AssafMorag retweeted
#Samsung #KNOX #Kernel UAF Exposes Millions of #Galaxy Devices
securityaffairs.com/194090/s…
#securityaffairs #hacking
@LucidBitLabs
AssafMorag retweeted
Our team participates in public bug bounty programs to sharpen our vulnerability research skills.
We recently looked at Firedancer, a blockchain validator client, and found a remotely triggerable vulnerability.
lucidbitlabs.com/blog/fireda…
AssafMorag retweeted
Congrats to security researcher Liork (@LucidBitLabs) for earning $50,000 from a blockchain/dlt High vulnerability.
They're now ranked 83rd on the all-time leaderboard.
Pledge IMU behind them so that when they find new bugs and increase their rank, you both get IMU rewards.
immunefi.com/pledge/liork/
AssafMorag retweeted
1/ Our team at @LucidBitLabs recently audited a crypto wallet app.
We found 2 impactful vulnerabilities 👇
I'll be speaking at the Infrastructure & Ops Superstream: Securing your Kubernetes Clusters from Known and Unknown Weaknesses.
Tomorrow! Sept 6 11am EDT
Sign in, or sign up for your free trial: oreil.ly/I5kCS
AssafMorag retweeted
In part one of our series on the reemergence of TeamTNT, we provided an overview of the preliminary stages of an aggressive botnet campaign aimed at cloud-native environments. ☁
After further research of the novel #TeamTNT botnet, Aqua Nautilus has discovered an unprecedented scan rate of the entire internet every hour and a staggering infection rate of at least 1 victim per hour. 🤯
If you are using docker, k8s, redis, hadoop, ssh, or jupyter we strongly encourage you to check out these new findings. 🔎
blog.aquasec.com/teamtnt-ree…
@ofekitach @MoragAssaf
AssafMorag retweeted
Another Master student flew through the thesis defense at @TelAvivUni with flying colors: @EilatLevAri had presented her thesis: Product Managers' Role in Incorporating Values into Digital Products. Thanks to @DanKotliar and Joachim Meyer for evaluating the thesis
AssafMorag retweeted
🚨 Aqua Nautilus researchers have discovered a new elusive and severe threat known as HeadCrab that has compromised a large number of Redis servers.
📖 on for details of the attack and steps organizations can take to safeguard their systems.
blog.aquasec.com/headcrab-at…
AssafMorag retweeted
Our SVP of Strategy, @ranio1, recently sat down with @ashimmy to chat about where the security market is headed, #CNAPPs as an important emerging security category, and why Aqua was named the Best Cloud Native Security Solution/Service at the #DevOpsDozen
techstrong.tv/videos/intervi…
AssafMorag retweeted
In 2023, personal #data is being generated at an unprecedented rate.
In this issue of @cybersec_mag, Assaf Morag of Aqua Nautilus and other experts share their insights on how to best protect your data. ☁ 🔒 @MoragAssaf
cyberprotection-magazine.com…
AssafMorag retweeted
CVE-2022-0847 “Dirty Pipe” is dissected and analyzed very well by Alon Zivony / Team Nautilus @AquaSecTeam in this writeup. blog.aquasec.com/deep-analys…
AssafMorag retweeted
Happy to announce that our paper, “Can Previews Mitigate the Effect of Interruptions? Findings from a Lab Experiment under Various Workloads”, was accepted by the International Journal of Human-Computer Interaction -- paper by @frankbolton, Dov Te'eni and I, all from @TelAvivUni
AssafMorag retweeted
In this blog, @MoragAssaf and Guy Ben-Aharon of Aqua Security explain Text2Shell and their mitigation recommendations.👇
blog.aquasec.com/cve-2022-42…
AssafMorag retweeted
אוניברסיטת תל אביב @TelAvivUni מספרים על המחקר של @tamir_me ושלי על Meerkat, האפליקציה שפיתחנו לתמיכה בין דורית בטלפון החכם – at Israel
Happy #CyberSecurityAwareness Month!
TAU researchers @erant and @tamir_me aim to help #seniors stay secure online & avoid scams with Meerkat, a new #app that lets them ask for tech help from trusted friends & family.
ow.ly/y4oc50KWMAi
@CyberWeekTLV
AssafMorag retweeted
New blog about rootkit detections!
File operations hooking explained :)
blog.aquasec.com/detect-drov…
AssafMorag retweeted
I’n the past couple of months I worked at @AquaSecTeam on a cool project that target hunting kernel rootkits with ebpf.
And today one of those techniques came public with a nice blog that introduces tracee’s new detection event.
Hope you’ll enjoy it
blog.aquasec.com/linux-sysca…
AssafMorag retweeted
Aqua's #TeamNautilus created a honeypot to better understand how adversaries are exploiting the initial #Log4j vulnerability (CVE-2021-44228) in real-world attacks.
Read on to learn the key findings from their research: blog.aquasec.com/real-world-…
AssafMorag retweeted
Read about Aqua’s exciting new addition of cloud native detection and response (#CNDR) capabilities to our Cloud Native Application Protection Platform (#CNAPP)!
blog.aquasec.com/cndr-ebpf-c…