Mike Gibson

InfoSec enthusiast, husband, father and Patriots fan!! SVP Customer Success, Services and Support @ Rapid7.

[Mike Gibson @mdgsecurity]

@cyb3rops I have struggled with choosing what is the right path here. I am just not sure that level of detail applies enough pressure to get it resolved. The pressure needs to come from their customers and they will apply more pressure if the risk of exploitation is higher.

[Mike Gibson @mdgsecurity]

@thezdi @SinSinology Here we go!! #pwn2own

[Mike Gibson @mdgsecurity]

The new @TrendMicro Vision One platform release marks a leap forward in enterprise #cybersecurity, encompassing robust attack surface risk management and next generation XDR - now amplified by powerful generative #AI technology.

Find out more here: https://t.co/pCoITYRAwu

[Mike Gibson @mdgsecurity]

@onepeloton Too late! If you released this 24 months ago I would still be a customer and have my bike and this. You are getting out innovated!!

[TrendAI Zero Day Initiative @thezdi]

The latest blog from the Trend Micro Research Team looks at CVE-2022-26937: a Microsoft Windows NFS NLM Portmap stack buffer overflow that could lead to RCE. They provide root cause, source code walkthrough, and detection guidance. https://t.co/FhKhIeoG35

[Black Hat @BlackHatEvents]

@Dustin_Childs & @thezdi & @MaliciousInput provide examples of systemic problems with security patches and how those problems negatively impact enterprise security, based on disclosing over 9,500 vulnerabilities across 17 years, in #BHUSA Briefing https://t.co/eZFFqyEXiV

[TrendAI Zero Day Initiative @thezdi]

Here's a quick demonstration of the #Microsoft Teams 0-click exploit demonstrated by @starlabs_sg during #Pwn2Own last week.

[Mike Gibson @mdgsecurity]

This was fun to watch live today. Congrats again to the @Synacktiv team.

[TrendAI Zero Day Initiative @thezdi]

The @Synacktiv team shows off their remote exploit of the #Tesla Model 3. Earlier today, this research earned them $75,000 during #Pwn2Own.

[Mike Gibson @mdgsecurity]

Amazing first day of the 15th anniversary of #Pwn2Own. Can’t wait to see what happens tomorrow. @TrendMicro @thezdi

[TrendAI Zero Day Initiative @thezdi]

Day One of #Pwn2Own Vancouver 2022 comes to a close with record breaking numbers. $800,000 awarded for 16 0-days - our biggest 1 day total in contest history! No bug collisions. No failed attempts. No kidding. https://t.co/8CQPLUTMJA

[Mike Gibson @mdgsecurity]

Can’t wait to arrive in Vancouver and join the team for our 15th anniversary of Pwn2Own. Going to be a great week.

[TrendAI Zero Day Initiative @thezdi]

Setup begins for #Pwn2Own Vancouver. Our drawing for order of events will be tomorrow afternoon (5/17/22). Our 15th anniversary is shaping up to be our best ever. #P2O

[TrendAI Zero Day Initiative @thezdi]

Since #Ubuntu has a new release, we will be using version 22.04 at #Pwn2Own Vancouver instead of 21.10. We've updated the rules to reflect this change. Hope to see you there. https://t.co/Z6wHN77aXt

[Cortex by Palo Alto Networks @cortexbypanw]

We’re excited to announce that @TrendMicro has joined the Cortex XSOAR Marketplace! Learn more about Vision One here! https://t.co/IrSnXprXWq

#securityautomation #xsoar #marketplace #VisionOne

[TrendAI @trendaisecurity]

We have joined the Cortex XSOAR Marketplace! Trend Micro Vision One and Cortex will work seamlessly to simplify incident investigations and drive automated response. Learn more about Vision One here: https://t.co/YCrCDRi1ro

[Mike Gibson @mdgsecurity]

@itsrichiemane And super excited they announced a Season 2 already!! Great books, great show.

[Mike Gibson @mdgsecurity]

Zero Day Initiative — Looking Back at the Zero Day Initiative in 2021 https://t.co/yStLOoXVTn

Very proud of the team's accomplishments in 2021. Almost $4M awarded to the research community in total. Congratulations @trendmicro @thezdi!!

[Mike Gibson @mdgsecurity]

Some may say I have a fascination with tech gadgets. I typically argue, but after applying a firmware update to a softball just now, I think they may be right.

[Mike Gibson @mdgsecurity]

@Chris_Grosse

[Mike Gibson @mdgsecurity]

@NBohusch @GossiTheDog Good feedback. Certainly wasn't intentional. We were getting mostly mitigation questions when we initially authored the article. We added a link at the top to jump to our own product information to make it easier to find. Thanks!!

[Mike Gibson @mdgsecurity]

@cyb3rops once again accurately describes the current situation! Suggest everyone reads this.

[Florian Roth ⚡️ @cyb3rops]

1/ #Log4Shell Status determination

# Block Rules / Log-Based Detection
There's no effective or rather gapless way to detect attacks that use log4shell due to the many ways to obfuscate the strings.
Don't put too much trust in any filter/detection pattern. All can be bypassed.
..