@[email protected]

Founded in April 2011

[@[email protected] @mod0]

Find us on #Mastodon @[email protected]

[@[email protected] @mod0]

Tutorial: Our colleague Theresa designed a tutorial guiding through an OpenVPN exploit scenario — for you to try at home! https://t.co/Z9Lu952VhH

[@[email protected] @mod0]

We would really like to get one of those new footballs that are currently being used in the stadiums during the European Championship matches. Just curious. 😁 DMs are open! #uefa #football #soccer #EM2024 #ballleak <3

[Gareth Heyes \u2028 @garethheyes]

Lovely to see the Email RFCs abused to embed a command injection payload in the local-part of the address! Nice work Michael Imfeld & @parzel2
https://t.co/W62GHIVjd0

[@[email protected] @mod0]

Shells at midnight: Exploiting the flexibility of Email addresses for offensive purposes.

Today we are publishing a new blog post about our disclosure report on #MailCleaner #CVE-2024-3191: https://t.co/XGOqYaGJbo

@[email protected] will also present at @a41con today.

[@[email protected] @mod0]

We identified critical vulnerabilities in MailCleaner. A command injection vulnerability can be exploited by sending an Email. Our report can be found here: https://t.co/UbjGuZEvCW

Kudos to https://t.co/2sZjAckbdt and https://t.co/ap3QfuqatP #MailCleaner #CVE-2024-3191 #Infosec

[@[email protected] @mod0]

Unfortunately this is necessary:

8532a9e0e49991ffdc3bfe7b728513e254e288a86275c6473e3b42228641e5fa MZ-24-01_8641e5fa.pdf

(and please find us on mastodon as well: https://t.co/zoggUhAynt)

[@[email protected] @mod0]

#CVE-2023-4462 Exploits are now available on github:
https://t.co/2GCnw6i3U4

And please find us on https://t.co/zoggUhAynt

[parzel @parzel2]

Today we release the proof-of-concept exploits for the vulnerabilities we identified in HP #Poly VoIP devices. At the #37C3 we presented how these issues allow an attacker with network access to gain RCE and transform your devices into wiretaps.

https://t.co/iDKna43HUC

[@[email protected] @mod0]

How do you hack Internet-connected devices? Today, our colleagues @parzel2 and @[email protected] will present their research at the #37C3 on how to turn a Poly VoIP phone into a wiretap, giving beginners some starting points for own research projects. https://t.co/hp83SqwBqy

[BSides Berlin @SidesBer]

Joining us for a second year as sponsor is @mod0. Thanks for your continued support!

Register at https://t.co/ygNVnUlW7e for one of the last remaining in-person tickets.

#BSidesBerlin #appsec #infosec #BSides

[@[email protected] @mod0]

Find us on mastodon (and BSIDES Berlin 2023 😉) https://t.co/rcznFFFFF0

[@[email protected] @mod0]

Happy birthday to us! 🎉

12 years of hacking! Thank you to everyone who helped get this far! 😍

https://t.co/WRgSYBDTyv

[@[email protected] @mod0]

Better make sure your password manager is secure -- or someone else will. We found critical security issues in the enterprise password manager Passwordstate that allowed to access passwords and gain a shell -- without any authentication #CVE-2022-3875 https://t.co/CaMPH9W9sp

[BSides Berlin @SidesBer]

We are excited to welcome onboard @mod0 as our Gold Sponsors this year!

Register at https://t.co/ygNVnUmtWM for one of the last remaining in-person tickets.

#BSidesBerlin #appsec #infosec #BSides"

[@[email protected] @mod0]

We found a security issue in the latest @CrowdStrike #FalconSensor. The bug itself isn't worth a tweet as the severity is pretty low. However, we’d like to shed some light on a ridiculous vulnerability disclosure process with CrowdStrike. #CVE-2022-2841 https://t.co/HFtL0uBQ6v

[@[email protected] @mod0]

Meet our #infosec-veteran @rexploit at @a41con! He will provide some insights on our #MeetingOwl research during his talk on Friday and is happy to meet-up on the hallway-track.

[@[email protected] @mod0]

MITRE assigned CVE-2022-31463, CVE-2022-31462, CVE-2022-31461, CVE-2022-31460 and CVE-2022-31459 #MeetingOwl

[Ars Technica @arstechnica]

Meeting Owl videoconference device used by govs is a security disaster https://t.co/ZXO5FAYtWh by @dangoodin001

[Ars Technica @arstechnica]

Meeting Owl videoconference device used by govs is a security disaster https://t.co/ZXO5FAYtWh by @dangoodin001

[Max Moser @rexploit]

Well as some questions start coming up regarding the #MeetingOwl insecurities. Here are some short and clear infos. Details in our report. https://t.co/MsU3zJnHAu

[Golem.de @golem]

Meeting Owl Pro: Konferenzeule hat viele Sicherheitslücken #MeetingOwl #Sicherheitslücke https://t.co/H0hmSMenu6