Gavin Millard

Security specialist, public speaker, consumer of all things #hacking related. VP of PM @TenableSecurity #infosec #Nessus

[Gavin Millard @gmillard]

@xeode @TenableSecurity As a Brit, I fully support this. I’ll discuss with engineering tomorrow and get a level of effort estimate to add proper date format as an option.

[Gavin Millard @gmillard]

What the hell Tel Aviv, I thought I was going to get some cheeky winter sun. Chucking it down outside but having fun meeting up with the Israeli team at #cybertechtlv

[Gavin Millard @gmillard]

Malware on Google Play store found to enable proxy on target device to route malicious traffic. Apparently 2M downloads of affected apps although one should assume some of those are to boost ratings rather than potential victims #infosec https://t.co/dmC4Fubgk8

[Gavin Millard @gmillard]

So if you want to hear the latest stuff from my perspective, hit me up on Mastodon. By the looks of it, a lot of #infosec folks have already made the move over.

[Gavin Millard @gmillard]

I’ve obviously been super quiet on Twitter for a while now. During the IPO I had to keep my head down to not cause any issues and just got out of the habit of posting. I’m starting up again but on Mastodon https://t.co/pS1lUzWGhu

[Gavin Millard @gmillard]

Which is a pity, as at my most twittery times, I met a lot of cool people and had awesome conversations.

[Gavin Millard @gmillard]

I’ll probably cross post for a while but then shut this account down as it appears to have gone a tad downhill since I was last here.

[Gavin Millard @gmillard]

#nessus detections for #Spring4Shell have been released, including a back door detection to detect the tomcatwar.jsp shell file https://t.co/ulWKrjIang #infosec

[Gavin Millard @gmillard]

Looks like there are a couple of #apple bugs worth the 5 minute inconvenience of updating your devices. #infosec https://t.co/OHMenWrhvd

[Gavin Millard @gmillard]

@jack_daniel Thanks for everything over the years @jack_daniel. Was always a pleasure catching up over a cocktail or two. Best of luck for the future mate.

[Gavin Millard @gmillard]

Log4Shell used as the initial infection vector in 31% of malware cases monitored by Laceworks #infosec https://t.co/KBmOMM9ohb

[Gavin Millard @gmillard]

On the advice of @CISAgov, you shouldn't be exposing UPS devices to the internet #infosec https://t.co/IxQGbV19oM

[Gavin Millard @gmillard]

At a Greggs for lunch:

"Could I have a sausage roll, coffee and whatever that new ESET thing is on the menu please" #infosec

[Gavin Millard @gmillard]

Previously compromised Exchange servers being leveraged in IcedID phishing campaigns https://t.co/Cpafj3dTZv #infosec

[Gavin Millard @gmillard]

Worth scanning your external attack surface with this plugin to get an accurate inventory of Sonicwall devices exposing the web interface to the world https://t.co/aQjlDw4NSl

[Gavin Millard @gmillard]

The recently patched RCE in Sophos Firewall (CVE-2022-1040) is now apparently being actively targeted. Finding and addressing would be wise #infosec https://t.co/lUk1VQBXSU

[Gavin Millard @gmillard]

Alternate headline “Eric Schmidt try’s to curry favour with A.I. For $125 million” https://t.co/SCf4ljR2RO

[Gavin Millard @gmillard]

Am I missing something? Apparently AI “caught” the use of a 6 month old gitlab vulnerability for crypto mining and it’s worthy of a press release. Lol. https://t.co/POxzkPmfj5 #infosec

[Gavin Millard @gmillard]

We’ll be releasing detections for 2.17.0 #log4jRCE. Looks like it’s FAR less of an issue than #log4shell. Will be updating blog and community posts shortly. #infosec