Hyperion Gray

Software & Security Research, Penetration Testing, Ethical Hacker Education

[Hyperion Gray @HyperionGray]

https://t.co/rRx097js0A

Remind me why a platform promoting accessibility of information would limit that ability?!

[Hyperion Gray @HyperionGray]

Zero Day Alert: Cisco Issues Warning Over IOS XR Zero-Day Flaw Being Targeted in the Wild https://t.co/ZPTPEjr3b3 via @TheHackersNews

[Zero Security Research Labs @0SecLLC]

Happy Monday to all researchers. We hope you have a very successful week of hunting and programming. Should you want to sell any technologies don't hesitate to contact us.

[Brendan Dolan-Gavitt @moyix]

Expectation: I'll use GraphViz to plot this callgraph and it will make the structure perfectly clear
Reality:

[Hyperion Gray @HyperionGray]

@0SecLLC This is huge!

For the researchers by the researchers!

[Zero Security Research Labs @0SecLLC]

We are firm believers that researchers should get the money they deserve for the research they conduct. It takes time and effort. Zero Security prides itself on helping people from all over the world. We are currently accepting new clients to represent as we continue to expand

[Zeus Capital @ZeusCapitalLLP]

Chainlink is a Russian pump-and-dump fraud.
Until when are such fraudulent activities going to happen under @SEC_Enforcement @SEC_News watch? Protect the American people from Russian fraudsters!
@coinbase why are you tolerating this scam on your platform? @brian_armstrong
$LINK

[Bill Demirkapi @BillDemirkapi]

The Spectre Rootkit is now released alongside my @BlackHatEvents USA talk, Demystifying Modern Windows Rootkits. Go check it out! https://t.co/wGxH3L8pKk

[3xp0rt @3xp0rtblog]

Cerberus Bot v2 source can leak to the criminal forum xss[.]is, source code already available for the admin of the forum. The seller looked for a guy who can manage the project but doesn't found. Cerberus Bot selling has been closed because no way to manage a project.

[Danus @danusminimus]

I've been taking a huge interest in APTs recently and Threat Intelligence in general and I found this paper called "A Threat Actor Encyclopedia" by @ThaiCERT and it's fire! 🔥

https://t.co/Fmi8VoTj8B

[Hyperion Gray @HyperionGray]

Tor 0-Day: Stopping Tor Connections

Very interesting read and research!

https://t.co/PSEsxXDtFb

[Hyperion Gray @HyperionGray]

Don't forget to sign up for our Green Belt course on 0-Day Hunting!

https://t.co/zcI0Ydgiqg

Date: 07/30/2020

Spaces are limited!!

[Axel Souchet @0vercl0k]

If you need to debug a Linux kernel Hyper-V guest check out https://t.co/S2OP8FNl3v.

Allows you to kernel debug the guest from WSL on the host which is neat.

[Anonymous🐾🐈‍⬛ @YourAnonRiots]

OPSEC Fail!

Iranian #APT35 hackers accidentally exposed 40 GB worth of sensitive data online, containing #hacking training videos that revealed they managed to hack a member of the U.S. Navy, and a Greek naval officer.

Read Details — https://t.co/RdGPpoCGyJ

#cybersecurity

[Hyperion Gray @HyperionGray]

Some Friday humor to help jump start the weekend!

[Sy Brand @TartanLlama]

Objection! A Language Lawyer Story

🔊 for my awful voice acting

[Forrest Orr @_ForrestOrr]

My new research and open source memory scanner tool Moneta dives deep into the topic of memory stealth and forensics when designing malware or fine tuning detection for it. Many should find this information valuable https://t.co/XmhwhUgwu9

[Jason Koebler @jason_koebler]

OK, we talked to another hacker. Were able to confirm how they got accounts: Twitter employee used internal tool to change email addresses associated with accounts. Twitter seems to have just confirmed this in tweets as well

https://t.co/2emeiH7gs1

[j00ru//vx @j00ru]

At last, the series begins: MMS Exploit Part 1: Introduction to the Samsung Qmage Codec and Remote Attack Surface. https://t.co/45iF53gVce

I'm excited to start sharing more about this work, starting with a deep dive into the internals and history of the codec.

[iFenix @dlymension]

tfp0 on iOS 13.6 - by @_simo36