<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
  <channel>
    <title>8Bit Security</title>
    <link>https://8bitsecurity.com</link>
    <description>8Bit Security - Cybersecurity tips, insights, tools, and resources to protect your digital world.</description>
    <language>en-us</language>

    
    

    <lastBuildDate>
      
        15 Sep 2026
      
    </lastBuildDate>

    
      <item>
        <title>CVE-2026-53615: Integer Overflow in libblkid Exposes the MBR to the Partition Parser</title>
        <link>https://8bitsecurity.com/posts/cve-2026-53615-integer-overflow-in-libblkid-exposes-the-mbr-to-the-partition-parser/</link>
        <guid>https://8bitsecurity.com/posts/cve-2026-53615-integer-overflow-in-libblkid-exposes-the-mbr-to-the-partition-parser/</guid>
        <pubDate>15 Sep 2026</pubDate>
        <description><![CDATA[Disclosure for CVE-2026-53615. A uint32_t integer overflow in parse_dos_extended() — libblkid&#39;s EBR (Extended Boot Record) parser — lets a crafted disk image or USB stick trick the library into registering a partition at sector 0 (the MBR). Any tool that invokes libblkid on attacker-supplied media, including udisks2 running as root, will silently process the boot sector bytes as valid partition data. If mkfs is subsequently invoked, the MBR is destroyed.]]></description>
      </item>
    
      <item>
        <title>Notepad++: A Taint Analysis Journey to Three High-Severity Vulnerabilities</title>
        <link>https://8bitsecurity.com/posts/notepad-plus-plus-taint-analysis-three-high-severity-vulnerabilities/</link>
        <guid>https://8bitsecurity.com/posts/notepad-plus-plus-taint-analysis-three-high-severity-vulnerabilities/</guid>
        <pubDate>08 Sep 2026</pubDate>
        <description><![CDATA[This writeup documents the discovery of three Remote Code Execution vulnerabilities found through taint analysis of PowerEditor&#39;s source code (v8.9.5). All three share the same root cause — data read from XML configuration files flows directly into the Windows ShellExecute API with no validation, whitelisting, or integrity checks.]]></description>
      </item>
    
      <item>
        <title>Vulnerability Research: 7 Hardening Gaps Discovered in sudo&#39;s Environment Variable Handling (env.c)</title>
        <link>https://8bitsecurity.com/posts/vulnerability-research-7-hardening-gaps-in-sudo-env-c-environment-variables/</link>
        <guid>https://8bitsecurity.com/posts/vulnerability-research-7-hardening-gaps-in-sudo-env-c-environment-variables/</guid>
        <pubDate>01 Sep 2026</pubDate>
        <description><![CDATA[During an audit of sudo&#39;s env.c module (1.9.17p2 / 1.9.18rc1), seven environment variables were identified that can be passed through to privileged processes when env_reset is disabled. These variables represent a hardening gap, not a classic vulnerability — the maintainer has already shipped a fix.]]></description>
      </item>
    
      <item>
        <title>How to Execute a DNS Cache Poisoning Attack: Between Entropy and Post-Quantum</title>
        <link>https://8bitsecurity.com/posts/how-to-execute-a-dns-cache-poisoning-attack-between-entropy-and-post-quantum/</link>
        <guid>https://8bitsecurity.com/posts/how-to-execute-a-dns-cache-poisoning-attack-between-entropy-and-post-quantum/</guid>
        <pubDate>26 Mar 2026</pubDate>
        <description><![CDATA[In this article we bring the phenomenon of the DNS Poisoning Attack into the laboratory, controlling the variables, reducing entropy, analyzing the behavior of the resolver; all to understand quantitatively why the modern countermeasures of randomization, 0x20 encoding, DNSSEC have drastically raised the computational cost of the attack.]]></description>
      </item>
    
      <item>
        <title>How to attack Large Language Models using Poetry</title>
        <link>https://8bitsecurity.com/posts/how-to-attack-large-language-models-using-poetry/</link>
        <guid>https://8bitsecurity.com/posts/how-to-attack-large-language-models-using-poetry/</guid>
        <pubDate>05 Mar 2026</pubDate>
        <description><![CDATA[What is poetry to you? For many, it is a vehicle for emotion, imagination, and reflection. Yet poetry can also play an unexpected role in the context of Artificial Intelligence (AI). What if we told you that poetry can be used to attack Large Language Models (LLMs)? In this article, we examine the study on adversarial poetry, focusing on its underlying mechanism, its effectiveness, and the empirical results.]]></description>
      </item>
    
