Andrew Douma (@securitystreak) header
Andrew Douma (@securitystreak) profile picture

Andrew Douma

@securitystreak

Die-hard #CyberSecurity Pro 🐧 Full-stack penetration testing. Security Architecture and Engineering. Tweets mostly #InfoSec facts.

 Manhattan, NY
medium.com/@securitystreak
Joined March 2014
  • Tweets2.2K
  • Following3.1K
  • Followers1.3K
25Media
Photo by Andrew Douma (@securitystreak)Photo by Andrew Douma (@securitystreak)Photo by Andrew Douma (@securitystreak)Photo by Andrew Douma (@securitystreak)Photo by Andrew Douma (@securitystreak)Photo by Andrew Douma (@securitystreak)
Andrew Douma retweeted
VirusTotal (@virustotal) profile picture
VirusTotal@virustotal24 Apr 2023
Introducing VirusTotal Code Insight: empowering threat analysis with generative AI. This tool is based on Sec-PaLM (LLM) and helps explaining behavior of suspicious scripts. Code Insight is available now for all our users! More details by @bquintero: blog.virustotal.com/2023/04/…
Image from VirusTotal (@virustotal)
10
499
56
1,467
269,264
Thread alert! The Splunk Threat Research team (#STRT) has been busy in the past 60 days. Here's a quick rundown of some of our most recent projects:
1
45
2
189
37,474
Andrew Douma retweeted
Wojciech Reguła (@_r3ggi) profile picture
Wojciech Reguła@_r3ggi18 Nov 2022
🔊 New blog post: macOS Sandbox Escape vulnerability via Terminal wojciechregula.blog/post/mac…
Image from Wojciech Reguła (@_r3ggi)
10
55
1
172
Memory safety (for cybersecurity) is still a problem. And a long journey, some of it documented here (and what to do about it, and where we are going) docs.google.com/presentation…
Image from Lukasz Olejnik (@lukOlejnik)
Image from Lukasz Olejnik (@lukOlejnik)
Image from Lukasz Olejnik (@lukOlejnik)
1
5
Andrew Douma retweeted
Stryder (@Stryder0301) profile picture
Stryder@Stryder030118 Mar 2022
Replying to @JimSycurity @dildog
The last time an auditor asked me why we don't use password rotation like they wanted I replied that we were following current NIST standards and that I was surprised they hadn't updated to current standards yet since the update came out a few years ago.
1
4
66
Andrew Douma retweeted
Arris Huijgen (@bitsadmin) profile picture
Arris Huijgen@bitsadmin11 Nov 2021
Windows Exploit Suggester - Next Generation v1.0 has been released! Including the new missingkbs.vbs utility and an in-depth blog post on how to use it: Windows Security Updates for Hackers. Latest #WESNG release: github.com/bitsadmin/wesng, blog: bitsadm.in/blog/windows-secu…
3
45
3
135
In case you missed it --> We released a catalog of known exploited vulnerabilities to reduce the significant cybersecurity risk these vulnerabilities pose. Take a look: cisa.gov/known-exploited-vul… #CVE #Cybersecurity
Image from Cybersecurity and Infrastructure Security Agency (@CISAgov)
3
109
6
150
Blog: SAML XML Injection - a class of vulnerability that could allow an attacker to modify SAML responses generated by an Identity Provider, and thereby gain unauthorized access to arbitrary user accounts or to escalate privileges - research.nccgroup.com/2021/0… by Adam Roberts
2
159
3
301
The latest generation of adversarial image attacks is, uh, somewhat simpler to carry out openai.com/blog/multimodal-n…
Image from Brendan Dolan-Gavitt (@moyix)
157
4,647
1,214
15,347
Andrew Douma retweeted
Corellium (@CorelliumHQ) profile picture
Corellium
@CorelliumHQ25 Jan 2021
It's been a long time coming: we’re very excited to announce that virtual iOS-based devices are now available for individual accounts on our groundbreaking security research platform. corellium.com/blog/ios-for-i…
20
213
37
859
Andrew Douma retweeted
Joshua Saxe (@joshua_saxe) profile picture
Joshua Saxe
@joshua_saxe17 Nov 2020
How to evaluate a cybersecurity vendor's ML claims even if you don't know much about ML (thread). 1) Ask them why they didn't solely rely on rules/signatures in their system -- why is ML necessary? If they don't have a clear explanation, deduct a point.
19
263
127
1,086
In Big Sur Apple decided to exempt many of its apps from being routed thru the frameworks they now require 3rd-party firewalls to use (LuLu, Little Snitch, etc.) 🧐 Q: Could this be (ab)used by malware to also bypass such firewalls? 🤔 A: Apparently yes, and trivially so 😬😱😭
Image from Patrick Wardle (@patrickwardle)
Image from Patrick Wardle (@patrickwardle)
Image from Patrick Wardle (@patrickwardle)
81
1,389
509
3,523
Andrew Douma retweeted
Arris Huijgen (@bitsadmin) profile picture
Arris Huijgen@bitsadmin1 Feb 2020
#FakeLogonScreen is a C# utility to steal a user's password using a fake Windows logon screen. This password will then be validated and saved to disk. Useful in combination with #CobaltStrike's execute-assembly command. github.com/bitsadmin/fakelog…
10
230
9
495
Andrew Douma retweeted
ANY.RUN (@anyrun_app) profile picture
ANY.RUN
@anyrun_app23 Dec 2019
📊 Annual TOP10 threats by uploads to ANYRUN! 1⃣ #Emotet 36026 🔥 2⃣ #AgentTesla 10324 3⃣ #NanoCore 6527 4⃣ #LokiBot 5693 5⃣ #Ursnif 4185 6⃣ #FormBook 3548 7⃣ #HawkEye 3388 8⃣ #AZORult 2898 9⃣ #TrickBot 2510 🔟 #njRAT 2355 any.run/malware-reports/
Free Malware Reports - ANY.RUN

