@mdgsecurity

InfoSec enthusiast, husband, father and Patriots fan!! SVP Customer Success, Services and Support @ Rapid7.

 Texas, USA
Joined March 2009
  • Tweets450
  • Following394
  • Followers241
14Media
The new @TrendMicro Vision One platform release marks a leap forward in enterprise #cybersecurity, encompassing robust attack surface risk management and next generation XDR - now amplified by powerful generative #AI technology. Find out more here: bit.ly/3N8Ql7V
3
221
The latest blog from the Trend Micro Research Team looks at CVE-2022-26937: a Microsoft Windows NFS NLM Portmap stack buffer overflow that could lead to RCE. They provide root cause, source code walkthrough, and detection guidance. zerodayinitiative.com/blog/2…

Zero Day Initiative — CVE-2022-26937: Microsoft Windows Network File System NLM Portmap Stack...

In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Guy Lederfein and Jason McFadyen of the Trend Micro Research Team detail a recently patched code execution...

zerodayinitiative.com
67
4
143
Replying to @dustin_childs
@Dustin_Childs & @thezdi & @MaliciousInput provide examples of systemic problems with security patches and how those problems negatively impact enterprise security, based on disclosing over 9,500 vulnerabilities across 17 years, in #BHUSA Briefing informatech.co/3wvA6e4
6
13
Here's a quick demonstration of the #Microsoft Teams 0-click exploit demonstrated by @starlabs_sg during #Pwn2Own last week.
1
45
3
140
This was fun to watch live today. Congrats again to the @Synacktiv team.
TrendAI Zero Day Initiative
@thezdi20 May 2022
The @Synacktiv team shows off their remote exploit of the #Tesla Model 3. Earlier today, this research earned them $75,000 during #Pwn2Own.
1
1
Amazing first day of the 15th anniversary of #Pwn2Own. Can’t wait to see what happens tomorrow. @TrendMicro @thezdi
TrendAI Zero Day Initiative
@thezdi19 May 2022
Day One of #Pwn2Own Vancouver 2022 comes to a close with record breaking numbers. $800,000 awarded for 16 0-days - our biggest 1 day total in contest history! No bug collisions. No failed attempts. No kidding. zerodayinitiative.com/blog/2…
2
Can’t wait to arrive in Vancouver and join the team for our 15th anniversary of Pwn2Own. Going to be a great week.
TrendAI Zero Day Initiative
@thezdi16 May 2022
Setup begins for #Pwn2Own Vancouver. Our drawing for order of events will be tomorrow afternoon (5/17/22). Our 15th anniversary is shaping up to be our best ever. #P2O
1
Since #Ubuntu has a new release, we will be using version 22.04 at #Pwn2Own Vancouver instead of 21.10. We've updated the rules to reflect this change. Hope to see you there. zerodayinitiative.com/Pwn2Ow…
1
4
25
We’re excited to announce that @TrendMicro has joined the Cortex XSOAR Marketplace! Learn more about Vision One here! bit.ly/3oQ9yQB #securityautomation #xsoar #marketplace #VisionOne
1
2
We have joined the Cortex XSOAR Marketplace! Trend Micro Vision One and Cortex will work seamlessly to simplify incident investigations and drive automated response. Learn more about Vision One here: bit.ly/3oPWJFY
2
8
Zero Day Initiative — Looking Back at the Zero Day Initiative in 2021 thezdi.com Very proud of the team's accomplishments in 2021. Almost $4M awarded to the research community in total. Congratulations @trendmicro @thezdi!!

Zero Day Initiative — Welcome

thezdi.com
Some may say I have a fascination with tech gadgets. I typically argue, but after applying a firmware update to a softball just now, I think they may be right.
1
The trophy and jackets for #Pwn2Own Austin have arrived! Who will win the Master of Pwn? Find out next week as #Pwn2Own Austin kicks off. #P2OAustin
7
1
45
An analysis of a #Parallels #Desktop stack clash vulnerabilities. @renorobertr describes some recently patched bugs and looks at how Binary Ninja’s static data flow capability can be used in automating bug finding tasks. zerodayinitiative.com/blog/2…

Zero Day Initiative — Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting...

Parallels Desktop uses a paravirtual PCI device called the “Parallels ToolGate” for communication between guest and host OS. This device is identified by Vendor ID 0x1AB8 and Device ID 0x4000 in a...

zerodayinitiative.com
40
101
I’ve been asked many times if I have a separate home network for IOT devices because they are “insecure”. No, I segment my home network by 1) sensitive assets, 2) high-risk assets (aka anything my kids can install apps on) 3) everything else. Type of device isn’t important.
1
4
Mike Gibson retweeted
Troy Hunt
@troyhunt4 Sep 2021
So @Scott_Helme got hit with a DMCA takedown for sharing a letter from a patent troll that included his signature. Apparently it constitutes “personal biometric data” so it’s *very* important that you don’t RT this tweet that includes the signature. Do. Not. RT. 🍿 🍿 🍿 – at Gold Coast, Queensland
Scott Helme
@Scott_Helme1 Sep 2021
Replying to @Scott_Helme @twitter
There's a document here filed 20 Jul 2011 that contains the same signature and is a matter of public record, so I don't know why he's so bothered about this one 🤷‍♂️ find-and-update.company-info…
10
184
5
241
#Linux is powerful, universal, and dependable, but it is not devoid of flaws. In our latest article, we discuss the state of #Linux security for the first half of 2021. Full report: research.trendmicro.com/Stat…
.@TrendMicro is committed to bridging the #cybersecurity #skillsgap by empowering professionals to hone and test their skills on the world stage. Capture the Flag is here! bit.ly/2W4AMaT
Mike Gibson retweeted
R3MRUM@R3MRUM5 Jul 2021
I've seen a few researchers publish the configured REvil C2 domain list for IOCs and just wanted to add some additional context that you may find useful...
4
114
11
243
Load more