John Hammond
@_JohnHammond
Followers
298K
Following
43K
Media
3K
Statuses
9K
Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyQtS || https://t.co/narO3sz7y6
Joined March 2015
Very late on getting this video out the door, but a teeny weeny showcase of the recent Docker for Desktop on Windows & MacOS container escape, CVE-2025-9074 -- proof of concept was included so a simple demo of arbitrary file write & file read on the host:
2
18
139
and thank you to video editors @HackerCatProd for exposing the root of my C drive
Very late on getting this video out the door, but a teeny weeny showcase of the recent Docker for Desktop on Windows & MacOS container escape, CVE-2025-9074 -- proof of concept was included so a simple demo of arbitrary file write & file read on the host:
2
3
27
RT @gleeda: A look at a newer ransomware variant that we've seen here at @HuntressLabs . Thanks to Harlan Carvey and @LindseyOD123. and awe….
huntress.com
Huntress found a previously unseen ransomware variant called Obscura on a victim company’s domain controller.
0
20
0
Always curious and full of energy, Beagles turn every walk into an adventure 🐾🎉.
98
376
7K
5
2
48
IT'S HERE
Video showcase of the recent WinRAR 0-day, CVE-2025-8088, uncovered by ESET after threat actor RomCom exploited it in the wild leveraging alternate data streams & path traversal on Windows -- we examine the uncovered RAR file and a proof-of-concept demo!
15
15
418
I’m a Democrat running for Congress in Virginia's 2nd District because I swore to defend this country. We need a new mission in Congress: one that puts country over party and people over politics. Help us retake this critical swing district now.
9
0
16
Big thanks to @FlareSystems for sponsoring this video and their continued support of the channel! Track data on the dark web and manage threat intelligence for your exposed attack surface with Flare -- try a free trial and see what info is out there:
0
0
6
The fake EUROPOL / Qilin ransomware gang notice that flew around a few weeks ago was a funny story. I yapped about it in a video and briefly peeked into some Telegram channels to see cybercrime kiddos dropping LOLs and LMAOs on their counterintel op:
5
7
64
"Not all heroes wear capes. Some have YouTube channels." . hot DAAYUUMM.CONGRATULATIONS @ScammerPayback !!!!!!.🤩💥🔥🥳🎊🎉.
justice.gov
SAN DIEGO – Twenty-eight alleged members of a Chinese organized crime ring are charged in four federal grand jury indictments with participating in a massive $65 million fraud scheme targeting...
15
48
347
We've been chugging along with a goal of live and in-person training being a sweet milestone. super stoked to be able to bring an awesome crew to @bsideschicago !! 💪.
🚀JHT launches live training as the exclusive provider of #BSidesChicago's pro workshops from 4 of our best All-Stars. 💸 Early Bird seats will go fast, so ACT NOW & spend the day with:. 💻 @_JohnHammond - Script-Based Malware Analysis.💻 @mish3alkhan -
1
4
50
Big thanks to @Antisy_Training @BHinfoSecurity for sponsoring this video and their continued support of the channel! Jump into "Pay Forward What You Can" training at Antisyphon Training, at whatever cost makes sense for you!
antisyphontraining.com
Hands-On Cybersecurity Training Starting at $0.00 – Join us Live or On-Demand! Includes Cyber Range Access, Certificate of Completion, and six months access to class recordings!
0
3
17
Video showcase of the recent WinRAR 0-day, CVE-2025-8088, uncovered by ESET after threat actor RomCom exploited it in the wild leveraging alternate data streams & path traversal on Windows -- we examine the uncovered RAR file and a proof-of-concept demo!
7
86
388
@albinowax Big thanks to @PortSwigger for sponsoring this video -- you can read all the details about his insane research here and see what else him and PortSwigger and the whole @Burpsuite team are up to: :).
portswigger.net
PortSwigger offers tools for web application security, testing, & scanning. Choose from a range of security tools, & identify the very latest vulnerabilities.
0
0
12
I FINALLY got a chance to chat with James Kettle @albinowax and hear about his latest research, with a cool caption "HTTP/1.1 Must Die" 😎 Mind-blowing work including desync attacks and critical vulnerabilities affecting websites & CDNs. and a demo!
7
43
223
Caught in the middle of a political battle, @BlackRock reaffirmed its focus is helping millions of Americans save for retirement. They warned that injecting politics from either side risks undermining financial performance.
prosperityretirementalliance.com
Millions of Ameircans depend on the security of their retirement savings to live with dignity after a lifetime of hard work. That’s why the Alliance for Prosperity and a Secure Retirement (APSR)...
8
4
47
I don't know if I really want to become another person online who every day tweets."good morning" . but I've been trying to wake up earlier and get a better routine, ya know? 🤡.
47
3
243
the recording of my talk on the Black Hat show floor is up on yout00b :)
4
38
234
RT @gleeda: Occasionally you see a new or newish threat in the SOC. One such example is Syphilis- oops, I mean, Cephalus Ransomware . Eith….
huntress.com
In mid-August, Huntress saw two incidents that linked back to a ransomware variant called Cephalus, which included DLL sideloading via a legitimate SentinelOne executable.
0
3
0