
Our mission is simple: stop threats and help organizations #BeEverydayReady. We share the latest analysis, threat research, and findings from #HowlerCell.
Joined October 2011
- Tweets7.6K
- Following841
- Followers11.8K
- Likes888
Return of the Eclipse: #MSNightmare and #RoguePlanet
Analysis from @Cyderes #HowlerCell Threat Research team.
Hours after Microsoft shipped June Patch Tuesday fixes, the researcher resurfaced on GitHub as MSNightmare and published RoguePlanet, the seventh exploit in the cluster.
• New handle: MSNightmare (profile lists affiliation as "Microsoft")
• New exploit: RoguePlanet, a Defender zero-day
• Blog quote: "Microsoft cannot unwrite my code"
• Mirrors live on self-hosted Git: git.projectnightcrawler[.]dev/NightmareEclipse
• Blog: deadeclipse666.blogspot[.]com
The researcher is testing a ban-resistant publication model backed by self-hosted mirrors. Account takedowns no longer end the campaign.
#ThreatIntel #ZeroDay #PatchTuesday #VulnerabilityResearch #ThreatResearch
Read: cyderes.com/howler-cell/rogu…
Cyderes retweeted
From Crypto Wallets to a 100M-User VPN: Inside an Active STX RAT Supply Chain Campaign
cyderes.com/howler-cell/cpui…
Credit to @xvpnteam for the fast fix and public acknowledgment of the report. Ten days from disclosure to patch is what responsible vendor response looks like.
@Cyderes #HowlerCell will keep publishing research like these so defenders can move faster than active campaigns.
Read the full analysis: cyderes.com/howler-cell/cpui…
X-VPN's official statement: xvpn.io/resources/statement-…
Cyderes retweeted
🚨 New #HowlerCell research from @Cyderes
Bring Your Own Updates (BYOU): Abusing Advanced Installer Updaters for Stealthy Code Execution.
In this deep dive, I uncover a supply chain risk in Installer frameworks, as part of series, we are uncovering Advanced Installer’s update mechanism (v22.7, May 2025) that allows attackers to abuse the -url parameter in updater.exe.
Because the updater accepts unauthenticated and unsigned configuration files, attackers can push arbitrary payloads that appear legitimate, creating a stealthy path for code execution under the guise of a normal update.
From a defender’s perspective, this is a reminder to:
* Monitor outbound updater requests.
* Enforce code signing and certificate validation on update channels.
* Implement integrity checks for update configurations.
Full technical breakdown: cyderes.com/howler-cell/abus…
Grateful for the coverage by @DarkReading :
darkreading.com/application-…
#SupplyChainSecurity #BYOU #ThreatResearch #CyberDefense #Cyderes #HowlerCell
Cyderes retweeted
The Shadow AI Dilemma: Balancing Innovation And Data Security In The Workplace hubs.li/Q02-2nGc0 Written by Chris Schueler of Cyderes
Cyderes retweeted
One of the things I pride myself about with this amazing company is our inclusion and the opportunity we give people. I've had the pleasure and privilege of working with amazing women at @Cyderes ! Happy International Women's Day! #InspireInclusion
Cyderes retweeted
Watch as our VP of Digital Forensics and Incident Response, Dr. Kall Loper, shares how our expert team helps organizations investigate, contain, and recover from cyber incidents whilst maintaining uninterrupted business operations.
#DigitalForensics #IncidentResponse #Cyderes
Cyderes DFIR Service Snapshot
Cyderes retweeted
Fantastic @Cyderes Dinner Event this evening in Atlanta! Great to connect with @robertherjavec .
#SharkTank🦈 #CyberSecurity 🔐 #TSYS #GlobalPayments #VicianaData🔥
Cyderes retweeted
Part 2 of “The Rising Impact of Cyber Regulations” is going live THIS Thurs, where industry leaders from @nightdragon, @Cyderes, and @coalfire continue the conversation about the rising complexity of #cyberregulations. @CoalfireCEO @robertherjavec #compliance #cybersecurity
Cyderes retweeted
NOW LIVE: Dive into the world of cyber regulations in today’s video featuring industry luminaries @Cyderes CEO @robertherjavec, @NightDragon CEO Dave DeWalt, and @coalfire CEO Tom McAndrew! Get their hot take here: coalfire.com/insights/resour…
Cyderes retweeted
The @Cyderes team put together absolutely critical research on the state of #ransomware. Give it a read !
The report analyzes intrusion sets associated with the most prolific ransomware operations during 2022.
info.cyderes.com/cyderes_ran…
Cyderes retweeted
STAR Struck, CELEBRITY Sighting in SEATTLE last week... oh yes, and @robertherjavec is also the CEO of the worlds greatest Cybersecurity firm Cyderes, "CYber DEfense & RESponse... It's what we do"
This is my absolute favorite employment of my entire caree…lnkd.in/gfRzyDxz
Cyderes retweeted
"Train Like You Fight: Expert Tabletop Exercises to Improve Incident Response" at #TechnoSecurity presented by Kall Loper from Cyderes and Robert O'Leary from Nuix
@technosecurity
Cyderes retweeted
TY @Cyderes for hosting us this morning for coffee and conversation around STEM impact and funding strategies by generous KC corporate funders! Beautiful morning alongside Augusta Hole #3 Golden Belle.
Cyderes retweeted
Had a great time with the @Cyderes team, customers, and partners at this week’s #CYBRIMPACT in Boston – at Boston, MA
Cyderes retweeted
ResponderCon 2022 reply: Dr. Kall Loper of @Cyderes highlights the challenges of communication between executive, risk, and technical teams during a ransomware attack and provides tips for bridging the gap. hubs.li/Q01NlHV90
Cyderes retweeted
What an incredible experience our Marketing II students got today as they got to learn about the process of rebranding a company as they go through a merger. Cyderes is an incredible business & doing great things for KC! @OWNovacekOWLS @ADButlerOW @MaBlackOW @OlatheCTE @Cyderes – at Kansas City, MO
Cyderes retweeted
Our CEO @robertherjavec was a big draw at our booth today at #RSA2023 ! Check out @cyderes at Booth 1855 all week. – at San Francisco, CA
Cyderes retweeted
Join executives from @Cyderes and @GoogleCloud for appetizers, conversation, and cocktails at Local Kitchen after a busy day at #RSAC2023:
lnkd.in/dXeKYWFG
#GoogleCloud #Cyderes #Chronicle
































