Social 📸 Photography

Pen Test Partners🚫 No fire detection means no going to sea. If you're running the Consilium Safety CS5000 fire panel on board, hardcoded credentials could let an attacker shut it down remotely.   As a result, if the system is taken offline, your vessel could be detained, lose its class certification, or be prevented from sailing altogether.   There is no patch available. The vendor has stated they won’t fix the issue unless cybersecurity was part of your original contract.   If your panel was installed before July 2024, it likely wasn’t designed with modern cybersecurity in mind.   Andrew Tierney explains how we discovered the vulnerability, its implications for operators, and the steps you can take to mitigate the risk.   📌 Read here: <a href="https://www.pentestpartners.com/security-blog/fire-detection-system-been-pwned-youre-not-going-to-sea/" rel="nofollow noopener" translate="no" target="_blank">https://www.pentestpartners.com/security-blog/fire-detection-system-been-pwned-youre-not-going-to-sea/</a>   <a href="https://infosec.exchange/tags/MaritimeCyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#MaritimeCyberSecurity</a> <a href="https://infosec.exchange/tags/VulnerabilityResearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityResearch</a> <a href="https://infosec.exchange/tags/OTSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTSecurity</a> <a href="https://infosec.exchange/tags/FireDetection" class="mention hashtag" rel="nofollow noopener" target="_blank">#FireDetection</a> <a href="https://infosec.exchange/tags/CyberRisk" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberRisk</a>

HN SecurityWe have identified some security vulnerabilities (CVE-2025-1731) in Zyxel USG FLEX H Series firewall appliances, that allow local users with access to a Linux OS shell to escalate privileges to root. <a href="https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731" rel="nofollow noopener" translate="no" target="_blank">https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731</a> <a href="https://infosec.exchange/tags/Zyxel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Zyxel</a> <a href="https://infosec.exchange/tags/VulnerabilityResearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityResearch</a> <a href="https://infosec.exchange/tags/CoordinatedDisclosure" class="mention hashtag" rel="nofollow noopener" target="_blank">#CoordinatedDisclosure</a>

JamesStevensonJust finishing up Obfu[DE]scate! A <a href="https://infosec.exchange/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> tool that simplifies de-obfuscation and comparison between <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> APK versions - even after functions have been renamed, removed, or altered as part of obfuscation.<a href="https://github.com/user1342/Obfu-DE-Scate" rel="nofollow noopener" target="_blank">https://github.com/user1342/Obfu-DE-Scate</a><a href="https://infosec.exchange/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReverseEngineering</a> <a href="https://infosec.exchange/tags/MalwareAnalysis" class="mention hashtag" rel="nofollow noopener" target="_blank">#MalwareAnalysis</a> <a href="https://infosec.exchange/tags/VulnerabilityResearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityResearch</a>

JamesStevensonI've been working on a <a href="https://infosec.exchange/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReverseEngineering</a>, <a href="https://infosec.exchange/tags/VulnerabilityResearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityResearch</a> , <a href="https://infosec.exchange/tags/PenTesting" class="mention hashtag" rel="nofollow noopener" target="_blank">#PenTesting</a>, and <a href="https://infosec.exchange/tags/OffensiveSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#OffensiveSecurity</a> training platform over the past few months. It's still in the 'MVP' stage so I'd love any feedback folk have for it! 🧑‍💻👩‍💻👨‍💻<a href="http://www.TODO.courses" rel="nofollow noopener" target="_blank">http://www.TODO.courses</a>

JamesStevensonI've finally setup an account on Mastodon 🙌😅 Now that I'm here, thought that I'd fill my feed with a few bits and pieces that I've been up to over the past year. 🧵📱100% off <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> Analysis Course: <a href="https://www.udemy.com/course/android-malware-analysis/?couponCode=MASTODON" rel="nofollow noopener" target="_blank">https://www.udemy.com/course/android-malware-analysis/?couponCode=MASTODON</a>🤖 100% off Android Games <a href="https://infosec.exchange/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReverseEngineering</a> Course: <a href="https://www.udemy.com/course/learn-reverse-engineering-through-android-games/?couponCode=MASTODON" rel="nofollow noopener" target="_blank">https://www.udemy.com/course/learn-reverse-engineering-through-android-games/?couponCode=MASTODON</a>📚 75% Off My Android / <a href="https://infosec.exchange/tags/iOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#iOS</a> <a href="https://infosec.exchange/tags/VulnerabilityResearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityResearch</a> and <a href="https://infosec.exchange/tags/PenTesting" class="mention hashtag" rel="nofollow noopener" target="_blank">#PenTesting</a> book: <a href="https://ko-fi.com/jamesstevenson/link/MASTODON" rel="nofollow noopener" target="_blank">https://ko-fi.com/jamesstevenson/link/MASTODON</a>

Recent searches

Search options

Administered by:

Server stats:

#vulnerabilityresearch