TGViewer
Channel Public Channel
Security Harvester

Security Harvester

@secharvester

On X too! X.com/secharvesterx

Harvesting news about cyber security
Open in Telegram
Subscribers
9.94K
Photos
23K
Videos
0
Links
15.7K
Recent Posts 20 shown
Post #23375 39
Breaking the Superuser Guardrails of managed-PostgreSQL Providers
https://mehmetince.net/part-2-6-breaking-the-superuser-guardrails-attacking-security-hardening-extensions-systemic-risks-in-the-managed-postgresql-industry/

@secharvester
Mehmet Ince @mdisec - Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter Part 2/6 | Breaking the Postgres Superuser Guardrails: Attacking Security-Hardening Extensions |Systemic Risks in the Managed PostgreSQL… It’s been a month since I published the first part of this research, and interest from the Postgres community has been higher than I expected. Most vendors I contacted were shy to respond, so the Databricks team’s blog post Collaboration makes us all stronger…
Post #23374 32
Breaking the Superuser Guardrails of managed-PostgreSQL Providers
https://mehmetince.net/part-2-6-breaking-the-superuser-guardrails-attacking-security-hardening-extensions-systemic-risks-in-the-managed-postgresql-industry/

@secharvester
Mehmet Ince @mdisec - Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter Part 2/6 | Breaking the Postgres Superuser Guardrails: Attacking Security-Hardening Extensions |Systemic Risks in the Managed PostgreSQL… It’s been a month since I published the first part of this research, and interest from the Postgres community has been higher than I expected. Most vendors I contacted were shy to respond, so the Databricks team’s blog post Collaboration makes us all stronger…
Post #23373 25
I asked my AI agent to inspect a website. The website took over my machine (34-run measurement across 5 agent harnesses)
https://efecakici.com.tr/blog/agent-lab-three-paths/

@secharvester
Efe Çakıcı I asked my AI agent to inspect a website. The website took over my machine. A local lab, 34 recorded runs, and 6 stolen credential files. You tell an agent to check a library's docs; the website steals your session and executes commands before the model speaks.
Post #23366 95
Inside Corp MDM, the Android spyware targeting logistics companies
https://haveibeensquatted.com/blog/inside-corp-mdm-android-spyware-targeting-logisitics

@secharvester
Have I Been Squatted Inside Corp MDM, the Android spyware targeting logistics companies - Have I Been Squatted Source-code analysis of the Corp MDM Android spyware campaign targeting logistics companies through fake Google Play pages, with SMS theft, call forwarding, persistence, C2, and detection details.
Post #23365 94
Covert Air-Gap Exfiltration via Smartphone Class-D Audio Amplifiers (Zero Permissions Required) - TEMPEST PoC
https://github.com/TA1EEI/ClassD-VHF-Transmitter

@secharvester
GitHub GitHub - TA1EEI/ClassD-VHF-Transmitter: Experimental Android app transmitting VHF OOK/Morse signals via smartphone Class-D audio… Experimental Android app transmitting VHF OOK/Morse signals via smartphone Class-D audio amplifier PWM harmonics (TEMPEST PoC). - TA1EEI/ClassD-VHF-Transmitter
Post #23361 116
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
https://www.bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/

@secharvester
BleepingComputer ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive data on employees and job applicants.
Post #23360 157
LocalStranger is a PoC for vulnerable "Microsoft Windows Hardware Compatibility Publisher" signed driver, including a basic unsigned driver kd mapper and NT-AUTHORITY escalation.
https://github.com/nbs32k/LocalStranger

@secharvester
GitHub GitHub - nbs32k/LocalStranger: PoC demonstrating km arbitrary primitives through a custom driver mapper, and local privilege escalation. PoC demonstrating km arbitrary primitives through a custom driver mapper, and local privilege escalation. - nbs32k/LocalStranger
Older posts →

About this channel

How can I read @secharvester without a Telegram account?
TGViewer shows the public web preview Telegram publishes for Security Harvester: recent posts, photos, videos and the subscriber count, with no app, login or account.
How many subscribers does Security Harvester have?
Security Harvester (@secharvester) has 9.94K subscribers on Telegram, refreshed roughly every 30 minutes.
Does Security Harvester know I viewed it here?
No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →