softwaresensei @softwaresensei

Joined October 2009

Tweets

242
Followers

145
Following

800
Likes

259

mattkunke.eth @MattKunke

3 years ago

Our most recent @GSR_io report provides holistic coverage of @ethereum’s roadmap, including the most significant upgrade in #crypto history transpiring in about seven days. gsr.io/insights/ether…

3 16 49 0 7

Disclosing an unfixed Google Cloud Platform (GCP) vulnerability as the 90-day remediation deadline has passed: Cloud Functions or Cloud Run launched from any GCP organization can bypass Google Kubernetes Engine (GKE) Authorized Networks (aka Kubernetes control plane firewalls) 🧵

21 763 3K 0 478

alex stratinakis @SecViews

3 years ago

Confluence servers hacked to deploy AvosLocker, Cerber2021 ransomware bleepingcomputer.com/news/security/…

0 1 1 0 0

Chris Wysopal @WeldPond

3 years ago

“As a practical example what this means to security, we demonstrate the possibility to load malware onto a Bluetooth chip that is executed while the iPhone is off.” dl.acm.org/doi/10.1145/35…

5 51 116 0 19

RichL @zerointerupt

3 years ago

One thing that's a little different about our Red Teams is how closely we partner with our engineering colleagues. So if you are excited about finding new attack surface and vulnerabilities but also want to design new mitigations and deliver features this is the role for you.

0 8 19 0 0

Ars Technica @arstechnica

4 years ago

WatchGuard failed to explicitly disclose critical flaw exploited by Russian hackers arstechnica.com/information-te… by @dangoodin001

2 18 39 0 1

Gemini @Gemini

4 years ago

1/3 🚀Major Giveaway Alert🚀We want to welcome $APE @apecoin and its community to Gemini by giving away 1 BAYC #NFT on March 22 to a new or existing Gemini user! 1 winner will be selected on March 22nd, 2022. MUST retweet this tweet and follow the rules to enter:

3K 19K 11K 0 107

Download Image

Loïc Castel @Dick_Reverse

4 years ago

v6.0 of the "Am I vulnerable to #Log4Shell decision tree. Also pushed the XML files on my github : github.com/DickReverse/In… Don't hesitate to interact and propose updates.

4 147 364 0 64

Download Image

MIT CSAIL @MIT_CSAIL

4 years ago

RT if you were part of that tiny 1993 bar. (via @markrendle)

247 2K 2K 0 56

Download Image

Charlie Miller @0xcharlie

4 years ago

I love the idea of publishing assessments! More companies should do it!

Ryan Naraine @ryanaraine

4 years ago

I love the idea of publishing assessments! More companies should do it!

3 74 261 0 42

3 6 30 0 2

☠️🐻Andy Piazza 🐻☠️ @klrgrz

4 years ago

I get this a lot from sysadmins and network engineers: "I want to get into infosec". Like, you're already there! Do your job to secure the network. sysadmins and network engineers have farrrrrr greater opportunity for security in their daily tasks than a SOC or a Sec Engineer.

EvilMog® @mog.evil.af @Evil_Mog

4 years ago

54 170 1K 0 28

14 38 288 0 11

softwaresensei @softwaresensei

4 years ago

missionimpossible #CoinbaseWalletSweepstakes

0 0 0 0 0

Ean Meyer - @eanmeyer.bsky.social @EanMeyer

4 years ago

@egyp7 @dildog I swear I saw this talk at DEF CON, an Israeli research team pivoted off fax communication on multi-fuction print scan fax devices to the internal network. Yup, found it. I remember seeing it and thought, "Wizards, those are wizards." hackaday.com/2019/05/04/fax…

4 24 107 0 19

thaddeus e. grugq @thegrugq

4 years ago

If the US moves forward with actually attacking the ransomware gangs’ infrastructure, it is the correct response. Some ops they could perform: - capture decryptors (for distribution) - delete stored data (prevent extortion) - collect BTC wallets (restitution) - sabotage src code

Lukasz Olejnik @lukOlejnik

4 years ago

0 2 16 0 0

Download Image

3 35 88 0 15

Will @BushidoToken

4 years ago

UPDATE 6/7/21 - Expanded the @MaltegoHQ graph with new facts about the #Kaseya #REvil ransomware attack: TTPs, IOCs, CVE details, tools, & vics

8 114 304 0 46

Download Image

Signal @signalapp

4 years ago

@jna_sh Here at Signal we have always placed an emphasis on developer productivity, so Infinidash lifecycle management has been at the core of everything we do from the jump. We hire for it accordingly: jobs.lever.co/signal/2a5fee8…

20 75 858 0 19

Dino A. Dai Zovi @dinodaizovi

4 years ago

This is brilliant! Using Lambdas as a sort of "cloud sudo": "I’ve found they are a great fit for performing tasks that require elevated privileges, especially if AWS IAM can control access."

Michele Titolo @micheletitolo

4 years ago

This is brilliant! Using Lambdas as a sort of "cloud sudo": "I’ve found they are a great fit for performing tasks that require elevated privileges, especially if AWS IAM can control access."

0 12 39 0 5

2 8 39 0 8

SANS Offensive Operations @SANSOffensive

4 years ago

In the next FREE #SANSTechTues Workshop, course co-author @bojanz will dive into 2 labs directly from #SEC542! OWASP Top 10 will be covered, then get your hands dirty hacking some apps. Space is limited, register here: sans.org/u/1dHe