pei

[pei @pyu1994]

I am not @S0rryMybad #Pwnies

[mj0011 @mj0011sec]

Well, too lazy to pop a calc :)

[pei @pyu1994]

Congrats

[360 Threat Intelligence Center @360CoreSec]

Among the Top 5 researchers of @Qualcomm Technologies' Vulnerability Rewards Program #bugbounty , two @chengjia4574 @jianqiangzhao are from 360 IceSword Lab. Congrats! @pjf40490912 Hard work pays off! https://t.co/1wbyHCPusx

[pjf @pjf40490912]

Congrats to @chengjia4574 and @jianqiangzhao from our lab 🙂

[pei @pyu1994]

Congrats

[360 Threat Intelligence Center @360CoreSec]

Zhenhao Hong @rthhh17 from 360 IceSword Lab was rewarded $200,000 by Microsoft #Hyper-V for his VM escape #vulnerability – one of the highest MSRC bounties ever @msftsecresponse We will release details after the patch. Congrats to @rthhh17 and @pjf40490912 (Weibo: @rt_hhh, @PJF_)

[pei @pyu1994]

#0day

[360 Threat Intelligence Center @360CoreSec]

New attacks were discovered against a Russian polyclinic, exploiting a Flash #0day vulnerability (CVE-2018-15982). The vul has been reported to Adobe and the patch was released already. #PoisonNeedles https://t.co/DnuzdAir61

[360 Threat Intelligence Center @360CoreSec]

New analysis report from our researchers available: All roads lead to Rome - Many ways to double spend your cryptocurrency (https://t.co/M2LWAMLoZS)

[360 Threat Intelligence Center @360CoreSec]

The Advanced Threat Response Team of 360 Core Security found a preciously patched #VBScript #vulnerability was likely a missed #0day. Researchers suspected it, together with other three, are all the cyber arsenals of #APT-C-06. Click to read more details: https://t.co/b5iWM89mkq

[360 Threat Intelligence Center @360CoreSec]

Poison Ivy Group (#APT -C-01) and the Cyber-espionage Campaign
Against Chinese Military and Government: https://t.co/nGUz8pcVMq

[360 Threat Intelligence Center @360CoreSec]

Recently, our researcher found that #vulnerabilities exist in the “proven fairness” game #dice2win (the 2nd largest #ETHEREUM betting game ), dealers can use them to manipulate game results. See more details: https://t.co/bYDlISPnPD

[360 Threat Intelligence Center @360CoreSec]

The Advanced Response Team of 360 Core Security disclosed an APT attack (APT-C-26) initiated through faked digital currency trading software Celas. It may steal users’ account via the embedded backdoor. The group is suspected to be associated with Lazarus. https://t.co/Hv1gJ3nhKJ

[360 Threat Intelligence Center @360CoreSec]

EOS Asset Multiplication Integer Overflow Vulnerability
https://t.co/q8OKQHoag6

[pei @pyu1994]

another one #EOS Vulnerability

[360 Threat Intelligence Center @360CoreSec]

On July 26, 360Vulcan discovered a high-risk vulnerability which might have caused over 60,000 tokens’ loss for an EOS online game. If you're using the asset multiplication in your mart contract, we recommend you recompiling your contract after the patch is released.

[pei @pyu1994]

360Vulcan🍻

[mj0011 @mj0011sec]

3 of Top5 are 360Vulcan Team members 😄

[pei @pyu1994]

👍

[Yuki Chen @guhe120]

After the ITW VBScriipt 0day CVE-2018-8174 caught by 360 Core Security department was patched, we found "new" (if not a patch bypass) exploitable 0days after analyzing the patch, read the story:
https://t.co/R9IP4lgBAd

[pei @pyu1994]

#wctf2018

[pei @pyu1994]

360Vulcan Team will hold 3rd WCTF with new online game on 6th July. https://t.co/iiNcp7YXB4 https://t.co/h1HhwHKytN

[True Crime w/ Justyn @TrueCrimeJustyn]

WCTF 2018: A Festival Welcomes All CTF Players around the World！ https://t.co/MNPceoczTx

[pei @pyu1994]

iOS remote jailbreak exploit https://t.co/lvpxv0rg24

[mj0011 @mj0011sec]

360Vulcan shown iOS remote jailbreak exploit for both iOS 11.4 and iOS 12 beta on #MOSEC2018 https://t.co/wgmq2dNMHM

[pei @pyu1994]

repost https://t.co/z3TQT56D5V

[360 Threat Intelligence Center @360CoreSec]

CVE-2018-5002 – Analysis of the Second Wave of Flash Zero-day Exploit in 2018... https://t.co/gwuLu68o68

[pei @pyu1994]

@cnLedger https://t.co/wh5AT2z7MV