Cyber Security Researcher | Engineer | Building @CVEtrends | Runs honeypot @SecureHoney | PhD in CyberSecurity | Alum @RoyalHolloway (@ISGNews) & @SussexUni

London, England
Joined February 2009
The current status of @CVEtrends
24
20
8
111
24,441
If only there was a way to play Minecraft AND monitor security alerts at the same time… Ooh 👀 SIEMCraft - Security Information and Event Management in Minecraft Blog: blog.tofile.dev/2022/06/10/s… Demo: youtu.be/8Vyf8Y5wcRY Repo: github.com/pathtofile/siemcr… Credit: @pathtofile
2
9
PM shares AWS migration experience: youtu.be/_8AHPqzuLkM
1
2
9
Wholeaked: a file-sharing tool to find whodunit in case of leakage - hides a unique signature in the shared file for each recipient - works with every file type - additional features for PDF, DOCX, MOV - written in Go Demo: youtube.com/watch?v=EEDtXp9n… github.com/utkusen/wholeaked
2
12
Gotta sanitize those pesky spaces! Source: "I was asked to look into a possible data breach on a very old website. This was the SQL injection protection" - reddit.com/r/ProgrammerHumor…
4
2
1
41
Happy New Year from London 🎉🎊🎉 Wishing everyone a fantastic 2022
1
19
New features: - CVE info from Twitter + Reddit + GitHub - Auto scroll (off by default; enable in settings) cvetrends.com Feedback welcome :)
4
18
My reaction when I see SQL in lower case
11
New feature: I've added popular GitHub repos for trending CVEs (can be disabled in settings) ➡️ cvetrends.com
9
Okay, so, this will either be hilarious or get my account disabled by NYU IT during finals week
8
Replying to @FrankMcG
How strict you are with the 2,500 figure...?
1
1
Log4Shell resources: Info + mitigation: lunasec.io/docs/blog/log4j-z… Auto scanner: github.com/fullhunt/log4j-sc… Burp Suite scanner: github.com/silentsignal/burp… Egress filter traces: chasersystems.com/discrimiNA… Exploitation trends: catonetworks.com/blog/log4j-… Logo credit: @GossiTheDog
3
9
32
So the #1 trending CVE (past 24 hrs) on Twitter is CVE-2021-38759: "Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges." PoCs are available if needed... cvetrends.com
3
17