ThinkstScapes Research Roundup - Q4 - 2024

ThinkstScapes Q4’24 Wins and losses in the Microsoft ecosystem Pointer Problems - Why We’re Refactoring the Windows Kernel Joe Bialek [Video] Defending off the land Casey Smith, Jacob Torrey, and Marco Slaviero [Slides] [Code] Unveiling the Power of Intune: Leveraging Intune for Breaking Into Your Cloud and On-Premise Yuya Chudo [Slides] [Code] From Simulation to Tenant Takeover Vaisha Bernard [Video] From Convenience to Contagion: The Libarchive Vulnerabilities Lurking in Windows 11 NiNi Chen [Slides] [Video] LLM hype continues, as do the security issues Things we learned about LLMs in 2024 Simon Willison [Blog] AI Meets Git: Unmasking Security Flaws in Qodo Merge Nils Amiet [Slides] [Video] [Blog] Suicide Bot: New AI Attack Causes LLM to Provide Potential “Self-Harm” Instructions Gadi Evron [Blog] Diving deep, then diving deeper Breaking NATO Radio Encryption Lukas Stennes [Paper] [Video] Exploiting File Writes in Hardened Environments Stefan Schiller [Blog] [Video] Hacking yourself a satellite - recovering BEESAT-1 PistonMiner [Video] IRIS: Non-Destructive Inspection of Silicon Andrew 'bunnie' Huang [Blog] [Paper] [Video] SQL Injection Isn't Dead Paul Gerste [Slides] [Video] Nifty sundries What Developers Get for Free? Louis Nyffenegger [Video] Dialing into the Past: RCE via the Fax Machine – Because Why Not? Rick de Jager and Carlo Meijer [Video] Broken isolation - Draining your Credentials from Popular macOS Password Managers Wojciech Reguła [Slides] [Video] I'll Be There for You! Perpetual Availability in the A8 MVX System André Rösti, Stijn Volckaert, Michael Franz, and Alexios Voulimeneas [Code] [Paper] Exploring and Exploiting an Android “Smart POS” Payment Terminal Jacopo Jannone [Video]