Anuj Malkapuram

Security Engineer | Researcher. Tweets and Opinions are my own.

[Anuj Malkapuram @AnujMalkapuram]

SVB Depositors will have access to all of their money starting Monday, March 13. https://t.co/vSJxxd7EE3 #svb

[Anuj Malkapuram @AnujMalkapuram]

More than half a million users have installed Android malware posing as games — from Google Play.

[Lukas Stefanko @LukasStefanko]

Don't install these apps from Google Play - it's malware.

Details:
-13 apps
-all together 560,000+ installs
-after launch, hide itself icon
-downloads additional APK and makes user install it (unavailable now)
-2 apps are #Trending
-no legitimate functionality
-reported

[briankrebs @briankrebs]

A Connecticut man who's earned bug bounty rewards and public recognition from top telecom firms for finding/reporting security holes in their Web sites secretly operated a service that leveraged these same flaws to sell their customers' personal data https://t.co/fkEja12fcm

[Robert M. Lee @RobertMLee]

I know no good will come from me saying this. But I feel compelled to say that former senior govt officials especially the head of our most significant intelligence agency profiting from that experience to work with foreign intel backed companies bothers me on a deep level.

[Project Zero Bugs @ProjectZeroBugs]

iOS/MacOS sandbox escapes due to MIG failing to use correct out-of-line descriptor lengths when parsing reply messages https://t.co/PDpLj98Vw4

[Ben Nimmo @benimmo]

BREAKING: @TWITTER just published the full dataset of tweets from the Russian and Iranian troll farms.

9 million Russian tweets. 1 million Iranian tweets. #motherlode

They gave @DFRLab a look ahead of time.

Thread on the findings to follow.

https://t.co/w57jiz7U3V

[Anuj Malkapuram @AnujMalkapuram]

YouTube is down.

[svbl @svblxyz]

CVE-2018-10933, xkcd style. 🙃

[Anuj Malkapuram @AnujMalkapuram]

#APT Groups and Operations list:
https://t.co/5gbCNJQpVD If you’d like to contribute, please reach out to @cyb3rops #malware #malwarefamilies #cyberattacks #threatintel

[Anuj Malkapuram @AnujMalkapuram]

Govern, find, fix and prevent. Simple but effective.

[Caroline Wong @CarolineWMWong]

#AppSec program? There are many models - #bsimm, #iso27017, @cloudsa #cmm - but you might find these to be long, complicated, and challenging to implement. That's why we created The Modern AppSec Framework https://t.co/ZXdwdawvjZ @cobalt_io

[Anuj Malkapuram @AnujMalkapuram]

@evanderburg @sanjayparab

[NSA/CSS @NSAGov]

Paula Lewandoski, #NSA Threat Operations Manager, stressed that “cyber vulnerability is one of the biggest strategic threats to our nation and it’s not just a government problem- it’s a global problem.” @texas_cyber #tcs2018 #CyberAware