      <item>
        <title>Q-Day: Why Current Cryptography Is Not Ready for a Quantum Adversary</title>
        <link>https://8bitsecurity.com/posts/q-day-why-current-cryptography-is-not-ready-for-a-quantum-adversary/</link>
        <guid>https://8bitsecurity.com/posts/q-day-why-current-cryptography-is-not-ready-for-a-quantum-adversary/</guid>
        <pubDate>02 Feb 2026</pubDate>
        <description><![CDATA[The evolution of quantum computing poses a direct threat to the cryptographic algorithms most widely used today. Schemes such as RSA and Diffie-Hellman, which form the backbone of modern communications security, were not designed to withstand adversaries equipped with sufficiently advanced quantum capabilities. To address this scenario, two distinct approaches are emerging: Post-Quantum Cryptography and Quantum Key Distribution, that aim to ensure the confidentiality of communications in a post-quantum context.]]></description>
      </item>
    
      <item>
        <title>Chain-Of-Thoughts Hijacking against Reasoning Models</title>
        <link>https://8bitsecurity.com/posts/chain-of-thoughts-hijacking-against-reasoning-models/</link>
        <guid>https://8bitsecurity.com/posts/chain-of-thoughts-hijacking-against-reasoning-models/</guid>
        <pubDate>29 Jan 2026</pubDate>
        <description><![CDATA[Large Reasoning Models are a class of artificial intelligence systems designed to solve complex problems by combining natural language understanding with explicit logical reasoning. Rather than immediately generating a direct response to a user&#39;s input, LRMs are trained to first generate intermediate &quot;reasoning steps&quot; and only then arrive at a final answer.The new introduced attack is named Chain-of-Thought Hijacking, a simple jailbreak where harmless reasoning is prepended before a harmful instruction.]]></description>
      </item>
    
      <item>
        <title>Threat Hunting Cobalt Strike The Final Guide: From the Depths of Beaconing to C2 Infrastructure</title>
        <link>https://8bitsecurity.com/posts/threat-hunting-cobalt-strike-the-final-guide-from-the-depths-of-beaconing-to-c2-infrastructure/</link>
        <guid>https://8bitsecurity.com/posts/threat-hunting-cobalt-strike-the-final-guide-from-the-depths-of-beaconing-to-c2-infrastructure/</guid>
        <pubDate>21 Jan 2026</pubDate>
        <description><![CDATA[A tool that needs no introduction, widely favored by threat actors and extensively scrutinized by defenders. After years of observing and analyzing real-world compromises, the time has come to produce what we believe to be the most comprehensive threat hunting guide to Cobalt Strike ever published.]]></description>
      </item>
    
      <item>
        <title>Malware Analysis: Reverse Engineering of an ELF File (Linux)</title>
        <link>https://8bitsecurity.com/posts/malware-analysis-reverse-engineering-of-an-elf-file-linux/</link>
        <guid>https://8bitsecurity.com/posts/malware-analysis-reverse-engineering-of-an-elf-file-linux/</guid>
        <pubDate>14 Jan 2026</pubDate>
        <description><![CDATA[The analysis of ELF malware, typically targeting Linux systems, represents a complex challenge due to the sophisticated obfuscation and anti-analysis techniques employed by attackers.
This report focuses on the static analysis and deconstruction of a particularly insidious stager that leverages self-modifying code and a polymorphic XOR key to conceal its real payload.]]></description>
      </item>
    
      <item>
        <title>A New Phishing Kit based on AI and able to generate custom campaigns</title>
        <link>https://8bitsecurity.com/posts/a-new-phishing-kit-based-on-ai-and-able-to-generate-custom-campaigns/</link>
        <guid>https://8bitsecurity.com/posts/a-new-phishing-kit-based-on-ai-and-able-to-generate-custom-campaigns/</guid>
        <pubDate>12 Jan 2026</pubDate>
        <description><![CDATA[The phishing-related cybercrime landscape has undergone a significant transformation with the emergence of automated kits that integrate artificial intelligence components. Among these, InboxPrime AI stands out as a highly sophisticated tool that drastically lowers the technical barrier required to launch credible, large-scale phishing campaigns. Its evolution reflects a broader trend: the industrialization of social engineering and digital fraud techniques, where intelligent automation and advanced defense evasion play a central role.]]></description>
      </item>
    