Free Malware Reports - ANY.RUN

Use our malware sample database to research and download files, hashes, IOC ets.

app.any.run
3
49
2
88
Andrew Douma retweeted
RyscCorp (@RyscCorp) profile picture
RyscCorp@RyscCorp29 Nov 2019
Black Friday sale 11/29 - 12/1. Get 10% off at checkout on any purchase. store.ryscc.com
1
Andrew Douma retweeted
Rob Fuller (@mubix) profile picture
Rob Fuller@mubix9 Aug 2019
Replying to @mubix @BlackHatEvents @BSidesLV @defcon
So if you are looking for a new gig, go find: @nfFrenchie @wendyck @ch33r10 @n00py1 @krenner @Netdogca @SecurityStreak @hughpyle @kelath @andrewshumate @pipefish_ @jack_mannino @ryancdotorg, @kubla @telspacesystems @sakebomb @gbransfield @kfosaaen @willaker @golfhackerdave
1
8
2
23
Andrew Douma retweeted
Seebug (@seebug_team) profile picture
Seebug@seebug_team15 Jun 2019
#Oracle #WebLogic Deserialization RCE Vulnerability (0day) Alert Again (CVE-2019–2725 patch bypassed‼️) Check out the temporary solution offered by KnownSec 404 Team: medium.com/@knownsec404team/…
[KnownSec 404 Team] Alert Again (CVE-2019–2725 patch bypassed!!!)

[KnownSec 404 Team] Alert Again (CVE-2019–2725 patch bypassed!!!)

Date: 06/15/2019

medium.com
2
166
9
291
We just published the slides for the TEE presentation @esanfelix gave at #zer0con2019 and #infiltrate19, and kicking off part 1/4 of a blog post series about this research. labs.bluefrostsecurity.de/bl…
1
83
4
144
A Guide to Eric Zimmerman's command line tools (EZ Tools) youtu.be/GhCZfCzn2l0 via @YouTube #DFIR
A Guide to Eric Zimmerman's command line tools (EZ Tools)

A Guide to Eric Zimmerman's command line tools (EZ Tools)

SANS instructor and Former FBI Agent Eric Zimmerman creates and mai...

youtube.com
11
1
30
Andrew Douma retweeted
Nick Carr (@ItsReallyNick) profile picture
Nick Carr
@ItsReallyNick22 Apr 2019
We found the full CARBANAK source code & previously unseen plugins. Our #FLARE team spent 500 hours analyzing the 100,000+ lines of code. @mykill & @jtbennettjr just dropped day 1 of their 4-part blog series: fireeye.com/blog/threat-rese… Source code linked in blog. #CarbanakWeek 🦈💳
Image from Nick Carr (@ItsReallyNick)
15
424
40
757
Load more