@SecViews

Currently working as a Project Executive at Kyndryl, CISSP and MCSA accredited, particularly interested in infosec and DR topics. Tweets are my own.

Joined September 2012
  • Tweets1.5K
  • Following4.3K
  • Followers4.7K
Everything you need to know about XZ backdoor wired.com/story/xz-backdoor-…

The XZ Backdoor: Everything You Need to Know

Details are starting to emerge about a stunning supply chain attack that sent the open source software community reeling.

wired.com
221
Akira Ransomware and exploitation of Cisco Anyconnect vulnerability CVE-2020-3259 ⋆ TruesecTruesec https://www.truesec.comhub/blog/akira-ransomware-and-exploitation-of-cisco-anyconnect-vulnerability-cve-2020-3259
1
336
Google OAuth endpoint zero day vulnerability bleepingcomputer.com/news/se…
1
183
Passive SSH Key Compromise via Lattices eprint.iacr.org/2023/1711.pd…
201
Low-Resource Languages Jailbreak GPT-4 arxiv.org/pdf/2310.02446.pdf
167
USING CLOUDFLARE TO BYPASS CLOUDFLARE certitude.consulting/blog/en…
239
People's Republic of China-Linked Cyber Actors Hide in Router Firmware cisa.gov/news-events/cyberse…

People's Republic of China-Linked Cyber Actors Hide in Router Firmware | CISA

cisa.gov
142
vulncheck.com/blog/juniper-c…

Fileless Remote Code Execution on Juniper Firewalls | Blog | VulnCheck

Learn about VulnCheck's development of an exploit for CVE-2023-36845, leading to stealthy code execution on Juniper firewalls, while also assessing the prevalence of unpatched systems in the wild.

vulncheck.com
1
103
wiz.io/blog/38-terabytes-of-…

38TB of data accidentally exposed by Microsoft AI researchers | Wiz Blog

Wiz Research found a data exposure incident on Microsoft’s AI GitHub repository, including over 30,000 internal Microsoft Teams messages – all caused by one misconfigured SAS token

wiz.io
86
Free Download Manager Site Compromised to Distribute Linux Malware to Users for 3+ Years thehackernews.com/2023/09/fr… via @TheHackersNews
1
2
219
theregister.com/2023/08/23/r…

Ransomware infection wipes all CloudNordic servers

: IT outfit says it can't — and won't — pay the ransom demand

theregister.com
117
TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System thehackernews.com/2023/07/te… via @TheHackersNews

TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System

A series of critical vulnerabilities have been disclosed in the Terrestrial Trunked Radio (TETRA) standard.

thehackernews.com
1
150
Remote Code Execution On An Oscilloscope via @hackaday hackaday.com/2023/07/17/remo…

Remote Code Execution On An Oscilloscope

There are a huge number of products available in the modern world that come with network connectivity now, when perhaps they might be better off with out it. Kitchen appliances like refrigerators a…

hackaday.com
1
2
124
positive.security/blog/auto-…
96
Security Expert Defeats Lenovo Laptop BIOS Password With a Screwdriver tomshardware.com/news/cyber-…

Security Expert Defeats Lenovo Laptop BIOS Password With a Screwdriver

Once into the BIOS via this screwdriver hack, it is a cinch to reset or disable the password requirement.

tomshardware.com
1
2
185
MOVEIt Transfer RCE Part Two (CVE-2023-34362) - @assetnote - blog.assetnote.io/2023/06/13…

MOVEit Transfer RCE Part Two (CVE-2023-34362)

Full MOVEit Transfer exploit chain (CVE-2023-34362): SQL injection to session creation to webshell upload and RCE.

slcyber.io
199
Listening To The ISS On The Cheap via @hackaday hackaday.com/2023/06/10/list…

Listening To The ISS On The Cheap

Like any hobby, amateur radio has no upper bounds on what you can spend getting geared up. Shacks worth tens of thousands of dollars are easy to come by, and we’ll venture a guess that there …

hackaday.com
125
arstechnica.com/information-…
1
104
On the trail of the Dark Avenger: the most dangerous virus writer in the world theguardian.com/news/2023/ma…

On the trail of the Dark Avenger: the most dangerous virus writer in the world

The long read: Bulgaria in the 1980s became known as the ‘virus factory’, where hundreds of malicious computer programs were unleashed to wreak havoc. But who was writing them, and why?

theguardian.com
1
127
thestack.technology/critical…
88
Load more