@modzero.bsky.social
Breaking stuff since 2011
Does anyone here have a working way to contact archive.org?
It's about a security issue...
catch a glimpse of us holding our annual “state of the zero” meetup - to wrap our heads around all of IT and us.
we also took a boat trip, ate too many sweets, touched some grass, saved the world, had a barbecue and a drink or two…💓
#modzero #infosec #itsecurity #captainitswednesday
quantität vs qualität. aber naja, was weiss ich schon.
03.09.2025 07:52 — 👍 1 🔁 0 💬 0 📌 0
PSA update your INSTAR cameras. Our teammate Michael Imfeld identified a critical RCE (CVE-2025-8760) on 2k+ and 4K devices. Find the advisory here:
modzero.com/en/advisorie...
This blog post contains the full technical walk-through and discovery of the vulnerability, its impact, and our experience during the responsible disclosure process with Synology.
29.06.2025 08:01 — 👍 3 🔁 0 💬 0 📌 0Teammate Leonid discovered a leaked credential that allowed anyone unauthorized access to all Microsoft tenants of orgs that use Synology's "Active Backup for Microsoft 365" (ABM), including sensitive data like Teams channel messages. 🤓
#synology #disclosure #modzero
modzero.com/en/blog/when...
nooooooooooo... 💔
25.06.2025 12:52 — 👍 1 🔁 0 💬 1 📌 0🧙
14.05.2025 14:47 — 👍 0 🔁 0 💬 0 📌 0*rülps
24.04.2025 08:07 — 👍 0 🔁 0 💬 0 📌 0nice!
02.04.2025 05:04 — 👍 0 🔁 0 💬 0 📌 0"kick off" passt ganz gut. wenn auch noch ein wenig zu höflich
31.03.2025 07:54 — 👍 2 🔁 0 💬 1 📌 0vielleicht mal ein argument für bildungsgeld, das auch neolibs verstehen?
31.03.2025 06:49 — 👍 3 🔁 0 💬 0 📌 0ja!
11.02.2025 08:10 — 👍 1 🔁 0 💬 0 📌 0Dive into the process of reverse engineering, gadget hunting, and crafting a working exploit.
07.02.2025 17:10 — 👍 2 🔁 0 💬 0 📌 0Via Return-Oriented Programming chain small code snippets, or gadgets, already present in a program’s memory can be leveraged
By chaining these gadgets together, they can execute arbitrary code without injecting anything new
ROPing our way to “Yay, RCE” - and a lesson in the importance of a good nights sleep!
Follow our Colleague Michaels journey of developing an ARM ROP chain to exploit a buffer overflow in uc-http
modzero.com/en/blog/ropi...
🔔 Unser #kandidierendencheck ist online: 18 Thesen beantworten - und ihr erfahrt, welche Kandidierenden in eurem Wahlkreis so denken wie ihr. 👇
www.kandidierendencheck.de/bundestag
uuuuh, nice.
03.02.2025 09:11 — 👍 3 🔁 0 💬 0 📌 0hier! *wink
03.02.2025 09:08 — 👍 3 🔁 0 💬 1 📌 0kluk 😐
29.01.2025 11:50 — 👍 0 🔁 0 💬 0 📌 0
Seit heute ist der Real-O-Mat online. Das Tool vergleicht die eigene Position bei relevanten Fragen mit denen der Fraktionen im Bundestag. Grundlage dafür sind keine Wahlkampfversprechen, sondern das Abstimmungsverhalten.
netzpolitik.org/2025/real-o-...
"aus Verzweiflung rechtsradikal" wählen?
29.01.2025 06:49 — 👍 0 🔁 0 💬 0 📌 0💓
27.01.2025 15:46 — 👍 1 🔁 0 💬 0 📌 0ugh. 😷
27.01.2025 09:16 — 👍 0 🔁 0 💬 0 📌 0kchkchkch. passt iwie auch immer. also, gern geschehen!
27.01.2025 07:51 — 👍 0 🔁 0 💬 0 📌 0🎵 why don't you leave yor name and your number ... 🎶
27.01.2025 07:43 — 👍 0 🔁 0 💬 1 📌 0learn all about it from our colleagues Pascal and Christoph at their 37c3 talk or from our published disclosure report: modzero.com/en/blog/mult...
16.01.2025 15:06 — 👍 0 🔁 0 💬 0 📌 0attackers could then listen in on conversations using the built-in microphones or could reroute incoming and outgoing calls ... and so on
16.01.2025 15:06 — 👍 0 🔁 0 💬 1 📌 0we found several vulnerabilities in commonly used desk phones and smart conference speakers. combined, the issues can be used to take over a device through the local network or with physical access
16.01.2025 15:06 — 👍 0 🔁 0 💬 1 📌 0
