George Hughey @ecthr0s

MSRC Engineering - previously CS @ University of Maryland working on Geneva (https://t.co/dMYqBnn2oA) github.com/ecthros Seattle, WA Joined June 2018

Tweets

66
Followers

579
Following

195
Likes

154

CyberPatriot @CyberPatriot

2 years ago

Congratulations to George Hughey, the CyberPatriot XV Mentor of the Year!

0 3 9 682 0

Download Image

Microsoft Security Response Center @msftsecresponse

4 weeks ago

At @defcon 33, George Hughey (@ecthr0s) and Rohit Mothe (@rohitwas), Senior Security Research Managers at MSRC, took us back to the 90s with their talk on the ghost of Internet Explorer in Windows: MapUrlToZone. They uncovered how this legacy API, used by Outlook, Office,…

1 6 40 6K 4

Download Image

Microsoft Security Response Center @msftsecresponse

3 weeks ago

At @defcon, the MSRC team had a great time connecting with the security community and cheering on Microsoft employees, MVRs, and other Microsoft security researchers as they shared their expertise through presentations and hands-on collaboration. #DEFCON #DEFCON33

2 4 24 5K 1

Download Video

George Hughey @ecthr0s

4 weeks ago

Super excited @rohitwas and I will be speaking tomorrow about some of the bugs we found in MapUrlToZone @defcon!

0 2 11 464 0

Download Image

Microsoft Security Response Center @msftsecresponse

9 months ago

To help protect against NTLM relay attacks, we’ve enabled Extended Protection for Authentication (EPA) by default in Windows Server 2025. This update strengthens key services like Exchange Server, Active Directory Certificate Services (AD CS), and LDAP, making identity compromise…

5 44 127 19K 44

dragosr @dragosr

2 years ago

CanSecWest Presentation: Rolling in the Dough: How Microsoft Identified and Remediated a Baker’s Dozen of Security Threats in the Windows DNS Server George Hughey, Microsoft secwest.net

0 1 9 3K 1

Download Image

George Hughey @ecthr0s

3 years ago

Forget buffaloes, the longest grammatically correct sentence using one repeating word is "sudo sudo sudo sudo sudo sudo sudo sudo sudo"

1 0 5 1K 0

George Hughey @ecthr0s

3 years ago

Yesterday, a vulnerability in DNS I found was patched: msrc.microsoft.com/update-guide/e…. Thanks to the DNS team for working through this one!

2 6 34 0 3

George Hughey @ecthr0s

3 years ago

Tuesday saw the release of fixes for four vulnerabilities I discovered (CVE-2022-26801, CVE-2022-26802, CVE-2022-26803, CVE-2022-24536). Go check them out! msrc.microsoft.com/update-guide/r…

2 7 18 0 1

Dave Levin @DistributedDave

5 years ago

It's long been assumed that there are no nontrivial reflected amplification attacks using TCP—prior attacks are UDP or simply TCP SYNs. In our just-now-accepted @USENIXSecurity 2021 paper, we apply a genetic algorithm to discover 5 reflected TCP amplification attacks + variants.

3 61 206 0 22

George Hughey @ecthr0s

6 years ago

Talk from #BlueHatIL is live! Had such an awesome experience youtu.be/R9TWLO5N7mc

0 2 7 0 0

🇺🇦 Nate Warfield | n0x08.bsky.social🌻 @n0x08

6 years ago

bluehatil.com/abstracts - I should point out that many of the #BlueHatIL talks are up online here including my personal favorite with @ecthr0s 👍

1 2 7 0 1

George Hughey @ecthr0s

6 years ago

Just posted our slides from BlueHat IL 2020 at github.com/Kkevsterrr/con…! Huge thank you to @tom41sh and the rest of the BlueHat team, we were really honored to be there :)