Hi folks, my name is Gal Weizman, I do browser security research.

Excited to finally share my recent work, where I managed to hack Chrome, Comet, Edge, Opera and Claude in Chrome using one single browser extension

2 CVEs & $20,000 in bounties 🙂

Hope you like it!

Attackers are opening Microsoft Teams chats from tenants they control, using a display name like IT Service Desk, and talking people into either installing a file or handing over a remote session. Teams allows chat from any external domain by default, and the attacker only needs the target to say yes once. In the case Expel documented, the yes was an MSI hosted on a Microsoft Azure storage endpoint; the payoff was a fake Windows lock screen that captured the user’s password in the clear. Two settings in the Teams admin center and one sentence said out loud to your staff close most of this.

Guys, I am doing my thesis work and deadline is in 15 days. I don't have much time left to collect survey responses. could you please help me by participating in the survey? I need 100 responses atleast.

Please..

https://qualtricsxm58zvyjjjt.qualtrics.com/jfe/form/SV_3OQiuqeSOkh7zdc

Thanks :)

This is a deterministic local privilege escalation affecting the default install of the latest Arch, Fedora, Debian, Amazon Linux and RHEL distributions, having unprivileged user namespaces enabled, openvswitch auto-loading, and a stock kernel carrying the Fragnesia fix.