      <item>
        <title>Malware Analysis: A Practical Guide to Dynamic Analysis of Linux ELF Malware</title>
        <link>https://8bitsecurity.com/posts/malware-analysis-a-practical-guide-to-dynamic-analysis-of-linux-elf-malware/</link>
        <guid>https://8bitsecurity.com/posts/malware-analysis-a-practical-guide-to-dynamic-analysis-of-linux-elf-malware/</guid>
        <pubDate>09 Jan 2026</pubDate>
        <description><![CDATA[Basic dynamic analysis of an ELF executable (Linux) consists of running the file in a controlled and secure environment (such as a sandbox or a virtual machine) in order to observe its actual behavior at runtime.
Unlike static analysis, which examines the code without executing it, dynamic analysis focuses on: interactions with the operating system, network activity, file system modifications, spawned processes, and resource consumption.]]></description>
      </item>
    
      <item>
        <title>How Call and SMS Spoofing Works - and Why It Is So Easy</title>
        <link>https://8bitsecurity.com/posts/how-call-and-sms-spoofing-works-and-why-it-is-so-easy/</link>
        <guid>https://8bitsecurity.com/posts/how-call-and-sms-spoofing-works-and-why-it-is-so-easy/</guid>
        <pubDate>05 Jan 2026</pubDate>
        <description><![CDATA[From fake bank messages urging you to &quot;verify a payment&quot; to calls that appear to originate from customer support, telephone spoofing exploits one of the oldest and least secure infrastructures in our communication ecosystem: the traditional telephone network and its legacy protocols.]]></description>
      </item>
    
      <item>
        <title>Securing Wi-Fi Cameras: Technical Guide and Best Practices</title>
        <link>https://8bitsecurity.com/posts/securing-wi-fi-cameras-technical-guide-and-operational-best-practices/</link>
        <guid>https://8bitsecurity.com/posts/securing-wi-fi-cameras-technical-guide-and-operational-best-practices/</guid>
        <pubDate>17 Dec 2025</pubDate>
        <description><![CDATA[Are you sure you&#39;ve secured your IoT devices properly, or will you be among the victims featured in the next sensational article written by someone who thinks they&#39;ve just discovered the existence of Shodan?
If you&#39;re not completely confident about the answer, it&#39;s worth reading the recommendations in this article for a safe coexistence with your IoT devices (especially cameras!).]]></description>
      </item>
    
      <item>
        <title>Why you should not use ChatGPT Atlas, the new OpenAI’s browser</title>
        <link>https://8bitsecurity.com/posts/why-you-should-not-use-chatgpt-atlas-the-new-openai’s-browser/</link>
        <guid>https://8bitsecurity.com/posts/why-you-should-not-use-chatgpt-atlas-the-new-openai’s-browser/</guid>
        <pubDate>13 Dec 2025</pubDate>
        <description><![CDATA[ChatGPT Atlas is OpenAI&#39;s newly released AI browser, which represent a new generation of web browsers powered by AI models that can understand intent, interpret context, and take action on behalf of the user. Unlike traditional browsers, which simply return a list of links in response to a query, AI browsers can summarize webpages, recommend related content, and use past interactions to refine future responses. Moreover, AI browsers can also actively interact with websites by performing actions such as opening pages and filling out form.]]></description>
      </item>
    
      <item>
        <title>Malware Analysis: A Practical Guide to Static Analysis of Linux ELF Malware</title>
        <link>https://8bitsecurity.com/posts/malware-analysis-a-practical-guide-to-static-analysis-of-linux-elf-malware/</link>
        <guid>https://8bitsecurity.com/posts/malware-analysis-a-practical-guide-to-static-analysis-of-linux-elf-malware/</guid>
        <pubDate>20 Nov 2025</pubDate>
        <description><![CDATA[This article is the first in a series dedicated to malware analysis, a focused path that will allow you to learn the basics of this discipline. In this first article, we concentrate on basic static analysis of a 64-bit ELF file. ELF (Executable and Linkable Format) is the standard format for executable programs on Linux, the equivalent of a .exe file on Windows. Basic static analysis consists of examining the executable file without directly viewing its instructions, to confirm whether a file is malicious and provide information about its functionalities.]]></description>
      </item>
    
