msandbu.org

A critical zero-day vulnerability, identified as CVE-2023-20198, has been discovered in Cisco IOS XE devices, and widespread exploitation of this flaw is already underway. This security lapse is alarmingly severe, as it allows attackers unauthenticated remote access with full administrative privileges on the compromised devices. The Vulnerability This security flaw resides in the Web UI …

Critical zero-day vulnerability CVE-2023-20198 in Cisco devices where thousands of devices have already been compromised Read More »

A couple of weeks ago, I had a conference talk about how large language models can help people working with IT security. While we are still in the early phases of LLMs they can be quite helpful within multiple areas, which I want to highlight in this blogpost. First of with all new threats emerging …

How can LLMs help with Operational IT-Security? Read More »

Have you ever used Curl? It’s likely you have! Curl is installed on countless machines and devices, with Libcurl being the standout component. Libcurl is a versatile client-side URL transfer library that supports a wide range of protocols and features, including cookies, DICT, FTP, FTPS, Gopher, HTTP/1 (with HTTP/2 and HTTP/3 support), HTTP POST, HTTP …

cURL vulnerability CVE-2023-38545 and information Read More »

During this weekend I started working on a simple PoC, can we use ChatGPT with some speech recognition software to work as a virtual assistant similar to Alexa or Siri? First of we need to have the ability for some code to trigger based upon certain keywords or patterns. This is where OpenAI functions comes …

Creating a voice based GPT assistant using ChatGPT, Elevenlabs and Azure Speech Recognition Read More »