Security professional during the day, learning the hard job of dad rest of the time. Manager AppSec @gitlab
Geneva
Joined September 2009
- Tweets798
- Following265
- Followers68
- Likes295
VMDS retweeted
The $1.5B Bybit hack marks a new era in cryptocurrency security. Attackers have moved beyond technical exploits to sophisticated operational attacks. Read our initial analysis of this historic breach and its industry-wide implications: blog.trailofbits.com/2025/02…
VMDS retweeted
I don't usually ask for help on X, but the situation I'm dealing with is seriously f*cked up... Details below ⤵️
VMDS retweeted
❓Have you ever wanted to get in the mind of a hacker? Well, here's your chance during our Ask a Hacker AMA next week on September 8th.
✏️ Sign up and drop your questions here. bit.ly/3qNOChj
VMDS retweeted
We hope you enjoyed #INS23 ! As usual, thanks to the amazing work of @Ministraitor, all the talks are now available on our YouTube channel:
youtube.com/@scrtinsomnihack…
See you next year ! #INSO23
VMDS retweeted
#job: want to work on security with me at @taurus_hq? from code reviews to key ceremonies to compliance to physical security, a lot to do, solid team and tech and company (just announced a series B)
must be Swiss resident, speaking French or German is a plus but not mandatory
VMDS retweeted
How I found that heap corruption in Git? It was a little bit of luck and good guts feeling about the code to be honest. 🙃
about.gitlab.com/blog/2023/0…
VMDS retweeted
"L'éditeur ne disposait pas d’un plan de reprise des activités digne de ce nom [...]. Les sauvegardes étaient en outre selon eux conservées chez le même hébergeur que les données elles-mêmes."
Avertissement aux PMEs du coin qui se jettent dans le cloud...
letemps.ch/suisse/un-mois-ap…
Bonjour @BanqueCler ! Est-ce qu'il est possible d'accéder à son compte Zak, depuis son app sur son iPhone et sur son iPad?
VMDS retweeted
How did I miss that! This repository is amazing to emulate several attackers🤩
"A PoC that packages payloads into output containers to evade Mark-of-the-Web flag. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX" - @mariuszbit github.com/mgeeky/PackMyPayl…
VMDS retweeted
We have finally published Tproxy (objectifsecurite.gitlab.io/t…) our generic TCP interception proxy (think Burp for TCP): TLS handling, wireshark dissection, intercept and modify by hand or with scripts in GUI or CLI.
There is a complete doc with demos (objectifsecurite.gitlab.io/t…)
VMDS retweeted
This great article prompted me to continue my search for an updated universal ruby gadget! After a lot of digging I managed to chain two together to create a new RCE gadget that works on Ruby 2.0-3.2: devcraft.io/2022/04/04/unive…
New post - Ruby Deserialization - "Gadget" on Rails. In this blog post, we discuss finding a new RCE gadget in latest Rails (7) framework extending the work of @elttam @wcbowling. Ft. @iamnoooob @rootxharsh
httpvoid.com/?p=Ruby-deseria…
VMDS retweeted
How to use @gitlab's security features to detect #log4j vulnerabilities 💥
Amazing blog post collaboration from our Developer Evangelism team across all teams. @olearycrew @john_cogs 🤗
about.gitlab.com/blog/2021/1… #Log4Shell #security
Bonjour @Swisscom, j'aimerais savoir quand Swisscom va mettre en règle les installations fibres en P2P et non en P2MP? Cela explique pourquoi les autres fournisseurs (@SaltMobile_Care dans mon cas) ont été incapable de me fournir un accès il y a 1 an... bvger.ch/bvger/fr/home/media…
VMDS retweeted
As of today, bounties for new reports submitted to the @gitlab #bugbounty program have been raised across the board.
Most notably, $15,000 maximum for high severity vulnerabilities and $35,000 maximum for critical! 💸
There's also swag up for grabs :)
about.gitlab.com/blog/2021/1…