Michelangelo Sidagni

I am the founder and CTO at NopSec Inc., a NYC-based vulnerability management SaaS solution provider. The opinions I express on this feed are my own.

[Dirk-jan @_dirkjan]

The CVSS score for the CVE has been adjusted to a 10.0 it appears 👀
https://t.co/dp0n9PLA5m

[Florian Roth ⚡️ @cyb3rops]

I wrote a YARA rule designed to identify emails attempting to exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that permits the unauthorized acquisition of NTLM credentials

#100daysofYARA #YARA
https://t.co/RhIcyltkKV

[Alex @xaitax]

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

https://t.co/sJPbySQBa3

Happy weekend.

[Michelangelo Sidagni @morpheuslaw]

Phishing attacks to steal crypto keys on the raise. https://t.co/k4xtYuMLaE

[Michelangelo Sidagni @morpheuslaw]

Top 25 Most Dangerous CWEs from MITRE! https://t.co/Nz55EDFumt

[Michelangelo Sidagni @morpheuslaw]

Help is on the way… https://t.co/31WGdrQCUw

[Michelangelo Sidagni @morpheuslaw]

Some clarity on smart contract with the help of OpenAI. https://t.co/1nt3b4h1J5

[Michelangelo Sidagni @morpheuslaw]

Top trending CVE for May 2023 https://t.co/pwE7mMnW69

[Michelangelo Sidagni @morpheuslaw]

Hacker steals TORN tokens snd then converts the loot into ETH. https://t.co/Cn8wcBxRaG

[Michelangelo Sidagni @morpheuslaw]

New UVRM vulnerability query builder and report generator as a precursor functionality to the more comprehensive UVRM update version 6.0. As simple or sophisticated as you would like it to be! https://t.co/rBBfXZBHJ0

[Michelangelo Sidagni @morpheuslaw]

@nopsec is in this year's Forrester VRM Landscape Report. Read it if you can get it!! https://t.co/BKrRLutcGI

[Michelangelo Sidagni @morpheuslaw]

Usar privilege escalation on Telegram App but it seems a MacOS permission issue. https://t.co/B2uqboB2hU

[Michelangelo Sidagni @morpheuslaw]

Cyber attack as a financing campaign for North Korea missile program. https://t.co/EXhUeunu3m

[Michelangelo Sidagni @morpheuslaw]

Future of vulnerability management with @jloomis_IT CISO at Freshworks https://t.co/gaWOh9Bdaj

[Michelangelo Sidagni @morpheuslaw]

More social media phishing in crypto exchanges. https://t.co/v6ffVQAofw

[Michelangelo Sidagni @morpheuslaw]

Bitrue hit by a $23M hot wallet exploit hack. Read my crypto security threat modeling blog: https://t.co/QP6i5UocXQ https://t.co/8ih13Qg91h

[Michelangelo Sidagni @morpheuslaw]

GDAC exchange hacked. Read my crypto threat modeling blog: https://t.co/QP6i5UocXQ https://t.co/hhBIx2DQqy

[Michelangelo Sidagni @morpheuslaw]

$$ lost in crypto hacks - read my crypto three modeling blog to understand root causes - https://t.co/QP6i5UocXQ https://t.co/sjJsSbEagF

[Michelangelo Sidagni @morpheuslaw]

3CX communication app back door seems to be attributed to the hands of North Korean hackers and only installs to a selected number of cryptocurrency firms. If you would like to understand more about cryptocurrency threat modeling a…https://t.co/WaU02UbYDV https://t.co/22flk4zY2x

[Michelangelo Sidagni @morpheuslaw]

If you do not understand crypto security attacks, shed some light to them applying the STRIDE threat model. #security #crypto #attacksurface https://t.co/sR9objfdc4