[FD] Research: When Trusted Tools Become Attack Primitives

[Nir Yehoshua <nir@xxxxxxxxxxxxxxxxxxxxxx>]

Hi Full Disclosure list,

I published a technical research article titled:

When Trusted Tools Become Attack Primitives

The article examines how trusted local utilities can become
security-relevant primitives when used inside automated processing
pipelines.

It covers two case studies:

   1. macOS textutil resolving remote resources during HTML-to-text
   conversion.
   2. KeePassXC KDBX-controlled KDF parameters creating significant
   resource-consumption differences.

Article:

https://ciphersecuritylabs.com/research/articles/when-trusted-tools-become-attack-primitives


Author:
Nir Yehoshua
Cipher Security Labs



Regards,

-- 
Nir Yehoshua | Co-Founder
+972 50 687 7216
Nir@xxxxxxxxxxxxxxxxxxxxxx
https://ciphersecuritylabs.com/
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/