WithSecure Labs

With great research comes great responsibility.

[fwd:cloudsec @fwdcloudsec]

We're happy to announce WithSecure is a Bronze sponsor for fwd:cloudsec! @WithSecure https://t.co/r8HTBL8Enz

[WithSecure Labs @FSecureLabs]

Don't worry though, @realmatthours is also nice enough that he's tried to make it easier to spot and kick those pesky hackers out of your estate as well:
https://t.co/bYwaTh1UIF

[WithSecure Labs @FSecureLabs]

@realmatthours is here proving his chops in Azure DevOps and will show you how to attack and protect your code and pipelines:
https://t.co/d7rt6bpoQs

[WithSecure Labs @FSecureLabs]

@Yogehi decided it was time to remind us all of that time he could have installed a cute version of Drozer on your Samsung phone @FSecure @FSecure_Consult
https://t.co/l6C2f8EsTt

[WithSecure Labs @FSecureLabs]

@j1gst4k3r the Plone ranger caching his way to XSS https://t.co/WM2lq78Sn1 @FSecure_Consult @FSecure CVE-2022-23599

[WithSecure Labs @FSecureLabs]

What did the printer say when it saw @TimoHirvonen and @dark_k3y? Oh sheet!

Read how the @FSecureLabs Red Team is Printing off the land by printing their own shellz - https://t.co/FFcui9VYF5

CVE-2021-39237 (https://t.co/Al7ITRZRyu) & CVE-2021-39238 (https://t.co/Drgm0K2apC)

[WithSecure Labs @FSecureLabs]

We heard y'all might be having problems playing with the Financial Information eXchange protocol. Can we FIX it? Yes we^@AppSecOllie can! He's developed a Burp extension, it's a bit janky, and you might say it's a bit of a Fixer Upper.... https://t.co/A548cczGK7

[WithSecure Labs @FSecureLabs]

Web proxies got ya down when it Mattermost (thanks @mariuszbit)? JIRA at those pesky sysadmins and keep the Discord with your C2 agents - Please enjoy responsibly! - https://t.co/oNwfPhFciY #C3 #RedTeam #BlueTeam #PurpleTeam

[WithSecure Labs @FSecureLabs]

Ooooof @PaloAltoNtwks out of the frying pan(GPS) and into the fire that is @FSecureLabs @1njected discovery of yet another LPE in GlobalProtect VPN Client adding CVE-2021-3057 (https://t.co/FdVkJpsmho & https://t.co/mD83ehjooL) to the @CrowdStrike fry-up (https://t.co/6zNpI3YEEO)

[WithSecure Labs @FSecureLabs]

cc @pajp

[WithSecure Labs @FSecureLabs]

See how Rasmus caught Gatekeeper Gatesleepering on the job at https://t.co/KSj8nMfEI2 and https://t.co/mHbTBVgcZQ! #CVE-2021-1810 #macos

[WithSecure Labs @FSecureLabs]

William Söderberg strikes again, disclosing a privesc in Qiata FTA. But Kudos to Secudos, who patches faster than a Miata for Qiata!
https://t.co/f2zckB77jz

[WithSecure Labs @FSecureLabs]

As @__invictus_ shows - you are never too old to play with PuTTY https://t.co/wmGhLacsfX

[WithSecure Labs @FSecureLabs]

A non OP-TEEmal configuration allows for LPE. Grab yourself a cup of TEE and read the advisory from F-Secure Foundry (https://t.co/e6ur70beuA), Andrej Rosano and @AndreaBarisani - https://t.co/9XA7pVuuo6

[WithSecure Labs @FSecureLabs]

Enjoy unlimited Mimosa's at our bottomless breach https://t.co/m6RY20F8gT

[WithSecure Labs @FSecureLabs]

A prelude to ransomware - we have released our write up of analysis into SystemBC mapped to @MITREattack and with @sigma_hq rules for detection https://t.co/ezX7h5CPB4

[WithSecure Labs @FSecureLabs]

Member when it was easy to break into your Samsung account? @yogehi members https://t.co/afu0K8q1KO

[WithSecure Labs @FSecureLabs]

If you couldn't make it to yesterday's workshop here's the recording: https://t.co/m6Z5Ka1J0a and the slides: https://t.co/DJn9hKPSGm

[WithSecure Labs @FSecureLabs]

Ever explored the mystic vista of Azure attack detection? Join @_masande as he goes through the basics of detecting an end-to-end cloud-native attack https://t.co/O5Sd29KHUk
https://t.co/LNAMI7SLlo
https://t.co/FhwkrLV1sD

[WithSecure Labs @FSecureLabs]

Heavy Metal Debugging - a how to on reverse engineering zOS apps by @Jabellz2 https://t.co/21vuSJDWKc