Geri Revay

Ex-ethical hacker and malware analyst, currently a principal security researcher. I spent the last 15 years learning how hackers work.

[Geri Revay @geri_revay]

Hey @noahkagan , I am reading your book. I am building cyber security services for creators. Would you invest $1 in me? If so https://t.co/eF69xd0raf

#thedollarchallenge

[Geri Revay @geri_revay]

@joernchen Wow, that is some solution to the filtering problem. I am sure they are not vulnerable anymore.

[Geri Revay @geri_revay]

@digitalbond @aginter Finding the right balance between IT and OT security is, of course, difficult, but both should be developed at the same time.

What do you think?
(5/5)

[Geri Revay @geri_revay]

I listened to @digitalbond 's podcast with @aginter (great episode BTW). Dale asked a question along the lines: "If ransomware in IT can cripple the OT operation, shouldn't we rather invest in IT security than OT security?"

This made me think. This is my two cents. (1/5)

[Geri Revay @geri_revay]

@digitalbond @aginter And thus, I think the security budget should be divided between IT and OT. There should be security layers in OT, such as network segmentation, network anomaly detection, patch management, asset inventory, log monitoring with SIEM, etc.
(4/5)

[Geri Revay @geri_revay]

MS Teams is like a partner with low self-esteem. "Do you really want to stay with me? We can go back to just being friends."

[Geri Revay @geri_revay]

- The MicroSCADA installation had already reached its end-of-life. Newer versions provide better security features and defaults.

It is worth evaluating your environment to see whether these techniques could be used successfully there.

[Geri Revay @geri_revay]

= New Technique Used to Target Electric Substation in Ukraine =

OT operators should analyze every OT attack deeply to understand how they can use the new information to increase their defenses.

There is a lot to learn from it. 🧵👇

[Geri Revay @geri_revay]

- OT living-off-the-land: a legitimate program called scilc.exe from MicroSCADA was used to execute a program to send commands to the circuit breakers.

- A newer version of CADDYWIPER was deployed using Group Policy to wipe the IT environment.

[Geri Revay @geri_revay]

3 Alternative Ideas to Do Instead of OT Pentesting

#OT #ICS #ICSsecurity #pentesting

[Geri Revay @geri_revay]

@hakluke ls

[Geri Revay @geri_revay]

@yarden_shafir thas's something :D

[Geri Revay @geri_revay]

3 Lessons I Learned About Cyber Security through Ethical Hacking

[Geri Revay @geri_revay]

What Do Coke Zero And Hacking Have in Common?

#cocacola @cocacola #hacking #pentest #cybersecurity

[Geri Revay @geri_revay]

This is like 'sudo make me a sandwich'.

[JS0N Haddix @Jhaddix]

cc @rez0__