Mike Gibson (@mdgsecurity) profile picture

InfoSec enthusiast, husband, father and Patriots fan!! SVP Customer Success, Services and Support @ Rapid7.

Texas, USA
Joined March 2009
Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)Photo by Mike Gibson (@mdgsecurity)
Replying to @dustin_childs
@Dustin_Childs & @thezdi & @MaliciousInput provide examples of systemic problems with security patches and how those problems negatively impact enterprise security, based on disclosing over 9,500 vulnerabilities across 17 years, in #BHUSA Briefing informatech.co/3wvA6e4
6
13
Here's a quick demonstration of the #Microsoft Teams 0-click exploit demonstrated by @starlabs_sg during #Pwn2Own last week.
1
45
3
140
Since #Ubuntu has a new release, we will be using version 22.04 at #Pwn2Own Vancouver instead of 21.10. We've updated the rules to reflect this change. Hope to see you there. zerodayinitiative.com/Pwn2Ow…
1
4
25
We’re excited to announce that @TrendMicro has joined the Cortex XSOAR Marketplace! Learn more about Vision One here! bit.ly/3oQ9yQB #securityautomation #xsoar #marketplace #VisionOne
1
2
We have joined the Cortex XSOAR Marketplace! Trend Micro Vision One and Cortex will work seamlessly to simplify incident investigations and drive automated response. Learn more about Vision One here: bit.ly/3oPWJFY
2
8
The trophy and jackets for #Pwn2Own Austin have arrived! Who will win the Master of Pwn? Find out next week as #Pwn2Own Austin kicks off. #P2OAustin
7
1
45
Mike Gibson retweeted
So @Scott_Helme got hit with a DMCA takedown for sharing a letter from a patent troll that included his signature. Apparently it constitutes “personal biometric data” so it’s *very* important that you don’t RT this tweet that includes the signature. Do. Not. RT. 🍿 🍿 🍿 – at Gold Coast, Queensland
There's a document here filed 20 Jul 2011 that contains the same signature and is a matter of public record, so I don't know why he's so bothered about this one 🤷‍♂️ find-and-update.company-info…
10
184
5
241
Mike Gibson retweeted
I've seen a few researchers publish the configured REvil C2 domain list for IOCs and just wanted to add some additional context that you may find useful...
4
114
11
243
If someone asked me what would be the single most effective method to detect phishing attacks I'd say it's monitoring sub processes spawned by Microsoft Office products Requirement: Parent/Child relationships as provided by Sysmon EventID 1 github.com/SigmaHQ/sigma/blo…
11
136
8
408
Confirmed! OV used a pair of bugs to compromise #Microsoft #Teams and get code execution. He wins $200,000 and 20 points towards Master of Pwn. #Pwn2Own #P2O
3
52
9
175
With 2 attempts done, we've now awarded $300,000. Our next attempt will be OV targeting #Microsoft #Teams at 1300. If that hits, it's another $200,000 and 20 Master of Pwn points. We could be well over the half million mark by the end of day 1. #Pwn2Own
11
55
Coming up at 1130, the Devcore team will targeting #Microsoft #Exchange in the Server category. $200K and 20 Master of Pwn points are on the line.
8
2
63
For everyone finding variants while analyzing the in-the-wild #Exchange bugs, remember they are worth $200K at the upcoming #Pwn2Own contest. Bugs reported at the event have a 90-day disclosure timeline. Remember, no more patch Tuesdays before the contest. bit.ly/3ooKM6J
Proud to be raising a young man that recognizes why we need a day to celebrate women’s accomplishments and equality (and thinks to wish me Happy International Women’s Day! ) women and men of all ages are in this together. @BlueLineWithJB #InternationalWomensDay – at Ottawa, Ontario
2
1
11
Print this out and hang it up.
9
134
19
496
Southlake Evening Water Update facebook.com/john.huffman.37…
2
2
1
5
Mike Gibson retweeted
ERCOT calls for rotating outages as extreme winter weather forces generating units offline. “Every grid operator and every electric company is fighting to restore power right now,” said ERCOT President and CEO Bill Magness. ercot.com/news/releases/show…
1,620
620
464
895
In our recent interview with @kingerpawan, he addressed the benefits of introducing APIs in businesses today and how cybercriminals can still exploit these sophisticated tools at the same time. #TurningTheTide2021 Read more: bit.ly/TurningTheTide2021
4
2