Privilege Escalation Engineer Principal Consultant @ Reversec (formerly WithSecure Consulting)
@bugch3ck.bsky.social
Joined August 2011
- Tweets6K
- Following372
- Followers1.9K
- Likes4.8K
Jonas Vestberg retweeted
What is OBJECT_ATTRIBUTES and how it's used?
The Windows API hides it, but every native create or open call needs it.
Full write-up: trainsec.net/library/windows…
Jonas Vestberg retweeted
Pippi Långstrump ai-genererad parodi i gammal japansk samurai-filmstil. Jag har följt utvecklingen av de här ai-modellerna inom generativ bild, video, musik och ljud, hands on sedan 2022. Jag är helt blown away av det här. Vi är alltså här nu. #aivideo #svenskfilm #parodi
🤖 Made with AI
Jonas Vestberg retweeted
⚒️ BTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive
⚠ Trusted Remediation Primitives with Undocumented Internals.
🔓 15+ years. Unchanged. Unblockable.
🤔 What if an attacker learned its language? We did.
👇
research.checkpoint.com/2026…
Jonas Vestberg retweeted
Weaponising MDM - running a fake MDM server and pwning people as SYSTEM with two clicks (if they have permission to elevate). Poc included.
blog.amberwolf.com/blog/2026…
Jonas Vestberg retweeted
BloodHound is 10 🎉
To celebrate, creators @_wald0, @CptJesus & @harmj0y joined for a special two-part #KnowYourAdversary.
They reminisce on the first attack graphs and look ahead to what’s next for BloodHound.
1️⃣: ghst.ly/4xT4WdA
2️⃣: ghst.ly/4zIIeqj
Jonas Vestberg retweeted
So, you've deployed NDES on-premises to issue SCEP certificates with #Microsoft Intune. Did you know it's leaking internal domain information to the Internet? Here's how to detect and remediate this issue. rmhci.co/3TRfYkR #mobility #security #identity #pki #msintune
Jonas Vestberg retweeted
Patch SCCM with learn.microsoft.com/en-us/in… or you're likely vulnerable to a new hierarchy takeover technique (CVE-2026-47301) discovered by Omri Baso from @XMCyber_ that worked in my lab out of the box. MS's KB description doesn't do the impact justice. medium.com/@omribaso/from-do…
Jonas Vestberg retweeted
Someone dropped this Windows LPE writeup online yesterday along with a PoC.
But the mentioned CVE-2026-62737 is not released yet, maybe it will be in the Patch Tuesday tomorrow.
And the PoC still work in the lastest version of Windows 😂
xz.aliyun.com/news/92658
Jonas Vestberg retweeted
Our Black Hat talk on the OpenAI-Hugging Face incident is now live on youtube.
This is a watershed moment for the industry. I encourage all defenders to watch, consider how attack dynamics will imminently change, and plan for accelerating defense.
youtube.com/watch?v=87DyyMV0…
Jonas Vestberg retweeted
use this one WEIRD trick to make your customers never purchase your car again
Check this out, today when you start your BMW, you see an advert for #spiderman #brandnewday
Jonas Vestberg retweeted
Not sure about posting here again but I want to go back to doing what I love: making cool art for hackers and it seems like most of you stayed here.
So, I still hate the guy in charge but I might post some stuff here.
Jonas Vestberg retweeted
Happening now! @bagelbyt3s is kicking of his briefing session presenting original research into a new Attack Path technique that results in full WSUS infrastructure takeover. #BHUSA
Jonas Vestberg retweeted
In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different organizations.
Our post describes what happened, how it happened, and what we’re changing. We encourage other AI developers to perform similar reviews.
We conducted this review together with @Irregular, one of our evaluation partners, and thank them for the joint investigation and their collaboration on this post. This type of collaboration is increasingly critical to safe, rigorous evaluation of models, and we look forward to continuing to work together on security.
anthropic.com/news/investiga…
