Picture

SEC Consult @sec_consult

YOUR GLOBAL PARTNER FOR CYBERSECURITY. SEC Consult is part of Eviden. @Evidenlive sec-consult.com Europe | Asia Joined October 2012
  • Tweets
    1K
  • Followers
    2K
  • Following
    325
  • Likes
    590
sec_consult Profile Picture

SEC Consult @sec_consult

2 weeks ago

Marketing can work magic. But they can not fix a broken authorization in your app... r.sec-consult.com/dreame 👈#fail #infosec @DreameGlobal

sec_consult Profile Picture

SEC Consult @sec_consult

2 weeks ago

In the intricate world of #cybersecurity, staying ahead is paramount 🌐 Annually, the SEC Consult Vulnerability Lab commits to fortifying digital landscapes and unveiling hidden threats💻 🔎 Dive into the depths of our discoveries and stay informed 👉 r.sec-consult.com/top10-lab-23

sec_consult Profile Picture

SEC Consult @sec_consult

3 weeks ago

🚨 #Amazon AWS Glue exposing DB passwords in plain text r.sec-consult.com/glue Potential attack vectors like broken access control, #XSS and weak session handling did enable attackers to leverage this issue #AWSGlue #infosec #cloud @awscloud

sec_consult Profile Picture

SEC Consult @sec_consult

2 months ago

The @checkmk agent (a monitoring platform for cloud and hybrid IT) allows local privilege escalation on a #Windows system r.sec-consult.com/checkmk The agent creates and executes temporary files that can be manipulated by an attacker. Update asap! #infosec

sec_consult Profile Picture

SEC Consult @sec_consult

2 months ago

The @Qognify VMS Client/Viewer application (VMS_Client.exe) is vulnerable to DLL Hijacking r.sec-consult.com/qognify Please follow the vendor's updated hardening guide #infosec

sec_consult Profile Picture

SEC Consult @sec_consult

2 months ago

🌐 Explore the vital need outlined by #DORA to integrate a digital operational resilience testing program into your ICT risk management framework and strategy 👉 r.sec-consult.com/dora-testing #DigitalResilience #ICTSecurity #DORACompliance

sec_consult Profile Picture

SEC Consult @sec_consult

2 months ago

Revisiting @timolongin's #SMTP research, which just clinched the 3rd spot in @PortSwiggerRes' "Top 10 Web Hacking Techniques of 2023"! 🥉📷 If you're into fascinating reads, this is a must-check! #WebHacking #PortSwigger #ThirdPlace #ResearchHighlight

sec_consult Profile Picture

SEC Consult @sec_consult

5 months ago

Revisiting @timolongin's #SMTP research, which just clinched the 3rd spot in @PortSwiggerRes' "Top 10 Web Hacking Techniques of 2023"! 🥉📷 If you're into fascinating reads, this is a must-check! #WebHacking #PortSwigger #ThirdPlace #ResearchHighlight

sec_consult Profile Picture

SEC Consult @sec_consult

2 months ago

🏆 Exciting News! 🏆 Thrilled to announce that @timolongin snagged 3rd place in the @PortSwigger Contest with his #SMTP Smuggling research! 🥉💻 Big love to all the fellow hackers 🚀🔐 #PortSwiggerContest #CyberSecurity #HackThePlanet

PortSwiggerRes Profile Picture

PortSwigger Research @PortSwiggerRes

2 months ago

🏆 Exciting News! 🏆 Thrilled to announce that @timolongin snagged 3rd place in the @PortSwigger Contest with his #SMTP Smuggling research! 🥉💻 Big love to all the fellow hackers 🚀🔐 #PortSwiggerContest #CyberSecurity #HackThePlanet

sec_consult Profile Picture

SEC Consult @sec_consult

2 months ago

Several stored XSS vulnerabilities and missing security measures in the standard configurations regarding content security policy (CSP) in @openolat e-learning application r.sec-consult.com/openolat Patch already available! #opensource #infosec

sec_consult Profile Picture

SEC Consult @sec_consult

3 months ago

🌟 Happy #ValentinesDay💖Grateful for the #TeamSpirit and positive vibes that make our workplace a #GreatPlaceToWork🥰✨ Shoutout to the incredible team, supportive leaders, and a culture that feels like home 💼🚀👫r.sec-consult.com/gptw24

sec_consult Profile Picture

SEC Consult @sec_consult

3 months ago

How to take over a CMS in 3 steps: create HTML file with Stored #XSS, make it look like a JPG, upload it e.g. to gain access to user accounts r.sec-consult.com/statamic Thx @statamic for fixing this promptly. Patch now!

sec_consult Profile Picture

SEC Consult @sec_consult

3 months ago

Our colleagues Steffen Robertz and Gerhard Hechenberger will be doing a session at @hackcon on Friday 9, 2024, 10:00 CET. Their talk gives insights into the analysis and shows the aftermath. More details: r.sec-consult.com/hackcon2024 #HackCon #infosec #Cybersecurity

sec_consult Profile Picture

SEC Consult @sec_consult

4 months ago

🤔❔ How to make voltage glitching more accessible and usable during security assessments? 👉 r.sec-consult.com/secglitcher We used the STM32 microcontroller series and build the SECGlitcher script on top of the #ChipWhisperer tool #infosec #IoTsecurity

sec_consult Profile Picture

SEC Consult @sec_consult

4 months ago

Take a deep dive into Voltage Glitching 👉 r.sec-consult.com/secglitcher By using the STM32 microcontroller series and building the SECGlitcher script on top of the #ChipWhisperer tool we speed up the development of glitching attacks #infosec #IoTsecurity @newaetech

