CipherTechs, Inc.

CipherTechs is a global Cyber Security service provider founded in 2001 that remains privately held with headquarters in New York City.

[CipherTechs, Inc. @CipherTechs]

CipherTechs discovered an admin authentication bypass 0day in JFrog Artifactory. https://t.co/iQcE01uSYS. Patches and work around are available. Be sure to find out if your in-house dev team uses Artifactory. Shout-outs to @jfrog for their vuln disclosure process!

[CipherTechs, Inc. @CipherTechs]

Update Chrome! https://t.co/H6JBmswTKI

[CipherTechs, Inc. @CipherTechs]

Auth bypass affecting multiple VMware products https://t.co/He7A3jmB2N

[mgeeky | Mariusz Banach @mariuszbit]

- "... and then he said to sign my malware.exe with faked Microsoft cert to evade AVs/EDRs. Would you believe?"

(￣y▽￣)╭ Ohohoho.....

Sign-Artifact.ps1 - based on @mattifestation research & implementation shamelessly borrowed here:

https://t.co/6LAVgCrOVN

[CipherTechs, Inc. @CipherTechs]

Patch Atlassian products: https://t.co/kuI9QMUKVJ

[CipherTechs, Inc. @CipherTechs]

OpenSSL RCE https://t.co/WMp4yErdhK

[CipherTechs, Inc. @CipherTechs]

https://t.co/DSr6AvZvrU Pedro and Darren from CipherTechs Red Team credited in Zyxel advisory

[CipherTechs, Inc. @CipherTechs]

Months of fun for pentesters - new Confluence exploitable bug https://t.co/Ay82Z0YL0D

[CipherTechs, Inc. @CipherTechs]

https://t.co/TYvoHQ4MEI sort by date added. These are actively exploited bugs - good priority list for patching.

[CipherTechs, Inc. @CipherTechs]

https://t.co/lzVope6zVo there's been a few of these. Along with patching, be sure to remove management interfaces from the Internet.

[CipherTechs, Inc. @CipherTechs]

WSO2 exploit for CVE-2022-29464 is now public https://t.co/5aAdhfxdWH
Patch details here https://t.co/Zc6SmJBdCw

[CipherTechs, Inc. @CipherTechs]

@dio9sys We'd love to talk to you. Fully remote position, opportunities to work SOC, develop detections, automation, write Python, and get real-world DFIR experience

[CipherTechs, Inc. @CipherTechs]

Senior Penetration Tester https://t.co/Z75YxakkdN

[vx-underground @vxunderground]

LAPSUS$ extortion group claims to have breached @Okta. They have released 8 photos as proof.

The photos we are sharing has been edited so no sensitive information or user identities are displayed.

Image 1 - 4 attached below.

[SecureWorld @SecureWorld]

Sandy Bacik, Director of Audit and Compliance at @CipherTechs, will present on PCI 4.0 next week at SecureWorld Philadelphia. See the conference agenda and register here: https://t.co/wXgScj3dwh #SWPHL22 #GRC

[CipherTechs, Inc. @CipherTechs]

Another fun Linux LPE https://t.co/r9zGRM8HaV

[CipherTechs, Inc. @CipherTechs]

container escape https://t.co/JkcXCC8Aem. "Containers running with AppArmor, SELinux or Seccomp are protected"

[CipherTechs, Inc. @CipherTechs]

Zabbix RCE https://t.co/uvFsourtqK

[Sonar @SonarSource]

Our researchers discovered a high-severity code vulnerability in the open-source monitoring platform Zabbix. Learn more about this authentication bypass in our latest publication🔥

https://t.co/WmS8EBzvST

#appsec #cve-2022-23131 #cve-2022-23134

[CipherTechs, Inc. @CipherTechs]

https://t.co/ZkjyVifeC7 Polkit LPE. Reminder to make removing setuid part of your standard Linux builds.

[The DFIR Report @TheDFIRReport]

Can confirm!

➡️Splashtop
SRUtility.exe

➡️AnyDesk
AnyDesk.exe
AnyDeskMSI.exe

➡️Atera
AteraAgent.exe
AgentPackageSTRemote.exe
AgentPackageHeartbeat.exe
AgentPackageWindowsUpdate.exe
AgentPackageADRemote.exe

Thanks for sharing @AltShiftPrtScn!

[CipherTechs, Inc. @CipherTechs]

Arbitrary file write on Windows domain controllers https://t.co/RgjersMeKI. Microsoft guidance here https://t.co/RCzWvUXQYZ