{"uuid": "48356edc-48f0-4144-bdd9-d1de3e67bbb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33564", "type": "seen", "source": "https://t.me/cissp/3283", "content": "Threat Research\nDeep dive into Visual Studio Code extension security vulnerabilities\nhttps://snyk.io/blog/visual-studio-code-extension-security-vulnerabilities-deep-dive\n// a new vector for supply chain attacks: IDE plugins\n\nexploit\nCVE-2021-33564:\nArgument Injection in Dragonfly Ruby Gem\nhttps://zxsecurity.co.nz/research/argunment-injection-ruby-dragonfly\n]-> PoC:\nhttps://github.com/mlr0p/CVE-2021-33564\n\nTeamViewer Local Privilege Escalation Vulnerability (PoC)\nhttps://theevilbit.github.io/posts/teamviewer_lpe\n\nCloud Security\nRevealing the secrets of Kubernetes secrets\nhttps://www.cncf.io/blog/2021/04/22/revealing-the-secrets-of-kubernetes-secrets\n\nOffensive security\n1. SMAP bypass in FreeBSD 12\nhttps://hackerone.com/reports/1048322\n2. Unhooking NTDLL to bypass Frida\u2019s hook\nhttps://passthehashbrowns.github.io/hook-integrity-checks\n\nBlue Team Techniques\nEnterprise Scale Threat Hunting:\nC2 Beacon Detection with Unsupervised ML and KQL\nPart 1:\ud83d\udc4d\ud83c\udffd\nhttps://mergene.medium.com/enterprise-scale-threat-hunting-network-beacon-detection-with-unsupervised-machine-learning-and-277c4c30304f\nPart 2:\nhttps://mergene.medium.com/enterprise-scale-threat-hunting-network-beacon-detection-with-unsupervised-ml-and-kql-part-2-bff46cfc1e7e", "creation_timestamp": "2026-09-01T17:00:49.652357Z"}