Florindo Gallicchio

I used to steal it, now I protect it.

[NetSPI @NetSPI]

Introducing PowerHuntShares 2.0 Release!

NetSPI VP of Research @_nullbind introduces new insights, charts, graphs, & LLM capabilities that can be used to map the relationships & risks being exposed through the network shares: https://t.co/t04BNLmuot

[NetSPI @NetSPI]

Filling up the DagBag: Privilege Escalation in Google Cloud Composer

Read our latest blog post to learn how attackers can escalate privileges in Cloud Composer by targeting Cloud Storage & the risks of default configurations: https://t.co/N8HmTPJ1N8

[Florindo Gallicchio @SecureFlorindo]

@USN_Submariner Hoooo boy. 1992 or thereabouts, my team and I rode Topeka on a special operations mission. The captain made that trip way more... interesting than it needed to be. Still the hairiest situation I've ever been in.

[Tib3rius @0xTib3rius]

Friendly reminder I have created what I (non-humbly) consider the greatest SQL injection cheatsheet of all time:

https://t.co/KDpvOnoM2L

Unlike others, it contains payloads for 5 main database variants, and doesn't use weird quote chars (IYKYK 👀).

[Florindo Gallicchio @SecureFlorindo]

@USN_Submariner 100%. Especially when you have no idea how long the mission will be.

[Florindo Gallicchio @SecureFlorindo]

@USN_Submariner Underway? Keep shooting.

[Karl @kfosaaen]

We've been casually talking about backdooring modules/packages in Azure Automation Accounts for a while, but I didn't have anything written out.
I wrote up a quick primer on the process, along with a tool to help with detecting custom/malicious packages - https://t.co/cHDqZm1i5w

[Florindo Gallicchio @SecureFlorindo]

@0x09AL @NetSPI Welcome aboard!!

[Florindo Gallicchio @SecureFlorindo]

@whitesox Welp. This diehard Yankees fan is now following the Chicago @whitesox.

[Scott Sutherland @_nullbind]

This is very useful, worth the read for red teamers. https://t.co/OVPjLpbB7Y

[NO CONTEXT HUMANS @HumansNoContext]

This is what happens when dads find the kid toys

[Florindo Gallicchio @SecureFlorindo]

@_EthicalChaos_ @PenTestPartners @NetSPI Welcome aboard!!

[Rachel Tobac @RachelTobac]

We now live in a world where AI deepfakes trick people daily.
Tonight we see @TaylorSwift calling out the use of an AI deepfake of her falsely endorsing a presidential candidate.
Let’s talk thru how to spot deepfakes in videos, audio (AI voice clones / calls), & social media…

[Karl @kfosaaen]

For anyone that missed my @cloudvillage_dc talk ("Identity Theft is Not a Joke, Azure!"), I recorded a slightly extended version to put up on the @NetSPI YouTube page - https://t.co/RbKBFDXzYk

[NetSPI @NetSPI]

New blog post 🚨 CVE-2024-37888 – CKEditor 4 Open Link Plugin XSS

NetSPI Security Consultant Anurag Mondal explains the nature & discovery of the vulnerability and its implications. Read the blog: https://t.co/yKtcOMXGlw

#CKEditor4 #proactivesecurity

[Florindo Gallicchio @SecureFlorindo]

@ThisOldHouse OH NO! :(

[Florindo Gallicchio @SecureFlorindo]

@ChowdahHill I remember waaay back ('90s) when we used "purple bug juice" (Crystal Light, straight from the drink machine) to clean the heads. We've come a long way!

[Florindo Gallicchio @SecureFlorindo]

@jimfeldman @wcbs880 * 30 years of me listening!

[Florindo Gallicchio @SecureFlorindo]

@jimfeldman @wcbs880 Hi @jimfeldman - Truly heartbreaking times. Nearly 30 years of excellence so abruptly coming to an end. Do you know if @wcbs880 will post all of these recordings somewhere? Would be great to listen to them all.

[Florindo Gallicchio @SecureFlorindo]

@Shaunpcassidy Bring back American Gothic, @Shaunpcassidy !!