haxorthematrix
@haxorthematrix
Followers
29K
Following
124
Media
609
Statuses
9K
Haxor of things at Finite State. Paul's Security Weekly Podcast cohost. @[email protected] https://t.co/eee13eZMzB
Providence, RI
Joined December 2007
The U.S. Cyber Trust Mark will help consumers identify IoT products meeting baseline security standards. Finite State can guide you through pre-certification & beyond. Check out our blog & drop your questions below š. #IoTSecurity #CyberTrustMark.
finitestate.io
On 1.7.25 the White House announced the launch of the U.S. Cyber Trust Mark, focusing on cybersecurity in connected devices. Hereās what you need to know.Ā
0
0
5
RT @hevnsnt: šØ BIG NEWS! šØ @haxorthematrix and I were accepted to to #Shmoocon! We are bringing the #CYA - Cover Your Ass - A cheap BLE Trā¦.
0
6
0
Ok, I know I posted this the other day, but now it is all official like:. Big news! Iām a #SANSDMA nominee! Voting closes Friday, October 4 and Iād love if you could vote for me. Cast your vote now:
0
0
0
Hey all, Security Weekly has been nominated for a SANS Difference Maker award, and we are in the top 5 finalists. Go vote for us!Ā .
sans.org
These are the people and organizations acknowledged by the SANS Institute for their oustanding contributions to cyber security each year.
0
0
3
RT @FiniteStateInc: Great turnout for @haxorthematrix session yesterday @automotive_iq #AutoCyberSec24 in Detroit. We're always so honoredā¦.
0
1
0
RT @FiniteStateInc: The U.S. Cyber Trust Mark. āļø What is it? When will it go into effect? How will it impact manufacturers and consumers?ā¦.
finitestate.io
Discover how the FCC's U.S. Cyber Trust Mark ensures safer IoT products. Make informed choices and embrace secure technology with confidence.
0
1
0
RT @d0tslash: Visualize the DJI 2017 AWS data leak with @CARTO to help grok what it may mean with regard to #HR2864 cc @EliseStefanik @RepSā¦.
0
18
0
RT @FiniteStateInc: Known as Looney Tunables (CVE-2023-4911), a newly disclosed vulnerabiilty impacts a vast number of Linux systems. Whileā¦.
finitestate.io
In our continuing series, the Finite State team takes on the Looney Tunables CVEs, defining and analyzing them, and explaining who's at risk
0
2
0
Hey folks, @securityweekly and I have been nominated for TWO SANS Difference Maker awards, One for podcast and one for lifetime achievement! Go vote for us at (search for "paul" to make it easy to find both of our entries).
0
0
7
RT @FiniteStateInc: šØ Vulnerability Alert: The WebP Library (CVE-2023-4863) šØ . New updates reveal that the vulnerability originally discoā¦.
finitestate.io
In our continuing series, the Finite State team takes on CVE-2023-4863, defining and analyzing it, and explaining who's at risk
0
2
0
RT @FiniteStateInc: We're thrilled to be participating in an upcoming webinar hosted by @SecurityWeek alongside our friends @microsoft. Joiā¦.
0
1
0
To all of my old hacker friends, donāt forget to refill your DEF CON ibuprofenā¦ #DEFCON31.
0
0
8
RT @FiniteStateInc: We've got a little something to help you make it to 5pm! Episode 21 of our podcast is out today! Eric & @haxorthematrixā¦.
0
1
0
They look great!.
The door-in-a-box systems were made by the wonderful @haxorthematrix Iām just their caretaker.
0
0
2
If you do Kubernetes, you need this class. Jay does amazing work!.
Excited to be bringing my #Kubernetes Attack & Defense class back to Black Hat Las Vegas!. Students get a laptop to keep, full of CTF VMs (inc a K8S cluster) to #hack, gathering flags, applying defenses & breaking their attacks. #BHUSA @BlackHatEvents.
0
1
2
While still in the public comment phase, I'm like that CVSS 4.0 scoring can improve how organizations can make decisions on risk. Benefits from the proposed metrics can contextualize actual exploitability, and how it applies to OT/ICS and even healthcare.
first.org
1
1
1
In an apparent series of "Why does this thing need to be IoT enabled", Cyrill KĆ¼nzi hacked his Philips Sonicare toothbrush: It is NFC enabled! . @atc1441 dropped the NFC password calculation: Now in the Proxmark Iceman firmware.
0
2
5
One of my amazing coworkers jsut put together some thoughts on the new and upcoming CVSS 4.0 scoring. TL;DR: He's excited.
linkedin.com
Stay ahead of the curve in cybersecurity with our latest article on the changes coming in CVSS 4.0, penned by our Senior Security Researcher, Edwin Shuttleworth. Understand how it revolutionizes...
0
2
6
We all knew it would happen. In this case it was not from l33t IoT hax, but a lack of segregation of duties; Support had access to all of the video whether they needed it or not. Further proof that security basics need to apply to the whole IoT ecosystem.
malwarebytes.com
It's what we all feared, but hoped wouldn't be the case.
0
1
3