Matt Kelly @breakersall

Red Teamer; threat hunter, boilermakers sports fan. infosec.exchange/@breakersall Chicago Joined July 2011

Tweets

4K
Followers

2K
Following

1K
Likes

5K

60 Minutes @60Minutes

a year ago

“The level of cybercrime has risen to the point where it feels overwhelming. And every year it gets worse. And it feels like as defenders, it's almost like we're winning every battle and losing the war,” says Allison Nixon, a cybersecurity researcher. cbsn.ws/3Jh3nyL

52 146 421 234K 108

Download Video

Matt Kelly @breakersall

2 years ago

What are five topics you can talk about for 30 minutes with zero prep? Mine are: 1. Why Armageddon, the movie, is a masterpiece in private/public partnership (oil drillers/NASA Astronauts), and how that is a blue print for Cyber Threat Intel Sharing. 2-5. Related to above.

Justin Elze @HackingLZ

2 years ago

15 4 66 58K 9

1 0 3 453 1

lcamtuf @lcamtuf

2 years ago

As foretold - LLMs are revolutionizing security research: hackerone.com/reports/2298307

49 242 1K 299K 352

Accidental CISO @AccidentalCISO

2 years ago

The attackers were very sophisticated. They were drinking expensive wine and listening to classical music while they exfiltrated the data.

21 155 919 84K 41

Matt Kelly @breakersall

2 years ago

1 0 6 549 0

Download Image

Microsoft Threat Intelligence @MsftSecIntel

2 years ago

Microsoft has identified new Qakbot phishing campaigns following the August 2023 law enforcement disruption operation. The campaign began on December 11, was low in volume, and targeted the hospitality industry. Targets received a PDF from a user masquerading as an IRS employee.

6 236 571 204K 94

Download Image

Marc Rogers @marcwrogers

2 years ago

Hey @elonmusk yesterday I asked if you could amplify the other side - you know free and balanced speech and all? Remember when we hacked your Model S in 2013 & 2015? Remember how you asked us not to share until patches ready & you could share your side? cti-league.com/statement-by-m…

Elon Musk @elonmusk

2 years ago

13K 41K 145K 29.6M 6K

9 59 186 71K 8

Allison Nixon @nixonnixoff

2 years ago

The Mirai kids finally have chosen to tell their story, and I'm proud of them beyond measure. I'm also grateful to them for the work they've done in the years since. Their futures are bright. wired.com/story/mirai-un…

3 25 88 20K 15

Matt Kelly @breakersall

2 years ago

Remember when breach reports consisted of technical analysis of the intrusion and not just thinly veiled marketing attempts shilling their security products?

1 0 3 208 0

Matt Kelly @breakersall

2 years ago

👀 comm groups like scattered spider/unc3944...

Justin Elze @HackingLZ

2 years ago

👀 comm groups like scattered spider/unc3944... https://t.co/1yldWjfW1z

18 5 41 14K 0

0 0 0 438 0

Download Image

Matt Kelly @breakersall

2 years ago

Didn't expect to lookout the window today and see someone free climbing the Accenture Tower building (Olgivie) today (with a drone following him)...

0 1 2 2K 0

Download Image

Matt Kelly @breakersall

2 years ago

Smelling smokey in Chicago today.

1 0 1 247 0

Download Image

Matt Kelly @breakersall

2 years ago

Tired of not being able to click Defanged URLs? Same. Created a CyberChef recipe to 'Refang' URLs making them clickable once again. This may be irresponsible. github.com/breakersall/Cy… Pull request pending.

1 13 59 9K 14

Download Image

Matt Kelly @breakersall

2 years ago

Fortinet SSL VPN embargoed vulnerability (but early patch Jun 8th) details dropped:

Lexfo @LexfoSecurite

2 years ago

Fortinet SSL VPN embargoed vulnerability (but early patch Jun 8th) details dropped:

2 104 182 62K 21

0 0 0 237 0

Matt Kelly @breakersall

2 years ago

VMWare zero-days are way more fun when they are introduced with DMX style format. Anyway, great blog from Mandiant 🎆, read this. mandiant.com/resources/blog… The 0-day allows host2guest OS cmd exec, and is a very late kill-chain (after significant priv esc) post-exploitation tactic.