Die-hard #CyberSecurity Pro 🐧 Full-stack penetration testing. Security Architecture and Engineering. Tweets mostly #InfoSec facts.
Manhattan, NY
Joined March 2014
- Tweets2.2K
- Following3.1K
- Followers1.3K
- Likes685
Everyone building agentic AI is one malicious PDF away from a security incident. Prompt injection scales with capability. The more tools your LLM has, the bigger the blast radius. medium.com/@securitystreak/p…
Andrew Douma retweeted
Introducing VirusTotal Code Insight: empowering threat analysis with generative AI. This tool is based on Sec-PaLM (LLM) and helps explaining behavior of suspicious scripts. Code Insight is available now for all our users! More details by @bquintero: blog.virustotal.com/2023/04/…
Andrew Douma retweeted
Thread alert! The Splunk Threat Research team (#STRT) has been busy in the past 60 days. Here's a quick rundown of some of our most recent projects:
Excellent framework for a cybersecurity program
Today we updated the ACSC’s Information Security Manual (ISM), one of our flagship products for CISOs, CIOs and IT professionals. This framework helps organisations manage cyber security risks to protect organisational systems and data. Visit cyber.gov.au/acsc/view-all-c…
Andrew Douma retweeted
🔊 New blog post: macOS Sandbox Escape vulnerability via Terminal
wojciechregula.blog/post/mac…
#yara ruleset for better detection of bad actors by focusing on identifying specific non current releases of @HelpSystemsMN #CobaltStrike cloud.google.com/blog/produc…
#hackertools mitmproxy
#hackertools Legitimate RATs used by adversaries - #DFIR analysis @TeamViewer @anydesk @AteraCloud @Splashtop to proactively block these on network and endpoints if you are not a customer today synacktiv.com/publications/l…
#hackertools Regulator - new approach to subdomain enumeration cramppet.github.io/regulator…
Andrew Douma retweeted
Memory safety (for cybersecurity) is still a problem. And a long journey, some of it documented here (and what to do about it, and where we are going) docs.google.com/presentation…
Mobile app uses TimeOfFlight sensor to detect hidden cameras better than existing state-of-the-art commercial #hiddencamera detectors (CC308+, K18) #privacy helpnetsecurity.com/2021/11/…
Andrew Douma retweeted
Windows Exploit Suggester - Next Generation v1.0 has been released! Including the new missingkbs.vbs utility and an in-depth blog post on how to use it: Windows Security Updates for Hackers. Latest #WESNG release: github.com/bitsadmin/wesng, blog: bitsadm.in/blog/windows-secu…
Andrew Douma retweeted
In case you missed it --> We released a catalog of known exploited vulnerabilities to reduce the significant cybersecurity risk these vulnerabilities pose. Take a look: cisa.gov/known-exploited-vul… #CVE #Cybersecurity
Crack WPA2 WiFi passphrase by capturing PMKI roaming hash. Solid write-up sans the outdated guidance on what a "secure" password makes. cyberark.com/resources/threa…
#mindmap for Active Directory penetration tests
AD Pentest mindmap upgrade :
Full version: github.com/Orange-Cyberdefen…
xmind version (slow, the map is big) :
xmind.net/m/5dypm8/
Fell free to tell me what is missing !
An effectively #firmware #keylogger that does not run any code on the CPU while it is running 8051enthusiast.github.io/202…