Aaron Carreras

Leader, Father, USAF Veteran, Software Developer, Security Researcher, Diver, Beer and Bourbon Enthusiast

[Mandiant (part of Google Cloud) @Mandiant]

We worked with Alex Birnberg of @ZymoSecurity to responsibly disclose 1 high and 3 moderate bugs constituting Remote Code Execution in the Solarwinds Orion platform.

You can read more here ▶️ https://t.co/l6IKOe6JP1

[Mandiant (part of Google Cloud) @Mandiant]

Grab a cup of eggnog and dive in!

[Aaron Carreras @AaronCarreras]

@brysonbort Love the imagery!!! 🤣😂 And I am confident answering for that!

[Aaron Carreras @AaronCarreras]

@brysonbort I wish I could pull it (the beard) off! Would look more like patches of grass!! 😂

[m0n0sapiens @m0n0sapiens]

I stumbled upon Github's Security Lab blog recently. Good stuff in there: https://t.co/Pq4N00fvzR

[Aaron Carreras @AaronCarreras]

@bfosterjr Ha! This the kind of bug we were Pwning 15 years ago! Take a look at the deets!

[Aaron Carreras @AaronCarreras]

OTF's take (and discovery) on/of CVE-2020-14871; this vulnerability is being exploited by malicious actors in the wild!

https://t.co/JcGfNjZMmt

#Mandiant #FireEye #vulnerabilities #exploits #InTheWild

[Michael Sikorski @mikesiko]

Over 1000 players are playing right now in the #flareon7 challenge! Get registered and get moving. You can't go to dance club tonight, so this is a great alternative. Be like Neo. Registration link: https://t.co/vILblxc4Gk

[Michael Sikorski @mikesiko]

Registration is now open for the SEVENTH annual FLARE-On Challenge! @FireEye @Mandiant

[Michael Sikorski @mikesiko]

Get ready for the SEVENTH ANNUAL FLARE-ON CHALLENGE!!!! Starts on Friday, September 11, 2020 #flareon7 @FireEye @Mandiant https://t.co/Wg79FRpoya

[Aaron Carreras @AaronCarreras]

@maggiemoomay11 I haven't cancelled my trip yet. That said, not optimistic about attending at the moment.

[Michael Sikorski @mikesiko]

One Michael asks for something and another Michael delivers. This is the way. FLARECON 2020 https://t.co/AzRytPLE7E

[Michael Sikorski @mikesiko]

I'm excited to announce FLARECON 2020 - an exclusive education event brought to you by @FireEye Registering for our FLARE training is the only way to get a ticket to the conference. Registration details found here: https://t.co/RnGZLREEMO

[Ilfak Guilfanov @ilfak]

An exciting project, I hope it will simplify writing decompiler plugins. We at Hex-Rays probably care too much about all minute details while you guys want a more general view of things. FIDL is a promising bridge.
https://t.co/fFnBZavb1S

[𝕸𝓎𝖐𝖎𝖑𝖑 ☠️ @mykill]

I love that the monthly meetings in the FLARE team feel like I'm being paid to sit at my desk and attend a security conference. Makes me wonder.

[Michael Sikorski @mikesiko]

The Sixth Annual FLARE-On Challenge Starts in 12 hours...tick tock... https://t.co/enwYL74VPz @FireEye @nickharbour

[Aaron Carreras @AaronCarreras]

@jgeigerm Congrats!!!

[Aaron Carreras @AaronCarreras]

@RGB_Lights @HiltonHotels Marriott FTW!!!

[Objective-See Foundation @objective_see]

Recent Firefox 0day attack dropped OSX.Netwire.A (https://t.co/da0JEh573O)

Apple deployed XProtect signature in 2016(!)
But only files w/ "quarantine attribute" scanned...exploits don't set that attr. 🤣

Can manually add attr. & confirm 🍎's signature

📝https://t.co/dAdMoPkRPe