Daniel Shaulov

Kudos to @Bitdefender 👏 I came across a file that’s part of their software with no DACL set— at first glance, it looked like a serious security issue. Tried modifying it → blocked. ✅ A quick investigation revealed they use a filesystem filter driver (vlflt) to protect their files. A simple yet robust approach. Many competitors don’t implement this. Could be vulnerable if an attacker disables the filter driver.

Thought I found a 0-day… turns out it’s CVE-2025-47962. Surprising to see issues like this still present in @Microsoft products.

Switch 0 to 1. What happens next is on you :) (⚠️ VM only)

This behavior introduces possible lateral movement and privilege escalation vectors - though most require admin rights to exploit.

If you're wondering - when you click one of these links, it opens using the last logged-on user's context (if they still have a session). The responsible process is LockApp.exe, which runs per logged-in user and stays suspended when their session is active but the PC is locked.🧵

Not a security risk: x.com/i/flow/login?r…

Just read @ChenCravat 's post on why Windows 95 setup involves MS-DOS, Windows 3.1, and then Windows 95. It’s fascinating. devblogs.microsoft.com/oldnewthing/20…

Exploiting the DOS-to-NT path conversion can help bypass MalwareBytes protection. Reported to MalwareBytes, no bounty awarded. #Cyber #CyberSecurity #InfoSec #Malware #Vulnerability #TechNews #BugBounty

@CVEnew More information here: @danielshaul0v/malwarebytes-premium-security-av-bypass-cve-2024-44744-97bb6192ed4a" target="_blank" rel="nofollow noopener">medium.com/@danielshaul0v…

CVE-2024-44744 An issue in Malwarebytes Premium Security v5.0.0.883 allows attackers to execute arbitrary code via placing crafted binaries into unspecified directories. cve.org/CVERecord?id=C…

Got access to a victim's machine? There’s a feature in ׳Cisco Secure Client׳ that allows you to capture all network traffic on the machine. Add these registry keys (see screenshot) to enable it. @cisco #CyberSecurity #InfoSec #PenTesting #RedTeam #EthicalHacking #NetworkSecurity

Fun fact: Every time you take a screenshot with Win + Shift + S, a zombie process is created. @zodiacon #Windows #tech @Microsoft @Windows

@MalDevAcademy @HackSpaceCon 🙏

We’re excited to be giving away 5 tickets for @HackSpaceCon All you need to do to qualify is comment on this post. We will select 5 winners on Friday.