@bugch3ck

Privilege Escalation Engineer Principal Consultant @ Reversec (formerly WithSecure Consulting)

 @bugch3ck.bsky.social
Joined August 2011
  • Tweets6K
  • Following371
  • Followers1.9K
480Media
Jonas Vestberg retweeted
Timothy Ash@tasheconOct 16
Finally one billionaire with some balls.
Olga Nesterova
@onestpressOct 15
543
3,256
73
23,492
896,673
Jonas Vestberg retweeted
Zoë
@ZoeCatherineFOct 9
True love
70
2,531
136
32,922
489,246
Jonas Vestberg retweeted
Pavel Yosifovich
@zodiaconSep 23
What is OBJECT_ATTRIBUTES and how it's used? The Windows API hides it, but every native create or open call needs it. Full write-up: trainsec.net/library/windows…
1
19
134
5,462
Attackers don't wait 30-days if they find an 0-day. Just saying...
This quoted post is unavailable.
Try viewing anyway · View on X
4
244
Hi @fortraofficial . Did you by any chance misspell "CVSS" in your vulnerability report template on your web site?
3
202
Jonas Vestberg retweeted
AI Scrapbook
@AiScrapbookSep 4
Pippi Långstrump ai-genererad parodi i gammal japansk samurai-filmstil. Jag har följt utvecklingen av de här ai-modellerna inom generativ bild, video, musik och ljud, hands on sedan 2022. Jag är helt blown away av det här. Vi är alltså här nu. #aivideo #svenskfilm #parodi
🤖 Made with AI
63
205
38
2,007
235,104
The mood in this Ad: What a beautiful day to sit in the forest, open a cold one and do some littering...
Sumilees
@SumileesSep 3
This playful bottle opener blends humor with practicality. A small surprise that always gets a big reaction. Get yours =>sumilees.com/products/bottle…
69
This was one of my predictions when I first heard about Microsoft deprecating wmic.exe
Imran Awan@imran76awanAug 24
Microsoft just removed wmic.exe from Windows 11. Not disabled - gone. Old scripts calling it (batch files, GPO logon scripts, ConfigMgr task sequences) will fail with zero warning. 🧵
214
⚒️ BTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive ⚠ Trusted Remediation Primitives with Undocumented Internals. 🔓 15+ years. Unchanged. Unblockable. 🤔 What if an attacker learned its language? We did. 👇 research.checkpoint.com/2026…

BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive - Check...

Research by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver...

research.checkpoint.com
3
25
5
58
27,460
Jonas Vestberg retweeted
Johnny Fishcake@johnnyspandexAug 18
Weaponising MDM - running a fake MDM server and pwning people as SYSTEM with two clicks (if they have permission to elevate). Poc included. blog.amberwolf.com/blog/2026…

NachoMDM - Weaponising Windows MDM for UAC Bypass and SYSTEM Execution via Malicious Enrollment

AmberWolf Security Research Blog

blog.amberwolf.com
1
23
58
4,250
Jonas Vestberg retweeted
SpecterOps@SpecterOpsAug 18
BloodHound is 10 🎉 To celebrate, creators @_wald0, @CptJesus & @harmj0y joined for a special two-part #KnowYourAdversary. They reminisce on the first attack graphs and look ahead to what’s next for BloodHound. 1️⃣: ghst.ly/4xT4WdA 2️⃣: ghst.ly/4zIIeqj
2
9
1
33
11,156
Jonas Vestberg retweeted
XBOW
@XbowAug 17
😎
1
8
1
49
20,607
Jonas Vestberg retweeted
Richard Hicks
@richardhicksAug 17
So, you've deployed NDES on-premises to issue SCEP certificates with #Microsoft Intune. Did you know it's leaking internal domain information to the Internet? Here's how to detect and remediate this issue. rmhci.co/3TRfYkR #mobility #security #identity #pki #msintune
2
11
41
3,241
Jonas Vestberg retweeted
Chris Thompson@_MayyhemAug 13
Patch SCCM with learn.microsoft.com/en-us/in… or you're likely vulnerable to a new hierarchy takeover technique (CVE-2026-47301) discovered by Omri Baso from @XMCyber_ that worked in my lab out of the box. MS's KB description doesn't do the impact justice. medium.com/@omribaso/from-do…
25
63
5,281
Jonas Vestberg retweeted
Andy Davidson@totalwormageAug 11
1,111
1,377
125
32,672
1,480,810
Jonas Vestberg retweeted
Hai Tung@tacbliwAug 10
Someone dropped this Windows LPE writeup online yesterday along with a PoC. But the mentioned CVE-2026-62737 is not released yet, maybe it will be in the Patch Tuesday tomorrow. And the PoC still work in the lastest version of Windows 😂 xz.aliyun.com/news/92658
6
102
2
513
66,137
Jonas Vestberg retweeted
DANΞ
@cryps1sAug 6
Our Black Hat talk on the OpenAI-Hugging Face incident is now live on youtube. This is a watershed moment for the industry. I encourage all defenders to watch, consider how attack dynamics will imminently change, and plan for accelerating defense. youtube.com/watch?v=87DyyMV0…

Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident

The 'Breaking' News: The OpenAI–Hugging Face Incident - A Technical...

youtube.com
71
251
72
1,235
480,382
Jonas Vestberg retweeted
Internet of Shit
@internetofshitAug 6
use this one WEIRD trick to make your customers never purchase your car again
James Walker
@jwalkermobileJul 30
Check this out, today when you start your BMW, you see an advert for #spiderman #brandnewday
6
29
2
183
13,875
Not sure about posting here again but I want to go back to doing what I love: making cool art for hackers and it seems like most of you stayed here. So, I still hate the guy in charge but I might post some stuff here.
1
1
1
17
878
Load more