Conan @ComputerDoWhat

https://t.co/QkkvtBkQkn Australia Joined March 2009

Tweets

3K
Followers

153
Following

1K
Likes

26K

JPCERT/CC @jpcert_en

2 years ago

New Blog Post: MalDoc in PDF - Detection bypass by embedding a malicious Word file into a PDF file - ^TN blogs.jpcert.or.jp/en/2023/08/mal…

2 107 252 114K 76

SwiftOnSecurity @SwiftOnSecurity

2 years ago

Do not mistake the serenity of a professional for peace.

4 21 172 14K 5

David Cottingham @c0tts

2 years ago

Blog writeup of what we know airlockdigital.com/microsofts-rev…

2 10 22 7K 5

Something is happening at Digicert. It looks like on many Windows systems the VeriSign Class 3 Public Primary Certification Authority - G5 root certificate (serial: 18dad19e267de8bb4a2158cdcc6b3b4a) has been revoked as of around 9 hours ago.

2 21 29 6K 4

Dr. Nestori Syynimaa @DrAzureAD

2 years ago

Had some fun last weekend with dumping NTHashes from #AzureAD / #EntraID ◾ I can now force AADConnect to use my certificate to encrypt Windows legacy credentials 😈 ◾ Forcing full password hash sync on AzureAD Connect syncs all NTHashes encrypted with my certificate 😱 Not a…

4 66 237 39K 75

Download Gif

Kuba Gretzky @mrgretzky

2 years ago

Finally my talk from @x33fcon is online! 🔥 I try my best to explain what websites could do to protect the users against reverse proxy phishing attacks like Evilginx.🪝🐟 There is also a bonus live demo at the end with some Evilginx Pro secret sauce! 💡 youtube.com/watch?v=C-Fh4s…

4 80 222 23K 62

Matt Zorich @reprise_99

2 years ago

Handy little tool you may not be aware of; IdFix, if you are having issues with certain objects not syncing up to Microsoft Entra ID from on-premises Active Directory, this can help you find and fix the problems - microsoft.github.io/idfix/

5 17 70 11K 18

Mark @maetl

2 years ago

Agencies are throwing it all into the cloud at the behest of a certain cohort of software engineers/manager types with acronyms and credential letters splattered all over their LinkedIn—with zero analysis of workload variability, deployment frequency and software leverage points.

0 1 2 157 0

Mark Humphries @markhumphries

2 years ago

Reassuring message for Commonwealth Bank customers after $10 billion profit announcement.

52 556 2K 172K 60

Download Video

Ubiquiti Inc @Ubiquiti

2 years ago

Break free of hardware licensing sales models with #UniFi. Learn more at ui.com

32 26 254 2.6M 21

Download Video

Daniel Moghimi @flowyroll

2 years ago

Dropping #Downfall, exploiting speculative forwarding of 'Gather' instruction to steal data from hardware registers. #MeltdownSequel - Practical to exploit (POC/Demo) - Defeat all isolation boundaries (OS, VM, SGX) - Bypass all Meltdown/MDS mitigations. downfall.page

16 377 965 227K 183

Download Gif

Vincent Le Toux (Paris, France) @mysmartlogon

2 years ago

#PingCastle 3.1 released !!! pingcastle.com/download/ Active Directory & AzureAD security health check in seconds >200k AD audited, management readable, no install, no admin, no data sent "to a cloud" Example of report: pingcastle.com/PingCastleFile… github: github.com/vletoux/pingca…

8 189 650 92K 239

Download Gif

Tavis Ormandy @taviso

2 years ago

First big result from our new CPU research project, a use-after-free in AMD Zen2 processors! 🔥 AMD have just released updated microcode for affected systems, please update! lock.cmpxchg8b.com/zenbleed.html

35 663 2K 335K 177

Download Gif

Wiz @wiz_io

2 years ago

⚡️💻 BREAKING: Wiz Research reveals surprising elements of the recent Microsoft Storm-0558 incident — it's much bigger than you thought! Here's what you need to know:

6 193 399 87K 129

Download Image

Shøta Shinogۜi🔑 @Sh1n0g1

2 years ago

Done my talk in #bsidesbrisbane . Great vibes. Thank you everyone who listened to my talk. If someone happen to have a picture of me presenting, I appreciate if you can share that photo.

4 4 16 2K 0

Download Image

Meredith Whittaker @mer__edith

2 years ago

Meta turned over their DMs, used as evidence to convict them on felony charges for accessing criminalized healthcare. Meta had no choice -- they had the data so had to hand it over. End-to-end encryption keeps people safe. jezebel.com/nebraska-mom-p…

58 1K 3K 493K 235

SwiftOnSecurity @SwiftOnSecurity

2 years ago

Nobody knows what the hell a DBA does but trust me you do not want to be doing it.

19 33 216 27K 3

SwiftOnSecurity @SwiftOnSecurity

2 years ago

A security director that hired me on but I no longer report to told me one of the greatest wisdom shots I've ever heard: Every network they've ever defended is a mix of accidentally great security decisions baked-in & thus accepted as trivial — and profoundly innovative failure.

1 31 214 55K 23

Paul Moore - Security Consultant  @Paul_Reviews

2 years ago

Not even #tradingStandards know what to do. No Directors but still trading... and leaking everyone's #PII and #paymentData

Paul Moore - Security Consultant  @Paul_Reviews

2 years ago

Not even #tradingStandards know what to do. No Directors but still trading... and leaking everyone's #PII and #paymentData

1 0 10 4K 2

Download Gif

2 1 6 2K 1

BSides Brisbane @Bsides_BNE

2 years ago

📅 The schedule for #BSidesBrisbane is here! It's packed with thrilling talks and amazing networking opportunities. 🎉 Join us on 15 July 2023 for a day of cyber security knowledge sharing and collaboration. Check out the full schedule at bsidesbrisbane.com/schedule/