To ensure the security of Microsoft's web services and protect our customers, we're using innovative solutions to automate Dynamic Application Security Testing (DAST) at scale. This effort targets thousands of internal and external API web services across Microsoft’s portfolio of…
Take a rare look inside how Microsoft is working to use automated reverse engineering techniques to secure its own web services!
youtube.com/watch?v=kfuOzD…#BlueHat
📣SPEAKER ANNOUNCEMENT📣
Jason Geffner (@JasonGeffner), Principal Security Architect, Microsoft, will be presenting a talk titled “How Microsoft is Scaling DAST” at #BlueHat. Jason is an information security professional with an extensive history in application security, risk…
We’re sharing our discovery & analysis of four vulnerabilities in Perforce Server, including a critical vulnerability that could give unauthenticated remote attackers complete control over unpatched systems & connected infra. Patches available: msft.it/6013indnt
I recently discovered a new CVSS 10.0 vulnerability in Perforce Helix Core Server that allows for unauthenticated remote code execution (RCE) as LocalSystem. Read all about it and three new CVSS 7.5 vulnerabilities in my blog post below.
microsoft.com/en-us/security…
So frustrated with acronyms. I asked everyone at work what IDK stands for, and they each said “I don’t know” ☹️
I guess it’ll continue to be a mystery.
DEADLINE EXTENDED!!!! ⏰⚠️🙌⏳🚨➡️
The application to attend #BlueHat October 2023 has been extended to Friday, September 8 at midnight Pacific Time. We hope you can join us from October 11-12, 2023 in Redmond, WA, US. Submit your application today: msft.it/60179ZRCF
In hindsight, all those times in elementary school I would ask my teacher how to spell a word and they would say, "lOoK iT uP iN a dIcTiOnArY," I bet it was because _they_ didn't know how it was spelled.
"Comedian Gallagher, best known for his watermelon-smashing comedy routine and many popular specials in the 1980s, died Friday morning, according his manager Craig Marquardo. He was 76."
But how old was Gallagher?
cnn.com/2022/11/11/ent…
26K Followers 1K FollowingI play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here:
@[email protected]
https://t.co/hXggdAVkSQ
36K Followers 7K FollowingWeird security voyeur. Vibe merchant. CISO of your 🩷 Official USPS fan account. 🎉 Host of THE Microsoft Threat Intelligence Podcast. I like crime actors.
64K Followers 8K FollowingHacker, Researcher, Podcast Producer (Tribe of Hackers, Darknet Diaries). Proud dad of the fastest climber in the world. Ever. “Ut scandis, alios subleva”
96K Followers 2K FollowingHacker, marketer. I manage socials and produce amazing technical blogs for cybersecurity orgs. Founder of @hacker_content and @haksecio
17K Followers 2K FollowingTargeted Ops Red Team @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | I speak for myself only | K1HAQ
3K Followers 152 FollowingConquering Cyber Security Through Knowledge, Experience, and Leadership. Tweets and re-Tweets may be passing thoughts or temporal diversions, not an employers.
649 Followers 1K Following🇺🇦🇺🇸♥ - INTJ, Type 8/Type 3 - War vet 🔥 - #NAFO tool dev 💻🧨 - Adding to Lada backorders 💀🚗 - Vatniks who don't enlist are not real men 💋💄🦩
8K Followers 1K FollowingA new dad, I make video games and do art. We are making a casual silly multiplayer party video game called Holiday Party: Mascot Brawl!
31 Followers 87 FollowingI am root in my own domain. I've been involved in tech since the 80s. I've been involved in music before that. I play guitar, sometimes well. I look for truth.
44K Followers 3K FollowingChoose disfavour where obedience does not bring honour.
I do math. And was once asked by R. Morris Sr. : "For whom?"
@[email protected]
26K Followers 1K FollowingI play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here:
@[email protected]
https://t.co/hXggdAVkSQ
64K Followers 932 FollowingI like writing silly Tweets, but that doesn't pay so I also type at @googledeepmind. Principal Engineer. ex-@googlechrome. volunteer @2ndharvest. 🇺🇸🇨🇷
49K Followers 339 FollowingSecurity researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. Mastodon: @[email protected]
145K Followers 215 FollowingWe are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit https://t.co/kxEbdfMny1.
5K Followers 203 FollowingBlueHat is where the security research community and @Microsoft security pros come together as peers, to connect, share and learn. Run by @MSFTSecResponse
349K Followers 325 FollowingWe are prioritizing security above all else through our Secure Future Initiative (SFI). Explore SFI principles, pillars, and progress here ⬇️
2K Followers 181 FollowingCVP & Deputy CISO (Microsoft) Happy to discuss anything related to security, privacy, compliance, gardening, & hiking (nchlgpt =full name without vowels)
730 Followers 2K FollowingI'm a security guy, and a proponent of the rule of law. Nothing is perfect, but better is better. #infosec #security #secdevops
5K Followers 335 FollowingSecurity research and engineering lead at @microsoft. on mastodon: https://t.co/YfJkktByFv and @spoofy.bsky.social not posting here anymore.
655 Followers 365 FollowingVulnerability research manager at Google Cloud. Previously at Microsoft, working on breaking Windows and Azure. Opinions are non-existent or my own.