Member of the Blackhat Review Board, Consultant, and Information Security Researcher.
Austin, TX
Joined January 2020
- Tweets2.6K
- Following577
- Followers719
- Likes854
SavageJen On Insecurity retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
SavageJen On Insecurity retweeted
đź“Ł ANNOUNCEMENT: We're excited to announce our Keynote and Main Stage Speaker Lineup for #BHUSA. Don't miss it! #cybersecurity #infosec
Learn more here:
blackhat.com/us-24/keynotes.…
SavageJen On Insecurity retweeted
#defcon escapes another brush with cancellation! After 25 years w/Caesars, they cancelled our contract for #defcon32.
A lot of conferences might have buckled, but not DEF CON. Hackers make a way out of no way.
Uncanceled DEF CON 32 will now be held at the Las Vegas Convention Center, on the same dates and for the first time in a while, under one roof.
@thedarktangent 's full post is here: forum.defcon.org/node/248360
SavageJen On Insecurity retweeted
Honored to be one of the judges for Black Hat’s Startup Spotlight Competition, a video pitch competition for security startups.
Finalists will present their products in front of a live audience at Black Hat USA. You can still apply!
Submit by June 9:
blackhat.com/us-23/spotlight…
SavageJen On Insecurity retweeted
Welp, time for a change of pace. Leaving my current role & starting a company to build the tool I always wished I had as a CISO but no one has made yet. Initially hiring developers with cloud and data background and a UI/UX person looking for a challenge. All remote. :)
SavageJen On Insecurity retweeted
The Black Hat team is devastated to learn of the passing of Kelly Lum (@aloria). Kelly was a respected & valued member of our Review Board, a Track Leader, and speaker at our events. This is a terrible loss, and we send our sincere condolences to her family and friends.
ALT A photo of Kelly Lum (@aloria) that she personally chose to use for her profile photo on the Black Hat Review Board web page.
SavageJen On Insecurity retweeted
NYSEC is tomorrow, Tuesday, March 21st @ 6PM.
Please join us in remembrance of our dear friend, colleague, and mentor @aloria, whom without our community and world surfers greatly.
d.b.a.
41 1st Ave.
New York, NY 10003
Map:g.co/kgs/aDrL9S
SavageJen On Insecurity retweeted
Updates to
googleprojectzero.blogspot.c…
* The four severe Internet-to-baseband RCE vulns now have CVE-IDs
* Pixel just updated their March 2023 bulletin to show fixes for all four of the severe issues for Pixel 6 and 7
* I'm told that the Pixel 6 March OTA update is rolling out now.
What happens when you get @natashenka, @ifsecure, @_fel1x, @i41nbeer and @tehjh working collaboratively on a new attack surface for the team?
This: googleprojectzero.blogspot.c…
The blogpost also includes actions that users can take to protect themselves while waiting for patches.
SavageJen On Insecurity retweeted
Found a method to see inside some chips, without having to unmount or destroy the chips.
Best part - the method only relies on lightly modded off-the-shelf cameras and lenses.
Read more at bunniestudios.com/blog/?p=67…
SavageJen On Insecurity retweeted
Samsung's compromised key is used for everything: Samsung Pay, Bixby, Samsung Account, the phone app, and a million other things you can find on the 101 pages of results for that key.
trib.al/4tX9nme
SavageJen On Insecurity retweeted
F5 out-of-band security notification, get it while it's hot: support.f5.com/csp/article/K…
SavageJen On Insecurity retweeted
Many hirings! Want to join an engineering team building a whole new public cloud? We’ve probably got a role to suit you:
SavageJen On Insecurity retweeted
Catch my #BlackHat talk on “how security teams can design holistic programs to use bounties to create deliberate security outcomes & which can be demonstrated in a meaningful & measurable way.”
Thursday, August 11
10:20-11:00am
Mandalay Bay GH (Level 2)
blackhat.com/us-22/briefings…
Why Bug-Bounty Programs Are Failing Everyone: bit.ly/3Sa8gg8 #BHUSA
SavageJen On Insecurity retweeted
I did a quick test of masks for upcoming events like @DEFCON. Verdict: throw out your old cloth/surgical masks and get behind-the-head (instead of behind-the-ear) N95 masks that fit well.
cybersect.substack.com/p/fac…
SavageJen On Insecurity retweeted
An EFF Investigation: Mystery GPS tracker on a supporter’s car @EFF adafru.it/-JE
SavageJen On Insecurity retweeted
Cisco says it won’t fix a zero-day vulnerability in end-of-life VPN routers allowing unauthenticated, remote attackers to execute commands with root-level privileges.
Affected models: Cisco Small Business RV110W, RV130, RV130W, and RV215W routers.
bleepingcomputer.com/news/se…
