Black Hat '26 / KubeCon '26 speaker Cloud security research • GCVE GNA 119 Kubernetes / Azure / GCP / AWS https://xitter.cf/t.co/Wsrh2ypC9Z
Philadelphia
Joined May 2026
- Tweets45
- Following19
- Followers42
- Likes549
Pinned Tweet
Microsoft on fixing ASO privilege escalation:
2024: "A reasonable ask, but haven't had the time"
2026: "Still in the backlog"
Me: publishes CVSS 9.9 giving namespace devs Subscription Owner in 60 seconds
Microsoft: "By design"
olearysec.com/research/azure…
Most Kubernetes clusters are running cluster-admin bindings that started as "temporary."
Temporary three years ago.
Wrote up how to find them and fix them without breaking prod, for @goteleport: goteleport.com/blog/how-to-r…
Remember trust falls at corporate team building?
AWS ACK IAM Controller does one every time a namespace user creates a Role CRD. Except nobody catches you. You just fall straight into their AWS account.
olearysec.com/research/aws-a…
Apple: "Think Different"
Me: *passes 1 byte, gets back 7,799 bytes of heap*
Apple: "no not like that"
olearysec.com/research/apple…
Justin OLeary retweeted
THE WAIT IS OVER! Join the BSides Philly team this December 11, 2026, at LIVE! Hotel and Casino! Call for papers and early-bird ticket announcements are coming later this September. Stay tuned!
Questions? Visit bsidesphilly.org
Voice Credits: David Giaimo
Justin OLeary retweeted
Your TV might be one of 216,000,000 LG smart TVs sold worldwide.
Researchers rooted one and pulled plain text transcripts of what people said in the room.
It kept recording while the screen looked off.
If your TV can do that, it’s time to look at everything else on your desk👇🏻
Disclosed: Azure LLC cache side-channel. Cross-tenant keystroke timing extraction, Z=318.77, PoC attached.
MSRC verdict: "moderate severity"
MSRC 39 days later: "hey are you still publishing this at Black Hat"
olearysec.com/research/azure…
Justin OLeary retweeted
I reported two privilege-escalation bugs in Google Cloud's Vertex AI. Google closed both not with a fix, but with a note in the docs.
A warning about a couple of warning boxes that shouldn't go unremarked. 👇
kattraxler.cloud/the-docs-sa…
Justin OLeary retweeted
This is how the FBI can check the email address associated with your Android phone Google account, in 5 sec, without your PIN, without unlocking
#Privacy #Android17 #Security
This is a prohibited topic. Do not share!
One CRD. Any namespace. Your secrets.
PrometheusUnbound: Cross-namespace secret theft in Google Managed Prometheus.
olearysec.com/research/gmp-c…
trust no deputy is up — my @BlackHatEvents talk on critical confused deputy flaws in azure and gcp, and how vendors responded when i reported them
olearysec.com/talks/trust-no…
Your cloud workload identity is probably misconfigured.
6 attack patterns for OIDC hijacking across GCP, Azure, and AWS — with hunting commands to find them before someone else does.
New playbook:
olearysec.com/playbooks/oidc…
Justin OLeary retweeted
Google told researcher 'Nice catch!' Then denied bug bounty for flaw it still hasn't fixed theregister.com/security/202…
Google to Config Connector customers: if you followed our docs, that's on you.
theregister.com/security/202…
Full technical writeup: olearysec.com/research/confi…
AI’s deadliest feature isn’t intelligence. It’s the certainty it lends to people who’ve stopped thinking.
AI identified Jalil Richardson - with only 85% accuracy - as person in video who sold someone a stolen car. Police never checked his alibi. Richardson spent months in prison, lost job, home, and custody of two children before police admitted AI was wrong yahoo.com/news/us/articles/a…
Justin OLeary retweeted
Microsoft ridiculed a researcher reporting very serious bugs to them, deleted his account, and no bug bounties were paid. These should be high payouts. Now $MSFT is threatening legal action and speaking as if a researcher’s proof of concept code is illegal.
This is because the unappreciated researcher released more zero-day vulnerabilities on his own and had those GitHub/Lab accounts banned.
They were serious enough that Microsoft is scrambling to fix them but wasn’t serious enough to be paid or recognized, instead was ridiculed.
News of the Nightmare Eclipse exploits are everywhere but read the personal blog of the researcher, Nightmare Eclipse:
deadeclipse666.blogspot.com/…
Decentralized identity verification via Keyoxide. This hash cryptographically proves I control this Twitter account, my Mastodon (@[email protected]), and my PGP key — without trusting any central authority.
Verify: keyoxide.org/wkd/contact@ole…