ML Threat Ops @HiddenLayerSec, Beer Geek, Family Man. Mastadon: @MrTrav@infosec.exchange
Portland, OR
Joined August 2008
- Tweets543
- Following129
- Followers1.2K
- Likes279
Travis Smith retweeted
HiddenLayer is now a CVE Numbering Authority (CNA) assigning CVE IDs all @hiddenlayersec systems, services, & products + vulnerabilities it discovers not in another CNA’s scope
cve.org/Media/News/item/news…
#CVE #CNA #VulnerabilityManagement #Vulnerability #Cybersecurity @CVEnew
ALT New CVE Program Partner
A second vulnerability in MOVEit Transfer is announced, no evidence of exploitation yet, but orgs should patch quickly to reduce the risk. Remediation is as easy as replacing 3 DLLs or installing the latest version. community.progress.com/s/art…
The MOVEit Transfer CVE is one of the more risky vulns in recent memory due to the quickness of threat actors to leverage it and extort their victims. We put together a few insights and how organizations can respond accordingly to this developing threat: blog.qualys.com/vulnerabilit…
Really excited to share the 2023 @Qualys TruRisk Threat Research Report. Tremendous work by the Threat Research Unit to put together our view of the threat landscape. qualys.com/2023-trurisk-rese…
Lots of valuable information in here to understand the true risk of this developing vulnerability
#Qualys Threat Protection - Microsoft Exchange Server Zero-day Vulnerabilities (CVE-2022-41040 and CVE-2022-41082)
bit.ly/3yswYAn
#vulnerability
Great discovery from the Qualys Vulnerability Research Team. More details are available in our blog going over the vulnerability, how to find out if you are impacted, and how to detect exploitation. #PwnKit
The #Qualys Research Team has discovered an easily exploitable memory corruption vulnerability (#Pwnkit) in polkit a SUID-root program that allows any unprivileged local user to gain root privileges on all major linux systems in its default configuration: fal.cn/3lCr6
Excellent analysis of the REvil ransomware from the @qualys Malware Threat Research Team.
How the REvil #ransomware supply chain attack works and mitigation steps you can take to lower your risk blog.qualys.com/vulnerabilit…
Today marks my last day @TripwireInc . It's been an exciting 6.5 years building out the security content and research capabilities. While I am sad to leave behind lifelong friends, I am excited for the next chapter.
I updated @MITREattack TEACH to now map to v7.0, which now includes sub-techniques. github.com/TravisFSmith/mitr…
Travis Smith retweeted
The ATT&CK Evaluations Team just released the APT29 Evaluation results, DIY Eval profile, and a Joystick update on attackevals.mitre.org. Check out medium.com/mitre-attack/atta… to learn more about the evaluation process.
Travis Smith retweeted
We're in full swing producing shields and other PPE. Yesterday we donated 50+ to medical professionals in OR and CA, and a team at PSU is evaluating a new laser cut model. If your org needs face shields or other PPE, please contact us through our web site. pdxhs.org
Full sell out crowd of 96. Had a great time, thanks for everyone who made it out!
This Post is from an account that no longer exists. Learn more
Environment spun up, @Elastic stack started, @MITREattack CALDERA running, and @redcanaryco Atomic Red Team loaded. I'm ready to teach some things here at #RSAC. Room 314 in the south hall if you'd like to get on the wait-list.
Headed to #RSAC and found out my learning lab is now sold out. This should be a fun conference! rsaconference.com/usa/agenda…
I’ll be doing a Learning Lab at #RSAC next Wednesday. Here is a preview of what we’ll be doing in the lab.
This Post is from an account that no longer exists. Learn more
So is one supposed to only wear this on job interviews, or is it supposed to be worn daily at work? Asking for a friend.
Travis Smith retweeted
Juice jacking is as simple as plugging your phone into a public USB port or changing station. 📱
kptv.com/news/cybersecurity-…
