Principal Security Consultant based in London
Joined January 2016
- Tweets148
- Following106
- Followers128
- Likes103
maxicorbs retweeted
Imagine the feeling of a long-forgotten canary token triggering in one of your client's estates, which leads you down a path to catch and remove a sophisticated red team...
No need to imagine, as @umairq_ has written up a blog:
labs.jumpsec.com/active-cybe…
maxicorbs retweeted
Tool Release!
We've been having a lot of fun recently bypassing swathes of security controls using alternative web technologies to smuggle payloads right past mail security products. We've open-sourced the tool that we've been using to leverage WASM:
github.com/JumpsecLabs/WALK_…
maxicorbs retweeted
A great weekend for our #Adversary simulation team at @BSidescymru. Big shout out and thanks to Sunny and @CorbridgeMax for fantastic presentations and some great insights. A job well done!
@JumpsecLabs #redteam #bsides
maxicorbs retweeted
🚨 Tool Release 🚨
We've just open-sourced our #automation scripts for setting up #vulnerable #Azure environments to practice #cloud red teaming. It's basically free to run and has hints to help you along your journey if needed 💪
#AHHHZURE
github.com/gladstomych/AHHHZ…
maxicorbs retweeted
Great to see @Maxicorbs, at @UKCyberWeek presenting insights about #cloud #redteaming and security concerns that are being introduced & how red teamers and threat actors are leveraging them to great effect!
#azure, #aws #gcp #security #cybersecurity #risk
ALT Great to see Max Corbridge at UK Cyber Week, presenting insights about #cloud #redteaming and security concerns that are being introduced by transitioning to the cloud, as well as how red teamers and threat actors are leveraging them to great effect! For more insights and how to mitigate these risks chat to Max and his team! #azure, #aws #gcp #security #cybersecurity #risk
maxicorbs retweeted
The vast amount of data that builds up during a #purpleteam engagement can quickly become overwhelming if not managed properly. Check out our experience of using the #opensource framework VECTR to solve this problem!
labs.jumpsec.com/vectr-for-p…
maxicorbs retweeted
We warned Microsoft back in June about the risk of external tenant interaction being used for initial access, I’m honestly expecting the prevalence of this to sky rocket in coming months. That doesn’t even take into account the IDOR they chose not to fix.
labs.jumpsec.com/advisory-id…
Did an investigation regarding DarkGate delivered by Teams together with my fantastic colleague Jakob Nordenlund at @Truesec.
A lot of good IoC for all defenders!
truesec.com/hub/blog/darkgat…
maxicorbs retweeted
Having the external collab setting as default (allowing cross org comms) has allowed us use that technique during red teams on several occasions. It also led to @CorbridgeMax and I finding this:
labs.jumpsec.com/advisory-id…
Not limiting external collab is a real, impactful gap.
Microsoft has identified highly targeted social engineering attacks by the threat actor Midnight Blizzard (previously NOBELIUM) using credential theft phishing lures sent as Microsoft Teams chats. Get detailed analysis, IOCs, and recommendations: msft.it/60199EEkv
maxicorbs retweeted
Full disclosure - this was published yesterday by one of my team mates at @cyvisory
Mr @pfiatde :
xitter.gq/pfiatde/status/1679146…
Microsofts rebranding of Azure AD to Entra ID allows attackers to craft a nice fullchain attack.
There were a lot good phishing domains not claimed, seems like Microsoft did not care about this.
Made a PoC for @cyvisory. Details below:🧵👇
maxicorbs retweeted
Malware delivery to Microsoft Teams users made easy - helpnetsecurity.com/2023/07/… - @Octoberfest73 @Medu554 @CorbridgeMax @tde_sec #MicrosoftTeams #Phishing #RedTeam #SocialEngineering #Vulnerability #InitialAccess #CybersecurityNews #InfosecNews
maxicorbs retweeted
Its nice to see some tooling off the back of some of our prior research. This demonstrates the impact of allowing external Teams collaboration.
New tool exploits Microsoft Teams bug to send malware to users - @billtoulas
bleepingcomputer.com/news/se…
maxicorbs retweeted
UnSafeLeaks - an emerging threat disregarding rules of engagement, getting personal and vicious against organisations and individuals.
Read more about the implications their activity could have here. ➡
jumpsec.com/guides/compound-…
#ransomware #cybernews #CybersecurityNews
maxicorbs retweeted
NEW BLOG: AiTM/ MFA phishing attacks in combination with “new” Microsoft protections (2023 edition)
In this blog, I'm going to explore all the new and existing capabilities (Token protection/ attack disruption and more)
jeffreyappel.nl/aitm-mfa-phi…
#AzureAD #MicrosoftSecurity
maxicorbs retweeted
Ryan Saridar (@RyanSaridar) will be talking to us about Finding a vulnerability in Half Life 🦀 (sorry Ryan, there's no headcrab emoji 😭)
maxicorbs retweeted
Active Directory Certificate Services: The Latest Attacks - with Tim Medin xitter.gq/i/broadcasts/1lPKqBXwZ…
maxicorbs retweeted
Microsoft Teams vulnerability allows attackers to deliver malware to employees - helpnetsecurity.com/2023/06/… - @CorbridgeMax @tde_sec @JumpsecLabs #MicrosoftTeams #SocialEngineering #RedTeam #Research #Vulnerability #InitialAccess #CybersecurityNews #InfosecNews
maxicorbs retweeted
Microsoft Teams Vulnerability Let Attackers Deliver Malware From External Accounts: The latest version of Microsoft Teams had a security flaw uncovered recently by Max Corbridge (@CorbridgeMax) and Tom Ellson (@tde_sec), JUMPSEC’s Red Team members. Due… gbhackers.com/microsoft-team…
maxicorbs retweeted
Proud day for @JUMPSEC to have some of our #redteam #research posted on @BleepinComputer! Well done @CorbridgeMax and @tde_sec.
If you've not already then drop a follow as we've got much more in pipeline!
#security #IDOR #Microsoft #bug #bugbounty
Microsoft Teams bug allows malware delivery from external accounts - @billtoulas
bleepingcomputer.com/news/se…
maxicorbs retweeted
One of my favourite things at @JUMPSEC has been listening to @CorbridgeMax antics, it's pretty cool and makes me dead proud to see the work he and @tde_sec have done appearing on Bleeping computer. bleepingcomputer.com/news/se…
maxicorbs retweeted
The "Teams accounts not managed by an organization" setting is set to "On" by default.
techcommunity.microsoft.com/…
Please review this setting now and switch to "Off".
admin.teams.microsoft.com/co…