      <item>
        <title>Why VPN Is Not The Ultimate Solution For Online Security</title>
        <link>https://8bitsecurity.com/posts/why-vpn-is-not-the-ultimate-solution-for-online-security/</link>
        <guid>https://8bitsecurity.com/posts/why-vpn-is-not-the-ultimate-solution-for-online-security/</guid>
        <pubDate>18 Nov 2025</pubDate>
        <description><![CDATA[VPNs (Virtual Private Networks) are often marketed as the ultimate solution for online privacy and security. However, this narrative is misleading: while VPNs can offer some advantages, they are far from a universal remedy-and in some cases, they may even introduce new security issues. So, if you thought you could now do anything under the cloak of invisibility provided by your shiny new two-year VPN subscription… well, it&#39;s not exactly like that. Let&#39;s see why.]]></description>
      </item>
    
      <item>
        <title>Top 5 Dark Web Search Engines in 2026</title>
        <link>https://8bitsecurity.com/posts/top-5-dark-web-search-engines/</link>
        <guid>https://8bitsecurity.com/posts/top-5-dark-web-search-engines/</guid>
        <pubDate>11 Nov 2025</pubDate>
        <description><![CDATA[The depths of the web, where anonymity reigns, often spark the curiosity of internet users. But beyond curiosity, there are solid reasons why one might need to navigate this world. This is especially true for cybersecurity professionals, particularly in threat intelligence, who monitor criminal group activity to gain a strategic advantage in preventing cyber threats. In this article, we&#39;ll explore the top search engines of the Dark Web-enigmatic tools that allow access to an alternative dimension of the Internet, where secrecy and privacy are paramount.]]></description>
      </item>
    
      <item>
        <title>Top 5 Credential Leak Channels on Telegram in 2026</title>
        <link>https://8bitsecurity.com/posts/top-5-credential-leak-channels-on-telegram/</link>
        <guid>https://8bitsecurity.com/posts/top-5-credential-leak-channels-on-telegram/</guid>
        <pubDate>30 Oct 2025</pubDate>
        <description><![CDATA[Telegram has become one of the main platforms used by cybercriminals for the distribution of stolen credentials. Monitoring these channels is essential for those working in cybersecurity and threat intelligence. The information shared can help companies and professionals identify exposed credentials, prevent targeted attacks, and strengthen their defense strategies. In this article, we highlight five Telegram channels that, in our view, every security analyst should keep an eye on to proactively detect any credential theft.]]></description>
      </item>
    
      <item>
        <title>Data Voids: How to Turn Microsoft CoPilot LLM in a Malware Spreading Vector</title>
        <link>https://8bitsecurity.com/posts/data-voids-how-to-turn-microsoft-copilot-llm-in-a-malware-spreading-vector/</link>
        <guid>https://8bitsecurity.com/posts/data-voids-how-to-turn-microsoft-copilot-llm-in-a-malware-spreading-vector/</guid>
        <pubDate>28 Oct 2025</pubDate>
        <description><![CDATA[What happens if an attacker manages to exploit the trust that a user (or a system) places in CoPilot to instruct a malicious behavior disguised as a legitimate function? This is precisely the goal of the research presented by Tobias Diehl at DEFCON 33. The PoC shows how an attacker can identify &quot;information voids&quot; (data voids) - topics that are rarely indexed or scarcely discussed - and insert malicious content that, thanks to Microsoft&#39;s perceived &quot;authority&quot; in contextual results, can be elevated to operational instructions by CoPilot.]]></description>
      </item>
    
      <item>
        <title>How To Find Out If Data From Your Organization Are In The Dark Web</title>
        <link>https://8bitsecurity.com/posts/how-to-find-out-if-a-dump-of-your-organization-is-in-the-dark-web/</link>
        <guid>https://8bitsecurity.com/posts/how-to-find-out-if-a-dump-of-your-organization-is-in-the-dark-web/</guid>
        <pubDate>23 Oct 2025</pubDate>
        <description><![CDATA[Is there anything more frightening than discovering your company&#39;s data has ended up on the Dark Web? Probably not, at least for those working in cybersecurity. Understanding the technical and behavioral indicators that suggest a data leak has been published or put up for sale is now a crucial skill for security teams.In this article, we analyze the five main warning signs, the technical mechanisms behind them, and how to verify them using threat intelligence and OSINT tools.]]></description>
      </item>
    
  </channel>
</rss>
