Grambulf

[Grambulf @grambulf]

@feffi1 Is that yours? 😄

[zhiniang peng @edwardzpeng]

#VisualStudio 1-click RCE, No Smartscreen warning, No trust need, No futher interaction need. Just download from internet, 1-click then pwn. But it will not be fixed, because Microsoft consider it's not a vulnerability😅

[Grambulf @grambulf]

@NightmareJS @cloudvillage_dc Nice!
I would love to be there

[FerrousSystems @FerrousSystems]

Today, we're announcing the immediate availability of the Ferrocene release candidate! We're also inviting you to our birthday party on October 4th, where we will meet online with guests, have fun conversations and unveil the Ferrocene product fully.

https://t.co/R68ct80sua

[RedTeam Pentesting @RedTeamPT]

🚨 New Advisory: RWS WorldServer 🚨
https://t.co/giDUO6mWxe

The vulnerability allows to feasibly enumerate session tokens. While it was fixed by the vendor prior reporting, no concrete information is publicly available that this critical issue was fixed in v11.8.0.

#infosec

[Grambulf @grambulf]

@RedTeamPT "A significant number of security enhancements have been included in this release" 🤡

Awesome work (again)

[Grambulf @grambulf]

@shakalandy Did you also saw this approach by Truffle Security?
https://t.co/qbeGe0lmeB

[Truffle Security @trufflesec]

Introducing Forager! Check to see if anyone using your company's email domain posted LIVE SECRETS to GitHub and NPM: https://t.co/IQf3bbYF0S

[Truffle Security @trufflesec]

Introducing Forager! Check to see if anyone using your company's email domain posted LIVE SECRETS to GitHub and NPM: https://t.co/IQf3bbYF0S

[Scott Piper @0xdabbad00]

I wonder if we'll get more outages this summer due to record heat like this one from almost a year ago.

[Shodan @shodanhq]

The $5 Membership sale is now live! The sale lasts until July 17 23:59 UTC: https://t.co/0iqiq2vTpn

[Dylan @InsecureNature]

Okay, so why are we releasing a free tool to see which companies are exposing secrets?

A little while ago we started doing disclosure emails for every key leaked out, but we were shocked to with what we saw

Short 🧵

[Go @golang]

🎉 Go 1.20.6 and 1.19.11 are released!

🔐 Security: Includes security fixes for CVE-2023-29406 and Go issue https://t.co/TvnTCb3lMm

📢 Announcement: https://t.co/6ahFqq7ifS

📦 Download: https://t.co/OmPG7Q663K

#golang

[Go @golang]

"Govulncheck v1.0.0 is released!" by @JQiu25 — https://t.co/QnAKccz3cV

#golang

[Marc Backes @marcba]

As an introvert at a tech conference

[Keycloak @keycloak]

Keycloak 22 is out https://t.co/6pIf1vULQJ

[BSides Zurich @BSidesZurich]

📢📢📢 Accepted Talks and Speakers' Bios published 📢📢📢
Thanks to all who applied to our #CfP and to our reviewers, the list of accepted talks is now on our website. Detailed agenda will follow
https://t.co/X9lvNUOu1c

REMEMBER: Tickets sale starts tomorrow 3pm Zurich time 🥳

[Malcolm @malkoegler]

@N4hualH @CyberSleuth1 @solminingpunk @BruteBee There might already be active exploitation on this. Check for files newer than the installation date in /netscaler/ns_gui/ /var/vpn/ /var/netscaler/logon/ /var/python/

[joernchen @joernchen]

"Sollte es jedoch Zero-Day-Exploits bei Messengerdiensten geben, müsse das BSI diese konsequenterweise verschweigen, wenn "andere Stellen" diese offenhalten wollten."

https://t.co/QUYzKazpOx

[S3cur3Th1sSh1t @ShitSecure]

After holding the talks at @x33fcon
and @WEareTROOPERS
done, I also finally managed to write down my latest research about userland hook evasion:

https://t.co/h8EvPIz89z

[Dr. Anton Chuvakin @anton_chuvakin]

"Log Centralization: The End Is Nigh?" https://t.co/jPu5VWqLrS <- a VERY incomplete thought blog that talks about centralized vs decentralized/federated/distributed approaches for dealing with logs, at scale.