Python Bot Delivered Through DLL Side-Loading

A "normal", but vulnerable to DLL side-loading PDF reader may be used to launch additional exploit code

https://isc.sans.edu/diary/Python%20Bot%20Delivered%20Through%20DLL%20Side-Loading/31778

Tomcat RCE Correction

To exploit the Tomcat RCE I mentioned yesterday, two non-default configuration options must be selected by the victim.

https://x.com/dkx02668274/status/1901893656316969308

SAML Roulette: The Hacker Always Wins

This Portswigger blog explains in detail how to exploit the ruby-saml vulnerablity against GitLab.

https://portswigger.net/research/saml-roulette-the-hacker-always-wins

Windows Shortcut Zero Day Exploit

Attackers are currently taking advantage of an unpatched vulnerability in how Windows displays Shortcut (.lnk file) details. Trendmicro explains how the attack works and provides PoC code. Microsoft is not planning to fix this issue

https://www.trendmicro.com/en_us/research/25/c/windows-shortcut-zero-day-exploit.html