Travis Smith

ML Threat Ops @HiddenLayerSec, Beer Geek, Family Man. Mastadon: @[email protected]

[CVE Announcements @CVEannounce]

HiddenLayer is now a CVE Numbering Authority (CNA) assigning CVE IDs all @hiddenlayersec systems, services, & products + vulnerabilities it discovers not in another CNA’s scope

https://t.co/dtCisnu2lD

#CVE #CNA #VulnerabilityManagement #Vulnerability #Cybersecurity @CVEnew

[Travis Smith @MrTrav]

A second vulnerability in MOVEit Transfer is announced, no evidence of exploitation yet, but orgs should patch quickly to reduce the risk. Remediation is as easy as replacing 3 DLLs or installing the latest version. https://t.co/YESqcAMF4T

[Travis Smith @MrTrav]

The MOVEit Transfer CVE is one of the more risky vulns in recent memory due to the quickness of threat actors to leverage it and extort their victims. We put together a few insights and how organizations can respond accordingly to this developing threat: https://t.co/WyXaI2o8UH

[Travis Smith @MrTrav]

Really excited to share the 2023 @Qualys TruRisk Threat Research Report. Tremendous work by the Threat Research Unit to put together our view of the threat landscape. https://t.co/uAR0QILzBs

[Travis Smith @MrTrav]

Lots of valuable information in here to understand the true risk of this developing vulnerability

[Qualys @qualys]

#Qualys Threat Protection - Microsoft Exchange Server Zero-day Vulnerabilities (CVE-2022-41040 and CVE-2022-41082)

https://t.co/9PA7lGpAH4
#vulnerability

[Travis Smith @MrTrav]

Great discovery from the Qualys Vulnerability Research Team. More details are available in our blog going over the vulnerability, how to find out if you are impacted, and how to detect exploitation. #PwnKit

[Qualys @qualys]

The #Qualys Research Team has discovered an easily exploitable memory corruption vulnerability (#Pwnkit) in polkit a SUID-root program that allows any unprivileged local user to gain root privileges on all major linux systems in its default configuration: https://t.co/hz74iWU7mz

[Travis Smith @MrTrav]

Excellent analysis of the REvil ransomware from the @qualys Malware Threat Research Team.

[Qualys @qualys]

How the REvil #ransomware supply chain attack works and mitigation steps you can take to lower your risk https://t.co/L7k83iTZig

[Travis Smith @MrTrav]

@theparanoidnerd @meansec @Zeekurity @Hectaman @BsidesDC Thanks for the kind words, I’m happy I could help.

[Travis Smith @MrTrav]

@theparanoidnerd @meansec @Zeekurity @Hectaman @BsidesDC Aw man, those were the days, I miss SweetSecurity, Critical Stack, and Zeek.

[Travis Smith @MrTrav]

@marcellodesousa @drucem Not likely, ELK stack doesn’t play well on the Pi anymore.

[Travis Smith @MrTrav]

Well, I guess it's time to re-assess how Sweet Security works on the upgraded hardware I've been wishing for.

[Raspberry Pi @Raspberry_Pi]

Raspberry Pi 4 is here! A tiny, dual-display desktop computer, with three RAM variants to choose from, and all the hackability you know and love. On sale now from the familiar price of $35: https://t.co/d9iwVidexm #RaspberryPi4

[Travis Smith @MrTrav]

@kwestin I started this back in March and forgot about it. Going to have to pick it back up.

[Travis Smith @MrTrav]

@kwestin

[Travis Smith @MrTrav]

@bbaskin @hacks4pancakes I had someone once use my email for their child’s school registration. The kicker was when I got an email saying their child was sick and to email them the name of who will come pick them up.

[Travis Smith @MrTrav]

@kwestin 60% of the time it works every time.

[Travis Smith @MrTrav]

Joke’s on you hackers, 15% of my password isn’t even one character.

[Travis Smith @MrTrav]

@Kurt_theTurk @AttackIQ Yes, that would be great. Sounds like an interesting course.

[Travis Smith @MrTrav]

Today marks my last day @TripwireInc . It's been an exciting 6.5 years building out the security content and research capabilities. While I am sad to leave behind lifelong friends, I am excited for the next chapter.

[Travis Smith @MrTrav]

@kwestin Not true, I’m still interested in whiskey.

[Travis Smith @MrTrav]

I updated @MITREattack TEACH to now map to v7.0, which now includes sub-techniques. https://t.co/D7Kb9o8e3H

[ATT&CK @MITREattack]

The ATT&CK Evaluations Team just released the APT29 Evaluation results, DIY Eval profile, and a Joystick update on https://t.co/39fEmIMIUG. Check out https://t.co/Mr2Lyo0S1O to learn more about the evaluation process.