Max

Problem Solver, Usually in Cybersecurity

[Max @maxinfo]

@NVIDIAGeForce GeForce Season - need S tier upgrade!

[Max @maxinfo]

@NVIDIAGeForce @PlayOverwatch #BeyondFast 🚀

[Max @maxinfo]

@IanColdwater 👋

[Shir @shirtamari]

Vulnerability full disclosure - New Oracle cloud vulnerability allowed users to access the virtual disks of other Oracle customers >>

[Max @maxinfo]

@NVIDIAGeForce Matrox Mystique with the 6MB upgrade so I had 8MB of video memory #RTXON

[Aseem Shrey @AseemShrey]

Top 7 #Shodan Dorks :

A thread 🧵👇

[Aura @SecurityAura]

Stories from the tranches (our SOC, an MSSP):

SOC to client: Through EDR telemetry, we found out that you have a Word file named "passwords.docx" on a public network share. We recommend moving the passwords to a secure password manager.

Client: Thanks, we renamed the file.

[Carla Notarobot 🤖👩🏻‍💻 @CarlaNotarobot]

The existence of Google Earth, Apple Air, and Amazon Fire implies there must be a Microsoft Water.

[David🏴󠁧󠁢󠁳󠁣󠁴󠁿🕊️ @TIA568B]

Why didn't I know about https://t.co/Yu9jLA3wDm !?

I need to dedicate a monitor to this.

[Mark Carter @markcartertm]

🤔 10 real-world stories of how we’ve compromised CI/CD pipelines https://t.co/27EHBPqsSt #infosec

[Scott Piper @0xdabbad00]

😱😱😱 This is worse than ChaosDB for AWS. @orcasec gained access to all AWS resources in all AWS accounts! They accessed the AWS internal CloudFormation service.
https://t.co/2oCCRvo389
Separately, they did something similar for Glue.
https://t.co/BDFMLQI06B

[Marques Brownlee @MKBHD]

Alright, I'll be giving away this $10,000 Gucci XBox to a follower who retweets this in the next 24 hours. I'll ship it anywhere on earth. Good luck.

Here's what's inside: https://t.co/Mung64czZs

[BleepingComputer @BleepinComputer]

A former Ubiquiti employee was arrested and charged today with stealing confidential files from the company's AWS and GitHub infrastructure and attempting to extort his employer while posing as an anonymous hacker and a whistleblower - @serghei
https://t.co/tiDvqi1ltv

[Ashley - Serious Security Scientist @Infosec_Taylor]

I want to do this on those credential stealing phishing pages.

[Max @maxinfo]

@MerrittBaer If you're willing to spend, my last was an espresso machine. Helps to know the audience a bit on that one. https://t.co/6UPwow11mM

[Emma Bostian @EmmaBostian]

Okay wow what a response haha. Until I can write it here’s a link to one I wrote when I published the first iteration of my E-book!

https://t.co/UBH2uP9vKA

[XanderK @x_a_n_d_e_r_k]

So, apparently DefCon 29 has had it's registration data hacked. (The vuln was addressed quickly).

https://t.co/zyrbUIXSbc

[Max @maxinfo]

@SwiftOnSecurity 👀https://t.co/Qd3UVrxbE8

[gabsmashh @gabsmashh]

what