.@pimskeks and I are releasing c0ntextomy, an RCE exploit based on CVE-2020-9992 (patched in iOS 14 and Xcode 12 last week), alongside a writeup and a basic post-exploitation toolkit.

github repo:
https://github.com/c0ntextomy/c0ntextomy

@zLabsProject blog post:
https://blog.zimperium.com/c0ntextomy-lets-debug-together-cve-2020-9992/

Reply on Twitter 1309158974399356932 Retweet on Twitter 130915897439935693263 Like on Twitter 1309158974399356932163 Twitter 1309158974399356932

Retweet on Twitter Chase Dardaman Retweeted

Microsoft Security Intelligence@MsftSecIntel·

24 Sep

Microsoft is actively tracking threat actor activity using exploits for the CVE-2020-1472 Netlogon EoP vulnerability, dubbed Zerologon. We have observed attacks where public exploits have been incorporated into attacker playbooks.

Reply on Twitter 1308941504707063808 Retweet on Twitter 1308941504707063808551 Like on Twitter 1308941504707063808793 Twitter 1308941504707063808

Chase Dardaman @CharlesDardaman·

23 Sep

Do not do this to your fellow employees 🤦‍♀️

Justin Fenton@justin_fenton

After slashing our staff, closing newsrooms, furloughing reporters and cutting pay during a pandemic, @tribpub thought a neat lil way to test our susceptibility to phishing was to send a spoof email announcing large bonuses. Fire everyone involved. 2

Reply on Twitter 1308870611427627013 Retweet on Twitter 1308870611427627013 Like on Twitter 13088706114276270132 Twitter 1308870611427627013

Chase Dardaman @CharlesDardaman·

23 Sep

I’m curious, if a red team found a used an 0day during a test of your company would you be happy that they can find them and exploit you with it to test other defenses or mad because you can only prepare so much for them?

Reply on Twitter 1308794796505534464 Retweet on Twitter 13087947965055344645 Like on Twitter 13087947965055344647 Twitter 1308794796505534464

Chase Dardaman @CharlesDardaman·

23 Sep

An interesting read https://www.theatlantic.com/magazine/archive/2020/11/what-if-trump-refuses-concede/616424/

Reply on Twitter 1308781261146685440 Retweet on Twitter 1308781261146685440 Like on Twitter 13087812611466854401 Twitter 1308781261146685440

Twitter
Linkedin
Github

Scroll Up