Andrew Ruddick

132 posts

Andrew Ruddick banner
Andrew Ruddick

Andrew Ruddick

@arudd1ck

Breaking software. Security Researcher @ Microsoft. Views are my own.

United Kingdom Katılım Ekim 2021
211 Takip Edilen558 Takipçiler
Andrew Ruddick
Andrew Ruddick@arudd1ck·
Had my first serious play with a fuzzer. 9 CVEs went out today for issues I found with that in SQL Server’s Native Scoring feature. Those include arbitrary pointer execution, UAF and OOB memory accesses. msrc.microsoft.com/update-guide/v…
English
1
2
36
4.5K
Andrew Ruddick retweetledi
Microsoft Threat Intelligence
Microsoft Threat Intelligence@MsftSecIntel·
Microsoft identified a North Korean threat actor exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution. Our assessment of ongoing analysis and observed infrastructure attributes this activity to Citrine Sleet. msft.it/6010l7S6w
English
25
245
579
102.9K
Andrew Ruddick retweetledi
National Institute of Standards and Technology
Quantum computers could imperil the security of confidential electronic information, such as emails. To counter this threat, NIST has finalized its set of three encryption algorithms designed to withstand a future quantum computer’s cyberattacks: nist.gov/news-events/ne…
National Institute of Standards and Technology tweet media
English
15
144
289
63K
Andrew Ruddick retweetledi
Can Bölük
Can Bölük@_can1357·
Excited to share my latest article: PgC - a novel approach to disable Patchguard during runtime using basic memory management principles. It has worked against every version of Patchguard for the last 7 years, without needing any updates! blog.can.ac/2024/06/28/pgc…
English
14
122
326
47K
Casual
Casual@jo42636195·
@arudd1ck Hey, I only just saw his ad and it looks like you're no longer accepting applications - is it likely you'll advertise for more/unfreeze soon?
English
1
0
0
17
Andrew Ruddick
Andrew Ruddick@arudd1ck·
We just prioritised Security above all else, including new feature development. This is an awesome chance to help us make real security improvements from the inside (hint: we’re still hiring). 😉
Microsoft Security@msftsecurity

We’re putting security above all else at Microsoft by expanding the Secure Future Initiative—our commitment to delivering solutions that meet the highest possible security standards. Learn more: msft.it/6017YRK9U #SecureByDesign #CloudSecurity

English
0
0
1
638
Andrew Ruddick retweetledi
Ivan Krstić
Ivan Krstić@radian·
🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. security.apple.com/blog/imessage-…
English
7
123
361
60.7K