Renowned Cyber Expert | 📖 & ⚽ fan!
Seattle
Joined July 2013
- Tweets4.4K
- Following258
- Followers55
- Likes8.7K
MattKicks retweeted
The easiest bug bounty win I know: IDOR hunting with 2 accounts.
Do this today:
1. Register two accounts (A and B) on the same target
2. Using A, click through every feature and note every request with an ID in it (numbers, UUIDs, emails, filenames)
3. Replay those requests using B's session cookie/token
4. If B can read, edit or delete A's data = IDOR
5. Don't only test GET. Swap IDs in PUT, PATCH, DELETE and in JSON bodies too
6. Try old API versions (/v1/ instead of /v2/), they often skip the checks
7. Hidden IDs in responses, exports and emails count too
Most hunters skip step 6. That's where I find the juicy ones.
Practice it free here: labs.hackxpert.com/
Want someone looking over your shoulder? 1:1 coaching: thexssrat.podia.com/coach?co… (a discount applies via the link)
MattKicks retweeted
🚨 PHP2Shell (CVE-2026-109618 + CVE-2026-109619) is a pair of critical RCEs in PHP. Details leaked online on 20 October, two days before their planned disclosure.
We’re tracking both CVEs on cvemon as this develops: cvemon.intruder.io/
MattKicks retweeted
Inside Cyber: How AI, 5G, and Quantum Computing Will Transform Privacy and Our Security
Inside Cyber: How AI, 5G, and Quantum Computing Will Transform Privacy and Our Security
link.amazon/B0eXunR6c
by @ChuckDBrooks
ALT In an era where technological innovation evolves at an exponential rate, Inside Cyber: How AI, 5G, IoT, and Quantum Computing Will Transform Privacy and Our Security emerges as a critical roadmap for understanding and leveraging the next wave of tech advancements. Chuck Brooks, a renowned executive and consultant, breaks down complex technological trends into digestible insights, offering a deep dive into how emerging technologies will shape the future of industry and society. In the book, you'll: - Gain clear, accessible explanations of cutting-edge technologies such as AI, blockchain, and quantum computing, and their impact on the business world - Learn how to navigate the cybersecurity landscape, safeguarding your business against the vulnerabilities introduced by rapid technological progress - Uncover the opportunities that technological advancements present for disrupting traditional industries and creating new value
MattKicks retweeted
🚨 Fake Google Meet Website Distributing MSI Installer
A fake Google Meet page tricks users into downloading an MSI through a forced update prompt.
Technical Findings:
- Tracks visitors and downloads via tracker.js.
- Detects Selenium, Playwright, Puppeteer and headless browsers.
- Checks VM/WebGL fingerprints.
- Blocks DevTools shortcuts and deploys honeypot traps.
- Disables download buttons when bots are detected.
- Tracker also supports Zoom and Adobe Reader themes.
IOCs:
Domain:
224meetgooglecomfskqcdzfcwh[.]com
Tracking server:
alertbot-lake[.]vercel[.]app
Endpoints:
/api/v1/event/session
/api/v1/event/action
JS files:
/tracker.js
/security-guard.js
/script.js
Hash:
Google-Meet-0.1.76-x64.msi
c7522282e3cd0da4b9e1f1fd056361ed9b4ee40c695aa4148542016d2b0c04ba (uploaded to VT)
GoogleMeet.exe
b0d8467f2f2ed6a104e45b828b8f3c9637f8cd73a66166c3441aefb336906e95 (uploaded to VT)
#Phishing #Malware #ThreatIntel #GoogleMeet #IOC
@500mk500 @skocherhan @0x534c @KirkDerpca
MattKicks retweeted
If you’re taking time to like, comment on, and repost my work, I want to show up for yours too.
I might miss posts that don’t reach my feed, but when I see yours, I don’t want to just scroll past.
Support should go both ways. We’re growing together.
MattKicks retweeted
NVIDIA goes all the way into the supply chain. Cutting the time to 1/4 from implementation to production.
#nvidiagtc
17km of wires! GONE
MattKicks retweeted
Software isnt dead. Everybody is building Agents with their domain knowledge.
#nvidiagtc
MattKicks retweeted
UPDATE: Arrington XRP Capital and Jack Arrington just filed a Schedule 13G showing a 19.9% stake in Evernorth’s Class A shares.
