This week we launched our Offensive Security Accelerator - a fast track training programme for those looking to start their cyber security careers... if you're in the UK and a graduate or looking to pivot in to offensive security, here's how... https://t.co/CZ2463KqW3
The attack also works on physical machines- use a usb to com cable- get one that dont require its driver to download.
It works all the way back to windows xp.
I have no azure account-but I think that the emm driver is auto loaded even in not RE there.
You can then without logging in still dump any process to none encrypted drive.
ps. booting in safe mode dont trigger tpmlock but downgrade lsaiso to just ppl.
pps. without login can also kill ppl process like defender.
3 times it stop starting again.
🔥 Just dropped a NEW PowerShell reverse shell in the PSSW100AVB repository!
✅ 100% AV bypass (June 2026)
✅ Ready for red team operations
👇Act fast — 2-5 days before this gets flagged too.
https://t.co/7DKdNSvBRv
#Powershell#RedTeam#AVBypass#ReverseShell
This guy sucks. At my first Pwn2Own he asked me over and over if it was my first CVE. I said no but he kept insisting, in front of everyone, he’d never seen my name credited before. Turns out he was confusing me with another woman in infosec. In charge of security research engagement for MSRC btw
I am adding a comic book for each attack I write about... from the victims point of view to go along with the covers I have for each paper. If you want to stop using Github for your novel offensive research, come to MG as an author and I will help you do the same. 😈🤣
❗️🚨 BREAKING: Security researchers are now handing Nightmare-Eclipse vulnerabilities for free, in what looks like both a show of support and a reaction to how Microsoft treats researchers. First up: "Bitskrieg," violates Secure Boot trust and fully bypasses BitLocker.
It seems aimed squarely at Microsoft's recent blog, where the company said its Digital Crimes Unit would bring cases against threat actors "and those that enable their criminal activity," language many researchers read as a threat pointed at them.
ok, so this talk from @aaronportnoy from @ekoparty is absolutely phenomenal... my neck hurts from nodding
my tldr takeaway: defenders need to start listening *really carefully* to actual, economically rational attackers
the cadence of the OODA loop that we've grown used to over the years is now *way* too tight
https://t.co/KKzjifhQkS