Hadrian

Digital security insights from a hacker’s perspective

[Hadrian @hadriansecurity]

Our co-founder and Head of Hacking, Melvin Lammerts, commented for SC Media.

https://t.co/U7oUMGnTRp

#CyberSecurity #ExposureManagement #VulnerabilityManagement #Telecom

[Hadrian @hadriansecurity]

Cisco fixed CVE-2026-20320 in August. Three months later, attackers are exploiting the BroadWorks systems that never got the update, and CISA has added the flaw to its Known Exploited Vulnerabilities catalog.

[Hadrian @hadriansecurity]

No credentials are needed. A crafted XML message is enough to read sensitive configuration files from the server. The patch was never the problem; the time it takes to reach every internet-facing instance is.

[Hadrian @hadriansecurity]

His advice to operators: find every exposed controller, cut unnecessary remote access, and set hard temperature limits the equipment can't be pushed past.

You can't secure what you don't know is exposed.

https://t.co/4bHRTScF6O

[Hadrian @hadriansecurity]

Attackers didn't need malware to turn supermarket freezers into heaters. They just needed to find the controllers.

#OTSecurity #CriticalInfrastructure #AttackSurfaceManagement

[Hadrian @hadriansecurity]

The way in was simple: temperature controllers exposed to the internet, weak authentication and poor configurations. No zero-day required. Our Head of Hacking, Melvin Lammerts, shared his take with @SCMagazine.

[Intigriti @intigriti]

Manually auditing unfamiliar codebases for security vulnerabilities without a strong methodology can be tedious... 😓

OpenHack by @hadriansecurity is a lightweight, file-based workspace for source-guided whitebox security reviews, helping you systematically trace, annotate, and track vulnerabilities across large codebases! 🤠

Check it out! 👇
https://t.co/UoNgRON15r

[Hadrian @hadriansecurity]

👉 Visit our blog to get the complete: https://t.co/MIpwQPQvmL

[Hadrian @hadriansecurity]

🤔 Exim-tremely Critical? Do you need to worry about CVE-2024-39929?

[Hadrian @hadriansecurity]

🔍 A serious vulnerability (CVE-2024-39929) has been discovered in the Exim mail transfer agent, which could enable attackers to send harmful attachments straight to users' mailboxes. With a CVSS score of 9.1 out of 10, this flaw is notably dangerous.

[Hadrian @hadriansecurity]

Additionally, many more vulnerabilities pose an immediate risk to systems. Click the link to read the full list: https://t.co/Cm1jxQp07z

[Hadrian @hadriansecurity]

📈 July sets a record for the highest number of vulnerabilities reported in 2024!

[Hadrian @hadriansecurity]

🚨 Microsoft has updated its July Patch Tuesday, and among these is the zero-day vulnerability CVE-2024-38112, which enables attackers to spoof web content, deceiving users into interacting with malicious resources.

[Hadrian @hadriansecurity]

👉 Learn how to mitigate this vulnerability in our latest blog: https://t.co/ACmLr1wKlz

#CyberSecurity #Vulnerability #PatchNow

[Hadrian @hadriansecurity]

🚨 Critical Alert: OpenSSH Vulnerability CVE-2024-6387

[Hadrian @hadriansecurity]

💡 Although there's no proof of concept for this vulnerability and it's only been exploited in lab conditions, a public exploit could emerge soon. It's advised to patch this vulnerability promptly.

[Hadrian @hadriansecurity]

🎊 Celebrating one year of the National Anti-Scam Centre! Let's continue protecting ourselves from scams by staying informed and vigilant.

🔒 Stay safe and scam-free!

#CyberSecurity #AntiScam #DigitalSafety