IncredInComp @incredincomp

WiFi intimidate turned rogue web server. A bunch of 1s and 0s. Red hue in #PurpleTeam. Member: negliGents #=Security+Privacy+Education+📷+🏍+🛹 Views mine +5 pt incredincomp.com Arizona Joined August 2018

Tweets

394
Followers

328
Following

166
Likes

8K

Ronan Farrow @RonanFarrow

2 years ago

The reporting on Elon Musk I've been working on for @NewYorker over the past year: newyorker.com/magazine/2023/…

1K 10K 29K 8.5M 6K

SwiftOnSecurity @SwiftOnSecurity

2 years ago

Running PoC exploit code you find on GitHub has big "Linkin_Park_-_Numb.mp3.exe" energy

3 16 234 23K 2

Radley Balko @radleybalko

2 years ago

DOJ just released the report from its two-year investigation of the Minneapolis police department. Here's a thread of notable excerpts. This first one happened *while a DOJ investigator was on a ride-along.*

135 4K 10K 1.8M 1K

Download Image

Caitlin Condon @catc0n

2 years ago

Rapid7's IR team has identified a simple way to determine which data was exfiltrated from #MOVEit customer environments, and how much of it was exfiltrated. We've released this information in our blog, and a @velocidex artifact is in development. rapid7.com/blog/post/2023…

3 95 226 53K 37

SwiftOnSecurity @SwiftOnSecurity

2 years ago

I am telling you, without specifics: It does not matter how big your company is. Getting some vendors to fix security issues is just impossible. There's no threats you can make. You're stuck and they know it. But Microsoft. Microsoft can take them to the shed. Globally.

2 9 107 14K 0

Aric Toler @AricToler

2 years ago

We're hiring at @bellingcat! We're looking for a US-based researcher/trainer Pay: $55-65k (plus 10% health insurance subsidy, e.g. extra $6k for a $60k salary) Fully remote, occasional travel 25 paid holidays/year Full description and instructions here: bellingcat.com/bellingcat-is-…

63 358 1K 507K 136

Andrew Morris (afk) @Andrew___Morris

2 years ago

This is cool. Remy (@_mattata) figured out that ChatGPT's new Browser SDK was using some relatively recently known-vulnerable code (specifically MinIO CVE-2023-28432). We're also acutely aware of exploitation in the wild for this vuln literally right now. greynoise.io/blog/openai-mi…

0 39 97 27K 19

Download Image

Nagli @galnagli

2 years ago

The team at @OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇

87 727 3K 673K 1K

Download Video

Black Hills Information Security @BHinfoSecurity

3 years ago

Next BHIS Webcast -- Networking for Pentesters: Beginner w/ @notshenetworks Thursday, 2/9 - 1pm ET (show up early for pre-show banter) Register: zoom.us/webinar/regist… Topics include: - IP addressing - Layer 2 broadcasts - Subnets - VLANs - ARP - NAT - DNS - DHCP - And more!

5 51 199 142K 55

Download Image

ꙅɿɘƚɔɘqꙅ @_specters_

3 years ago

Good Morning, I feel like we need more car haxs. So here is another vulnerability we found that got us remote commands on every internet connected Nissan & Infiniti. Bug was fixed. shout out to @samwcyo @bbuerhaus @sshell_ @d0nutptr @xEHLE_ @iangcarroll @sshell_ @infosec_au

3 61 328 0 71

Download Image

Sam Curry @samwcyo

3 years ago

More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works:

200 4K 13K 0 3K

Download Image

ꙅɿɘƚɔɘqꙅ @_specters_

3 years ago

@samwcyo I hope this inspires a generation of web hackers to look into automotive hacking :D check out @CarHackVillage

4 2 41 0 1

Jon Aubrey @SecurityJon

4 years ago

I’ve been doing a bit of work recently, attacking laptops that are protected by Microsoft Bitlocker drive encryption. Join me on a journey where we break into this CEO’s laptop to steal company secrets and plant malware.