quarkslab (@quarkslab) / X

quarkslab
@quarkslab
Oct 1
Not an antivirus product this time, but we couldn't pass it up 🙈 @CatoNetworks said: route with split tunneling. @kaluche_ heard: root with split tunneling. Check out CVE-2026-10739, a LPE vulnerability in the Cato VPN Client for Windows ➡️ blog.quarkslab.com/cato-vpn-clien…
1
quarkslab
@quarkslab
Sep 29
To leverage AI agents for vulnerability research, we built a hybrid source-code analysis workflow that combines deterministic analysis with agentic reasoning. Applied to FreeRDP, it helped us uncover vulnerabilities and chain them into client-side RCE. blog.quarkslab.com/from-ai-agents…
3
quarkslab
@quarkslab
Sep 16
Optical network security often sounds like an obscure incantation: PON, ONU, OLT, PLOAM, OMCI, GEM, GPON, XG-PON, 50G-PON, T-CON.. To conjure the right knowledge read Thiébaud Fuchs' overview of Passive Optical Networks and their security features blog.quarkslab.com/overview-of-pa…
1
quarkslab
@quarkslab
Sep 2
Chamilo LMS was put under the microscope🔬 by @Coiffeur0x90 and @_lec0_. 11 vulnerabilities, multiple attack surfaces. Our new research dives into the vulnerable code paths and exploitation primitives to achieve unauthenticated RCE. 🔗 blog.quarkslab.com/chamilo-lms-it…
1
quarkslab
@quarkslab
Aug 20
"Software protection is futile, AI will break it", they said. But, does it? how? To shine some light read about Rémy Salim's experiments in "Defeating AI-Assisted Reverse Engineering" Where is the fair play, Claude? blog.quarkslab.com/defeating-ai-a…