Pinned Tweet
Check out my new blog "From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw" telling the story behind the discovery of CVE-2019-5241 & CVE-2019-5242 vulnerabilities in Huawei PC Manager driver. Enjoy!
microsoft.com/security/blog/…
Amit Rapaport retweeted
We are very proud to share that Microsoft was named a Leader in the 2019 Gartner Magic Quadrant for Endpoint Protection Platforms and positioned highest in execution microsoft.com/security/blog/…
Amit Rapaport retweeted
Microsoft Defender ATP researcher @dana_baril reached out to Check Point researcher @EyalItkin about his research into the RDP vulnerabilities he reported through Microsoft's bug bounty program. The collaboration led to speedy protection for customers. cyberscoop.com/microsoft-bla…
Amit Rapaport retweeted
Great work by @BenSeri87 and @dorzusman of @ArmisSecurity ! The attack surface exposed by tcpip.sys is huge, and unlike afd.sys (which mostly relevant for LPEs) is great for RCEs :) Can't wait for their talk next week! go.armis.com/hubfs/White-pap…
Amit Rapaport retweeted
Analysis of a targeted attack exploiting the WinRar CVE-2018-20250 vulnerability microsoft.com/security/blog/…
Amit Rapaport retweeted
Also generally available today: the new Microsoft 365 compliance center! techcommunity.microsoft.com/…
Amit Rapaport retweeted
The Microsoft 365 security center is now generally available! techcommunity.microsoft.com/…
Amit Rapaport retweeted
Microsoft Discovers Backdoor-Like Flaw In Huawei Matebook Driver dlvr.it/R1b2PL
Amit Rapaport retweeted
Microsoft: Windows 10 devices open to 'full compromise' from Huawei PC driver zd.net/2YqCFek via @LiamT
Check out @arstechnica review covering our story. Thanks @DrPizza!
How Microsoft found a Huawei driver that opened systems to attack arstechnica.com/gadgets/2019… by @drpizza
Amit Rapaport retweeted
Detecting kernel-initiated code injections with #MicrosoftDefenderATP. How cool our team found a driver vulnerability by using our product. 😍 microsoft.com/security/blog/…
Amit Rapaport retweeted
pretty cool story of how a detection hit that seems like an fp turned out to be a local eop
Want to watch who’s watching the watchdog? Try to say this ten times in a row, or just check out the video of @realAmitRap’s talk from #BlueHatIL 2019 we just posted online
Finally! My #BlueHatIL talk “Who’s Watching the Watchdog? Uncovering A Privilege Escalation Vulnerability in OEM Driver” is out, telling the story behind the discovery of CVE-2019-5241 & CVE-2019-5242 vulnerabilities in Huawei PC Manager driver.
youtu.be/Ltzye0Cj9G8
Amit Rapaport retweeted
Make sure to catch our very own Lior Ben-Porat (@lior_bp) in the Emerging Threats seminar at #RSAC. He shares the stage with @Tophs from Flashpoint and Daniel Frank from F5 Networks at 1:05pm today. Lior will talk about his research on supply chain attacks.rsaconference.com/events/us1…
Amit Rapaport retweeted
📢 Announcing Microsoft Threat Experts! 📢
This new service in WDATP provides proactive hunting, prioritization & additional context/insights that further empower security operations centers to identify and respond to threats quickly and accurately.
Amit Rapaport retweeted
No plans for the weekend? We got you covered.
Talks are up.
bluehatil.com/abstracts
Amit Rapaport retweeted
Finally, our SGX Malware paper is on #arXiv (arxiv.org/abs/1902.03256) and the PoC on #Github (github.com/sgxrop/sgxrop) for everyone to try.
Not side channels in SGX but this time we can hide real malware in SGX.
Amit Rapaport retweeted
Slides from my talk "#PEsieve an open source scanner for hunting and unpacking malware" #BlueHatIL drive.google.com/file/d/1pIj…
