Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2023.11.10.md

iRacing Exploit allows attackers to take control of user's computer - https://blog.ss23.geek.nz/2023/09/21/iracing-electron-rce-exploit.html
Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust - https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/
Java Deserialization Vulnerability Still Alive - https://blog.pyn3rd.com/2023/10/20/Java-Deserialization-Vulnerability-Still-Alive/
Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers-  https://www.zerodayinitiative.com/blog/2023/8/1/exploiting-a-flaw-in-bitmap-handling-in-windows-user-mode-printer-drivers
Hayabusa is a Windows event log forensics timeline generator - https://github.com/Yamato-Security/hayabusa

#informatyka