WithSecure Labs
@FSecureLabs
Followers
19K
Following
60
Media
98
Statuses
967
With great research comes great responsibility.
Joined January 2010
RT @fwdcloudsec: We're happy to announce WithSecure is a Bronze sponsor for fwd:cloudsec! @WithSecure
https://t.co/….
0
2
0
Don't worry though, @realmatthours is also nice enough that he's tried to make it easier to spot and kick those pesky hackers out of your estate as well:.
4
7
10
What did the printer say when it saw @TimoHirvonen and @dark_k3y? Oh sheet! . Read how the @FSecureLabs Red Team is Printing off the land by printing their own shellz - CVE-2021-39237 ( & CVE-2021-39238 (
4
61
122
We heard y'all might be having problems playing with the Financial Information eXchange protocol. Can we FIX it? Yes we^@AppSecOllie can! He's developed a Burp extension, it's a bit janky, and you might say it's a bit of a Fixer Upper.
0
5
10
Web proxies got ya down when it Mattermost (thanks @mariuszbit)? JIRA at those pesky sysadmins and keep the Discord with your C2 agents - Please enjoy responsibly! - #C3 #RedTeam #BlueTeam #PurpleTeam.
github.com
Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits. - ReversecLabs/C3
1
37
88
Ooooof @PaloAltoNtwks out of the frying pan(GPS) and into the fire that is @FSecureLabs @1njected discovery of yet another LPE in GlobalProtect VPN Client adding CVE-2021-3057 (& to the @CrowdStrike fry-up (.
0
15
33
1
15
41
William Söderberg strikes again, disclosing a privesc in Qiata FTA. But Kudos to Secudos, who patches faster than a Miata for Qiata!.
0
6
9
A non OP-TEEmal configuration allows for LPE. Grab yourself a cup of TEE and read the advisory from F-Secure Foundry (, Andrej Rosano and @AndreaBarisani -
0
8
22
A prelude to ransomware - we have released our write up of analysis into SystemBC mapped to @MITREattack and with @sigma_hq rules for detection
0
26
49
If you couldn't make it to yesterday's workshop here's the recording: and the slides:
1
10
21
Ever explored the mystic vista of Azure attack detection? Join @_masande as he goes through the basics of detecting an end-to-end cloud-native attack
1
22
48
If you couldn't make yesterday's workshop here's the recording: and the presentation slides:
0
3
12
Sick of those leaky buckets? Put a SOC in it! Join @nojonesuk and @ajpc500 for a Prime delivery of AWS attack detection
1
13
29
If you couldn't make yesterday's workshop here's the recording: and the presentation slides:
0
7
16