@ReThinkSec

@JoeSpikey & @LoneTreePress #CISO | #security | #AppSec | #PenTesting | #Cybersecurity | #Leadership

 Seattle, WA & Bozeman, MT
rethinksecurity.io
Joined April 2020
  • Tweets80
  • Following207
  • Followers54
#AppSec teams should think in three phases: Awareness, Enablement, and Enforcement to work efficiently with development teams. Click through for more info. #security #prodsec #ciso #infosec #cybersecurity rethinksecurity.io/posts/the…
2
1
#iOS14 adds a warning if an app inspects your clipboard. You can see a demo of this in this video. youtube.com/watch?v=pRSWdtoU…
That was a trick question, those are all trackers. What’s worse those are all used on a single page on a single site.
1
Don’t fall victim to somebody else’s poor #AppSec leading to a #databreach minted.com/data-incident-not… Use unique credentials for each site with a #password manager like @1Password, @LastPass or @dashlane Check yourself at haveibeenpwned.com/
Minted data breach loses credentials and PII

ALT Minted data breach loses credentials and PII

1
1
1
WOW! @zoom_us acquires @KeybaseIO! This shows imporessive commitment to #security and #Encryption. This will be a huge boon for e2e encryption if they get it working. blog.zoom.us/wordpress/2020/…
1
How do you learn a new topic? For me it’s like exploring a new city, neighborhood by neighborhood. Do you explore area by area, or have some other way of getting what’s important into your brain? #learning #improvement rethinksecurity.io/posts/a-t…
Great list of can’t miss web hacking techniques from @PortSwigger portswigger.net/research/top…
How @generalelectric was able to integrate #security into their #agile dev process. Great insight into how to pull this off for hundreds of applications! youtube.com/watch?v=dkDQ-sfv…
1
1
1
Replying to @Guardicore
@Guardicore published a great writeup on #CVE-2020-3952 From the TL;DR "A bug in a function named VmDirLegacyAccessCheck which causes it to return “access granted” when permissions checks fail." guardicore.com/2020/04/pwnin…
2
1
6
It has been a long year for Zoom this month, they’ve released dozens of patches recently. Learn what they have learned in this new ReThink article. rethinksecurity.io/posts/eve…
Every Application Fails: A Study in Zoom

ALT Every Application Fails: A Study in Zoom

1
Stop fixing security vulnerabilities
Not surprising, anybody remember "unbreakable" Oracle?
Threatpost
@threatpost9 Apr 2020
Remember the "unbreakable" smart padlock that was found riddled with #security flaws? The @FTC has now slapped Tapplock with an official complaint for deceptive security claims, which could lead to fines down the road. threatpost.com/unbreakable-s…
Sounds like #icq is back. #encryption? No. US Based? No, Russia. #security? 404 #datacollection? Yes! I think I’ll skip this. #Zoom might be struggling with their newly found success, but ICQ is not the answer.
Load more