@FSecureLabs

With great research comes great responsibility.

labs.withsecure.com
Joined January 2010
  • Tweets967
  • Following145
  • Followers18.9K
98Media
WithSecure Labs retweeted
fwd:cloudsec@fwdcloudsec21 May 2024
We're happy to announce WithSecure is a Bronze sponsor for fwd:cloudsec! @WithSecure withsecure.com/
2
9
4,462
WithSecure Labs retweeted
James Loureiro@NerdKernel22 Dec 2020
We are looking for Security Researchers (across all grades) to come join the @FSecureLabs team emp.jobylon.com/jobs/70725-f…

Security Researcher

F-Secure delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and...

emp.jobylon.com
24
3
66
Success! The team of @FSecureLabs, @maxpl0it, @pjlantz and @0xToby were able to achieve a reverse shell from the #Samsung Q60T television. They're off to the disclosure room to provide the details of their exploit.
16
59
Our next attempt has the team of @FSecureLabs, @maxpl0it, @pjlantz and @0xToby targeting the Samsung Q60T television. Their attempt begins at 1300 Eastern (UTC-4).
2
7
1
25
WithSecure Labs retweeted
maxpl0it@maxpl0it17 Apr 2020
My Autodesk FBX Heap Overflow (CVE-2020-7085) has now been disclosed at autodesk.com/trust/security-… Works on FBX SDK < 2019.5 PoC video from disclosure:
5
14
2
50
WithSecure Labs retweeted
Calum Hall@_calumhall27 Jan 2020
Absolutely stoked to be speaking alongside @rookuu_ at Objective by the Sea v3 in Hawaii in March! @FSecure_Consult @objective_see #OBTS 🏝
4
8
25
New from @FSecureLabs: Digital Lock-Picking – Stealing Keys to the Kingdom.🔒 Read @__0kami and Michał Madziar's new research on a KeyWe Smart Lock flaw that allows thieves to eavesdrop on messages between the lock and phone app. labs.f-secure.com/blog/digit… | #infosec #security
12
4
20
Confirmed! The @FSecureLabs crew used an #XSS bug in the NFC component of the #Xiaomi Mi9 to exfiltrate data just by touching their specially made NFC tag. Their efforts earned $30,000 and 3 more Master of Pwn points. #P2OTokyo
44
5
100
Success! The @FSecureLabs crew was able to exfiltrate a picture from the #Xiaomi Mi9 handset just by touching it to a rogue NFC tag. The photo transferred slowly, but it definitely worked. They're headed to the disclosure room for verification. #P2OTokyo
9
1
31
Confirmed! The @FSecureLabs team combined a command injection bug along with some insecure settings to achieve their code execution (and Snake-themed light display). The effort earns them $20,000 and one Master of Pwn point. #P2OTokyo
9
2
32
Success! Not only did the @FSecureLabs team get their code execution working on the TP-Link AC1750 via the WAN interface, they got the front lights of the router to play Snake! #StylePoints #P2OTokyo
7
1
51
Success! After installing a rouge app on their first attempt, the @FSecureLabs team was able to exfiltrate a picture from the #Xiaomi Mi9 on their second attempt. They're headed to the disclosure room to go over all the details. #P2OTokyo
2
17
32
Success! The @FSecureLabs team demonstrated their exploit on the TP-Link router, and proved it by putting the lights in Vegas mode. Now off to the disclosure room for the details.
3
33
3
85
WithSecure Labs retweeted
nmonkee@nmonkee6 Nov 2019
Good luck to the @FSecure_Consult @FSecureLabs team, @NerdKernel @Incanus Toby & @maxpl0it flying the new and very blue F-Secure flag #Pwn2Own #P2Otokyo #PacSec
5
14
I am delighted to announce that USB armory Mk II pre-orders are now live! Go get it! ^_^ crowdsupply.com/f-secure/usb…
12
113
9
293
WithSecure Labs retweeted
James Loureiro@NerdKernel2 Aug 2019
The @mwrlabs team demonstrated 9 bugs in our inaugural internal pwn2own - showing remote and local bugs in IoT devices and routers. Awesome stuff ☺️
7
1
36
WithSecure Labs retweeted
Alex Plaskett
@alexjplaskett25 Jun 2019
Want to work with MWR and hack highly secured products within the public domain? Deliver specialist vuln research, compete at pwn2own etc? Super interested in people with baseband, automotive, firmware or virtualization security output atm. careers.mwrinfosecurity.com/… #0day #pwn2own
23
37
WithSecure Labs retweeted
Petros@pkb1s29 Apr 2019
Releasing SharpClipHistory (C# .NET), to retrieve the contents of the entire #clipboard history from Cloud Clipboard, introduced in Win10 Build 1809. Also supports a bypass for the latest KeePass update that stops passwords from being stored in history. labs.mwrinfosecurity.com/too…
2
86
2
126
In the 4th of our Top 5 bugs of 2018, @WanderingGlitch details another #Pwn2Own winner. This one exploits the #macOS Dock and was part of @mwrlabs's winning #Safari entry. bit.ly/2EEJFOb
2
34
1
55
WithSecure Labs retweeted
Jason Matthyser@pleasew8t17 Dec 2018
This I am really proud of. Thanks @offensive_con for this opportunity!
offensivecon
@offensive_con17 Dec 2018
3D Accelerated Exploitation by @pleasew8t offensivecon.org/speakers/20…
3
8
26
Load more