Terry Bradley @cadetx

Getting paid to hack stuff since 1998 Colorado Joined February 2008

Tweets

2K
Followers

159
Following

602
Likes

262

Paul Asadoorian @[email protected] @securityweekly

2 years ago

Learning Linux with pictures. I think we need an entire series of these for folks just starting with Linux

3 18 80 5K 2

Download Image

vx-underground @vxunderground

2 years ago

We would like to express our condolences to Blue Teamers. Microsoft has announced Microsoft Excel will now support Python. More information: techcommunity.microsoft.com/t5/microsoft-3…

68 676 2K 262K 233

DCG 201 ~In Person Meets Soon! @dcg201.bsky.social @defcon201nj

2 years ago

Getting food in #LasVegas during @defcon be like: #defcon31 #vegas

79 20 280 87K 12

Download Image

Greg Linares (Laughing Mantis) @Laughing_Mantis

3 years ago

DO. NOT. PUT. YOUR. DOMAIN. ADMIN. PASSWORDS. IN. AN. EXCEL. SHEET.

71 267 1K 0 57

Matt Hand @matterpreter

4 years ago

We have to challenge the status quo of phishing. Phishing was still the initial access vector for 23% of breaches (M-Trends, 2021) and what we've always done might not be what we need today. 1/2

SpecterOps @SpecterOps

4 years ago

We have to challenge the status quo of phishing. Phishing was still the initial access vector for 23% of breaches (M-Trends, 2021) and what we've always done might not be what we need today. 1/2

5 98 200 0 45

1 9 32 0 6

briankrebs @briankrebs

4 years ago

Justice Dept. seizes a record $3.6 billion in bitcoin tied to Bitfinex hack, charges married couple in NYC with laundering the stolen funds. justice.gov/opa/pr/two-arr…

7 49 120 0 5

Heads up users of Cisco's Small Business RV Series routers/VPNs: Cisco has released updates that fix a slew of security issues, including several that have the maximum CVSSv3 score of 10.0. Proof of concept exploit code already available for some of them. tools.cisco.com/security/cente…

3 52 73 0 1

Download Image

Alex Ionescu @aionescu

4 years ago

I had the great pleasure of driving this super complex feature at my old job and I’m stoked to see it released: crowdstrike.com/blog/introduci… There’s been a few limited PoCs out there but thanks to help from @intel and amazing work from @standa_t and @TimoKreuzer this is in production.

3 80 277 0 46

Katie Nickels @likethecoins

4 years ago

Important: the second vuln, CVE-2021-45046, is now CRITICAL because remote code execution is possible in #Log4j version 2.15. This matters because initially it wasn't critical. Now it's more important to upgrade to 2.16.0. logging.apache.org/log4j/2.x/secu…

Katie Nickels @likethecoins

4 years ago

2 6 23 0 1

4 76 163 0 15

Matt Hand @matterpreter

4 years ago

Been spending a lot of time hunting down event sources lately to make better sense of some detections we've run into on operations. I wrote a little tool to help find event providers by recursively parsing directories/files for the specified GUID. github.com/matterpreter/F…

4 77 183 0 32

briankrebs @briankrebs

4 years ago

The Zelle fraud scam is rampant. You get an SMS about a suspicious Zelle transfer from "your bank." If you respond you get callerID spoofed scam call. To "verify your ID" they ask for your username. Then they password reset & ask you to read back the code krebsonsecurity.com/2021/11/the-ze…

22 480 531 0 56

Michael Barclay @michaelbarclay_

4 years ago

I dove into Boot Configuration Data and why RaaS actors might want to modify those settings before they deploy ransomware, complete with some detection guidance. A not so new technique, but a good chance to talk about capability abstraction! posts.specterops.io/capability-abs…