WithSecure Labs

We're happy to announce WithSecure is a Bronze sponsor for fwd:cloudsec! @WithSecure withsecure.com

Don't worry though, @realmatthours is also nice enough that he's tried to make it easier to spot and kick those pesky hackers out of your estate as well: labs.f-secure.com/blog/detecting…

@realmatthours is here proving his chops in Azure DevOps and will show you how to attack and protect your code and pipelines: labs.f-secure.com/blog/performin…

@Yogehi decided it was time to remind us all of that time he could have installed a cute version of Drozer on your Samsung phone @FSecure @FSecure_Consult labs.f-secure.com/advisories/sam…

@j1gst4k3r the Plone ranger caching his way to XSS labs.f-secure.com/advisories/plo… @FSecure_Consult @FSecure CVE-2022-23599

What did the printer say when it saw @TimoHirvonen and @dark_k3y? Oh sheet! Read how the @FSecureLabs Red Team is Printing off the land by printing their own shellz - labs.f-secure.com/publications/p… CVE-2021-39237 (labs.f-secure.com/advisories/hp-…) & CVE-2021-39238 (labs.f-secure.com/advisories/hp-…)

We heard y'all might be having problems playing with the Financial Information eXchange protocol. Can we FIX it? Yes we^@AppSecOllie can! He's developed a Burp extension, it's a bit janky, and you might say it's a bit of a Fixer Upper.... labs.f-secure.com/blog/a-bit-of-…

Web proxies got ya down when it Mattermost (thanks @mariuszbit)? JIRA at those pesky sysadmins and keep the Discord with your C2 agents - Please enjoy responsibly! - github.com/FSecureLABS/C3 #C3 #RedTeam #BlueTeam #PurpleTeam

Ooooof @PaloAltoNtwks out of the frying pan(GPS) and into the fire that is @FSecureLabs @1njected discovery of yet another LPE in GlobalProtect VPN Client adding CVE-2021-3057 (labs.f-secure.com/advisories/pal… & security.paloaltonetworks.com/CVE-2021-3057) to the @CrowdStrike fry-up (crowdstrike.com/blog/exploitin…)

cc @pajp

See how Rasmus caught Gatekeeper Gatesleepering on the job at labs.f-secure.com/blog/the-disco… and labs.f-secure.com/blog/analysis-…! #CVE-2021-1810 #macos

William Söderberg strikes again, disclosing a privesc in Qiata FTA. But Kudos to Secudos, who patches faster than a Miata for Qiata! labs.f-secure.com/advisories/sec…

As @__invictus_ shows - you are never too old to play with PuTTY labs.f-secure.com/blog/playing-w…

A non OP-TEEmal configuration allows for LPE. Grab yourself a cup of TEE and read the advisory from F-Secure Foundry (f-secure.com/gb-en/consulti…), Andrej Rosano and @AndreaBarisani - labs.f-secure.com/advisories/op-…

Enjoy unlimited Mimosa's at our bottomless breach labs.f-secure.com/advisories/mim…

A prelude to ransomware - we have released our write up of analysis into SystemBC mapped to @MITREattack and with @sigma_hq rules for detection labs.f-secure.com/blog/prelude-t…

Member when it was easy to break into your Samsung account? @yogehi members labs.f-secure.com/advisories/sam…

If you couldn't make it to yesterday's workshop here's the recording: youtube.com/watch?v=Uen-gD… and the slides: f-secure.com/content/dam/f-…

Ever explored the mystic vista of Azure attack detection? Join @_masande as he goes through the basics of detecting an end-to-end cloud-native attack labs.f-secure.com/blog/attack-de… labs.f-secure.com/blog/attack-de… labs.f-secure.com/blog/attack-de…

Heavy Metal Debugging - a how to on reverse engineering zOS apps by @Jabellz2 labs.f-secure.com/blog/heavy-met…