code
execution in evince/papers:
https://github.com/github/securitylab/tree/main/SecurityExploits/DjVuLibre/MMRDecoder_scanruns_CVE-2025-53367
Kev
seclists.org
July 18, 2025 at 6:20 PM
Re: CVE-2025-53367: An exploitable OOB write in DjVuLibre
Re: GHSL-2025-054: Use After Free (UAF) in Poppler - CVE-2025-52886
oss-sec: Re: GHSL-2025-054: Use After Free (UAF) in Poppler - CVE-2025-52886
Posted by Kevin Backhouse on Jul 12 Hi Alan,
Thanks for posting this one! I didn't send it to the list myself
because I don't think it's realistically exploitable: it takes too
long to trigger the integer overflow. But for anybody who's
interested, the poc is here:
https://github.com/github/securitylab/tree/main/SecurityExploits/freedesktop/poppler-CVE-2025-52886
Thanks,
Kev
seclists.org
July 12, 2025 at 11:41 AM
Re: GHSL-2025-054: Use After Free (UAF) in Poppler - CVE-2025-52886
Our deep research work is primarily intended to inspire the community, so that we can improve open source security together. That’s why we publish detailed blog posts and proof-of-concept exploits. github.com/github/secur...
securitylab/SecurityExploits/Android/Mali/CVE_2023_6241 at main · github/securitylab
Resources related to GitHub Security Lab. Contribute to github/securitylab development by creating an account on GitHub.
github.com
February 6, 2025 at 10:00 PM
Our deep research work is primarily intended to inspire the community, so that we can improve open source security together. That’s why we publish detailed blog posts and proof-of-concept exploits. github.com/github/secur...
La investigació continua i es manté oberta la possibilitat que es revelin més detalls sobre les circumstàncies de l'atac i el perfil dels presumptes agressors. Fonts: Times of India, Institute for Security Studies, SecurityLab, Amnesty International.
December 21, 2025 at 4:40 AM
La investigació continua i es manté oberta la possibilitat que es revelin més detalls sobre les circumstàncies de l'atac i el perfil dels presumptes agressors. Fonts: Times of India, Institute for Security Studies, SecurityLab, Amnesty International.
MastodonのURL検証、このファイルをraw.githubusercontent.com経由で開くだけでいいのか
securitylab/mastodon/verifications.html at main · github/securitylab : 👀
---
https://github.com/github/securitylab/blob/main/mastodon/verifications.html
securitylab/mastodon/verifications.html at main · github/securitylab : 👀
---
https://github.com/github/securitylab/blob/main/mastodon/verifications.html
securitylab/mastodon/verifications.html at main · github/securitylab
Resources related to GitHub Security Lab. Contribute to github/securitylab development by creating an account on GitHub.
github.com
February 18, 2026 at 10:43 AM
MastodonのURL検証、このファイルをraw.githubusercontent.com経由で開くだけでいいのか
securitylab/mastodon/verifications.html at main · github/securitylab : 👀
---
https://github.com/github/securitylab/blob/main/mastodon/verifications.html
securitylab/mastodon/verifications.html at main · github/securitylab : 👀
---
https://github.com/github/securitylab/blob/main/mastodon/verifications.html