Erye Hernandez

Security Researcher, @inicmu alum, gamer, snowboarder, weekend baker, PPP member

[Erye Hernandez @eryeh]

Found an 0day privesc for macOS Catalina exploited in the wild! If you're still on Catalina, please patch or upgrade.

https://t.co/AKTFfbrU1v

[Google VRP (Google Bug Hunters) @GoogleVRP]

https://t.co/5Le6ayJgoE

[tylerni7 @tylerni7]

Will post more later but: please check out @theori_io's landing page for AIxCC! We've got source code, agent traces, and blog posts to understand the system we built!
https://t.co/7IXCuj37EP

[PlaidCTF @PlaidCTF]

MMM takes 1st at @defcon CTF! Had a great time playing with our friends @maplebaconctf and @theori_io as @mmm_ctf_team! 🍁🦆🗝

Great job to Katzebin, StarBugs, and all the other teams! And thanks to @Nautilus_CTF for organizing!

[Maple Mallard Magistrates @mmm_ctf_team]

@PlaidCTF, @theori_io (The Duck), and @maplebaconctf are joining forces to play DEFCON as Maple Mallard Magistrates. Some PPP members also play on The Duck & Maple Bacon, so this allows all of us to keep playing on the same team. See you all at DEFCON finals!

[PlaidCTF @PlaidCTF]

PlaidCTF is proud to announce visionary innovation and the actualization of experience in the hacking space. We’re moving beyond the ordinary to usher in a new paradigm of pwning. Welcome to the future. Welcome to Plaidiverse.

Join us on April 8 at https://t.co/AZhLDcNKGo!

[Wicked6Games @Wicked6Games]

Session 1 speakers are set for today's Wicked6games, don't miss your chance to register: https://t.co/2eHRtMQPZg

@Q8Thunders|@marigalloway|@JulieASparks|@eryeh|@AsuNa_jp

[David Brumley @thedavidbrumley]

😀 I am starting a fundraise for @picoctf. PicoCTF is free to everyone, and costs about $500k a year (🙀) to run. If you've had a positive experience with pico, please reply or DM. I'll use it in my fundraise pitch.
Pls RT for awareness. #ctf #hacking

[Marc-Etienne M.Léveillé @marc_etienne_]

The exploit for Safari is quite complex and massive. I really wanted to understand exactly what the vulnerability was and how it was mitigated, so I dived into the world of browser exploits for a few days and tried to explain how leaking object addresses was possible.

[ESET Research @ESETresearch]

#ESETresearch uncovers new Mac malware DazzleSpy, delivered using watering hole on a pro-democracy Hong Kong radio station website. Payload was launched as root without user interaction, using exploits for Safari and macOS. @marc_etienne_ @cherepanov74 https://t.co/oihDVHaCa3 1/7

[Objective-See Foundation @objective_see]

Google uncovered a sophisticated attack that leveraged both iOS & macOS exploits (n-/0-days) to infect Apple users! 👀

Interested in a triage of the macOS implant (named OSX.CDDS), including:
▫️ Installation
▫️ Persistence
▫️ Capabilities

📝 Have a read:
https://t.co/VHBGcAk3GW

[Lorenzo Franceschi-Bicchierai @lorenzofb]

New: In August Google caught hackers using an old Mac exploit together with a zero-day that was published by a research group at a Chinese cybersecurity conference in April.

The hackers were targeting Hong Kong users.

https://t.co/DJOq3ppvRS

[Shane Huntley @ShaneHuntley]

More technical details from @eryeh and the team on last months exploit and the associated campaign.

https://t.co/XLrQed3E6T

TAG discovered watering hole attacks targeting visitors to Hong Kong websites for a media outlet and a prominent pro-democracy labor and political group.

[Erye Hernandez @eryeh]

Glad to be able to share some additional details on the campaign leveraging the macOS privesc (CVE-2021-30869) to install a new macOS backdoor

https://t.co/2CcTLDenid

[Shane Huntley @ShaneHuntley]

0day privilege escalation for macOS Catalina discovered in the wild by @eryeh

https://t.co/yvCWPo45fL

We saw this used in conjunction with a N-day remote code execution targeting webkit.

Thanks to Apple for getting patch out so quickly.

[Erye Hernandez @eryeh]

Congrats A*0*E!!

[A*0*E @teama0e]

Congratulations to @teama0e all members!🏆We are the champion! Glad to join such a charming event held by @oooverflow with everyone!👍

[Overflow @oooverflow]

After an EPIC battle for @defcon CTF, with MULTIPLE lead changes throughout 32 hours of competition,

A*0*E REMAINS VICTORIOUS  👑

PPP takes second place, behind by two points

[nedwill @NedWilliamson]

Learn how found and exploited SockPuppet for iOS 12.4, featuring a bonus collaboration with LiveOverflow! https://t.co/5sE7GKwSbb https://t.co/Rl2WaVBlO4

[Shane Huntley @ShaneHuntley]

We disabled 210 channels on YouTube when we discovered channels in this network behaved in a coordinated manner while uploading videos related to the ongoing protests in Hong Kong. https://t.co/gpcfcXvu3c