That is 4.7M shares, with another 29M non-voting shares held back only by the 19.9% ownership cap.BREAKING: Arrington XRP Capital and Jack Arrington just filed a Schedule 13G showing a 19.9% stake in Evernorth’s Class A shares.
That is 4.7M shares, with another 29M non-voting shares held back only by the 19.9% ownership cap.
BREAKING: Arrington XRP Capital Fund discloses a major position in Evernorth (XRPN) via SEC Form 3.
4.7M Class A shares held directly, plus Class C shares convertible into 29M more and 84K warrants at $11.50.
MattKicks retweeted
AI will come for every aspect of life.
Digital radiologists, enabling cancer to be detected and treated more quickly. Furthermore, NVIDIA is now increasingly focusing on mobile networks:
„Cuda made its first call.”
Especially the radiologists make me super excited for the future!
MattKicks retweeted
📣📣📣 Calling all Chrome bug hunters! 📣📣📣
Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition.
For details, see our latest blog post 👇
bughunters.google.com/blog/c…
MattKicks retweeted
Your break-glass account is excluded from every Conditional Access policy.
It can still be blocked by Microsoft's mandatory MFA requirements.
An exclusion is not proof of emergency access readiness.
Here's what to verify:
ridgelinecyber.com/blog/brea…
MattKicks retweeted
⚠️⚠️ CVE-2026-108097 (CVSS 9.8) + CVE-2026-108099 (CVSS 9.8): Unauthenticated RCE paths in Drupal core Field UI module and Entity List module — patch all supported branches now
🔗FOFA Link: en.fofa.info/result?qbase64=…
🎯1.7M+ internet-facing Drupal surfaces are found on en.fofa.info in the past year.
FOFA Query: app="Drupal"
🔖Refer: drupal.org/sa-core-2026-014
#OSINT #FOFA #CyberSecurity #Vulnerability
MattKicks retweeted
Data or privacy? Businesses can have both, MIT Sloan research finds | MIT Sloan mitsloan.mit.edu/ideas-made-…
Cc: @BillMew @robmay70 @NigelTozer @ChuckDBrooks @m49D4ch3lly @DT @archonsec @clarinette01 @JBarbosaPR @AshokNellikar @MHcommunicate @Khulood_Almani @Miriam_Brown979
MattKicks retweeted
Yet another predictable outcome
MattKicks retweeted
A privileged account has failed logins from Canada, then a successful MFA login from Germany five minutes later.
What should the analyst do FIRST?
A. Block Germany only
B. Correlate sign-in, MFA, and audit logs
C. Delete the account
D. Close as travel
Drop your answer below ↓
MattKicks retweeted
What happens when a legitimate spend-management platform becomes part of a fraud operation? In a case investigated by Group-IB, suspected #Classiscam operators abused a platform’s trusted email and payment-notification systems to distribute #phishing that impersonated online marketplaces, reaching thousands of recipients daily. The platform was not the target. It was the infrastructure. #CyberCrime
MattKicks retweeted
Your internet connection looks normal, but something feels off.
Packets can help reveal why.
A packet carries data across a network, along with information about where it is going.
SOC tip: Inspect packet traffic to identify unusual connections and suspicious patterns.
MattKicks retweeted
I came into Hacktoberfest 2026 with one project in mind.
I haven't built it. Yet. 👀
Instead, I shipped six other things — a phishing checker, a kids' security tool, a CISA advisory translator for small businesses, and more.
Sometimes the unexpected path teaches you more than the original plan ever could. 💜
MattKicks retweeted
most agent training fixes the model
Google just open-sourced EnvHarness, which fixes the environment instead. it wraps an existing setup and adds three pieces: setup (change the starting state), rule (constrain what happens next), and link (change what the agent sees). the agent, the base environment, and the eval stay untouched
on WebArena, SWE-bench Verified, and ALFWorld it lifted several models by 2.9 to 3.7 points, including Qwen3.6 27B and Claude Sonnet 4.6
the useful part is the split. if the agent keeps failing the same way, you do not always need a bigger model. you can make the environment show it the failure more clearly
open-source stacks can do this without retraining. the loop is the environment, not just the weights