sec_consult Profile Picture

SEC Consult @sec_consult

4 months ago

🎄🌟 #teamsecconsult is wishing you all Merry Christmas & happy holidays! A few last minute #cybersecurity tips to keep in mind: 👉 During holidays be especially aware of #phishing attacks  👉 Update & patch #software 👉 Check your #passwords #itsecurity #happyholidays

sec_consult Profile Picture

SEC Consult @sec_consult

5 months ago

By exploiting interpretation differences of the #SMTP protocol, it’s possible to smuggle/send spoofed e-mails while still passing SPF alignment checks 👉 r.sec-consult.com/smtp @timolongin #infosec

sec_consult Profile Picture

SEC Consult @sec_consult

5 months ago

Novel attacks in SMTP? @timolongin discovered a novel exploitation technique where threat actors could abuse vulnerable SMTP servers worldwide to send malicious e-mails allowing targeted phishing attacks 👉 r.sec-consult.com/smtp #infosec #SMPT #phishing

sec_consult Profile Picture

SEC Consult @sec_consult

5 months ago

If you've installed @PDF24 Creator on your computer using the MSI installer, there's a chance that someone with access to your computer could gain higher privileges than intended... r.sec-consult.com/pdf24 Patch asap! #infosec #microsoft

sec_consult Profile Picture

SEC Consult @sec_consult

5 months ago

If you are using an enterprise password manager, chances are, you are inviting hackers to your network r.sec-consult.com/oneidentity @OneIdentity @Quest #infosec #windows #pentesting

sec_consult Profile Picture

SEC Consult @sec_consult

5 months ago

Thank you for picking up our blogpost @ThinkstCanary 🐟👨‍💻Reverse-Proxy phishing frameworks have been on the rise. How to escape the phishermen nets? 👇👇👇 #teamsecconsult #phishing @ksei__

ThinkstCanary Profile Picture

Thinkst Canary @ThinkstCanary

6 months ago

Thank you for picking up our blogpost @ThinkstCanary 🐟👨‍💻Reverse-Proxy phishing frameworks have been on the rise. How to escape the phishermen nets? 👇👇👇 #teamsecconsult #phishing @ksei__

Trends for United States

$BAZ
2.075 posts
Houser
1.446 posts
Rodon
1.493 posts
McKenna
3.865 posts
McKenna
3.865 posts
Boeing
120 B posts
$BASED
2.841 posts
#NationalDayOfPrayer
6.763 posts
#TourToSaveDemocracy
7.764 posts
Al Sharpton
5.950 posts
Bradish
1.313 posts
Daily Wire
8.072 posts
Cujo
2.331 posts
#SRHvsRR
30,5 B posts
Nick Fuentes
7.930 posts
Phonte
Ben Brown
#thursdayvibes
15,7 B posts
#DHDallas
Gooch
1.846 posts

You might like

Consultancy and Training from a trusted supplier of offensive security. Red Team and Adversary Simulation by ActiveBreach team | https://t.co/fqpbJ9WDXD | https://t.co/UvOhGA4Zou
MDSec
@MDSecLabs
14K Followers
OffensiveCon is a highly technical international security conference focused on offensive security only. Organized by @bluefrostsec @offensivecon.bsky.social
offensivecon
@offensive_con
21K Followers
We are TROOPERS - IT-Security Conference & Trainings https://t.co/gO1lSzFuns Also at the infosec exchange @WEareTROOPERS
TROOPERS Conference
@WEareTROOPERS
9K Followers
Research at https://t.co/tjfTOllCEu
Adam Chester 🏴‍�..
@_xpn_
32K Followers
And there is fire where we walk. they/them
Cure53
@cure53berlin
10K Followers
I don't know how to search on Google so I do research on my own and tweet about it. Hacking as a life style
Mr.Un1k0d3r
@MrUn1k0d3r
12K Followers
CISO and Chief Hacking Officer at HackerOne. Past: Founded {vsftpd, Chrome security, Google Project Zero}; Tesla; Dropbox. Hacker / Researcher. beebjit.
Chris Evans
@scarybeasts
26K Followers
Offensive Security fanatic, Offsec Team lead... pom-pom girl? Who fuckin' cares ??
kmkz
@kmkz_security
18K Followers
Industry leading provider of exclusive zero-day vulnerability intelligence, exploits, defensive guidance, and vulnerability research trends.
Exodus Intelligence
@XI_Research
12K Followers
https://t.co/qZeUor2FwZ (and CTI summit) is the 17th edition of the infosec conference in Luxembourg. 16th-19th October 2023 in Luxembourg. @hack_lu@infosec.exchange
hack_lu
@hack_lu
9K Followers
Doyensec works at the intersection of software development and offensive engineering. We discover vulnerabilities others cannot, and help mitigate the risk.
Doyensec
@Doyensec
3K Followers
CyberSecurity researcher, developer of MacroPack Pro and BallisKit offers. I have a passion for all infosec subjects especially redteam. My tweets are my own.
Emeric Nasi
@EmericNasi
5K Followers
Interested in reversing, browser exploitation, red & blue teaming, web vulns, ...
Rene Freingruber
@ReneFreingruber
3K Followers
Automated Product Cybersecurity & Compliance: Tailored Platform & Services for device manufacturers.
ONEKEY
@onekey_sec
665 Followers
Music, photography and open source.
Simone Margaritelli
@evilsocket
36K Followers