Security Researcher, @inicmu alum, gamer, snowboarder, weekend baker, PPP member
Joined March 2009
- Tweets307
- Following444
- Followers1.1K
- Likes375
Pinned Tweet
Found an 0day privesc for macOS Catalina exploited in the wild! If you're still on Catalina, please patch or upgrade.
support.apple.com/en-us/HT21…
Erye Hernandez retweeted
Will post more later but: please check out @theori_io's landing page for AIxCC! We've got source code, agent traces, and blog posts to understand the system we built!
theori-io.github.io/aixcc-pu…
Erye Hernandez retweeted
MMM takes 1st at @defcon CTF! Had a great time playing with our friends @maplebaconctf and @theori_io as @mmm_ctf_team! 🍁🦆🗝
Great job to Katzebin, StarBugs, and all the other teams! And thanks to @Nautilus_CTF for organizing!
Erye Hernandez retweeted
@PlaidCTF, @theori_io (The Duck), and @maplebaconctf are joining forces to play DEFCON as Maple Mallard Magistrates. Some PPP members also play on The Duck & Maple Bacon, so this allows all of us to keep playing on the same team. See you all at DEFCON finals!
Erye Hernandez retweeted
PlaidCTF is proud to announce visionary innovation and the actualization of experience in the hacking space. We’re moving beyond the ordinary to usher in a new paradigm of pwning. Welcome to the future. Welcome to Plaidiverse.
Join us on April 8 at plaidctf.com!
ALT PlaidCTF 2022: Plaidiverse – April 8 at 21:00 UTC on plaidctf.com
Erye Hernandez retweeted
Session 1 speakers are set for today's Wicked6games, don't miss your chance to register: hubs.li/Q016B3TH0
@Q8Thunders|@marigalloway|@JulieASparks|@eryeh|@AsuNa_jp
Erye Hernandez retweeted
The exploit for Safari is quite complex and massive. I really wanted to understand exactly what the vulnerability was and how it was mitigated, so I dived into the world of browser exploits for a few days and tried to explain how leaking object addresses was possible.
#ESETresearch uncovers new Mac malware DazzleSpy, delivered using watering hole on a pro-democracy Hong Kong radio station website. Payload was launched as root without user interaction, using exploits for Safari and macOS. @marc_etienne_ @cherepanov74 welivesecurity.com/2022/01/2… 1/7
Erye Hernandez retweeted
#ESETresearch uncovers new Mac malware DazzleSpy, delivered using watering hole on a pro-democracy Hong Kong radio station website. Payload was launched as root without user interaction, using exploits for Safari and macOS. @marc_etienne_ @cherepanov74 welivesecurity.com/2022/01/2… 1/7
Erye Hernandez retweeted
Google uncovered a sophisticated attack that leveraged both iOS & macOS exploits (n-/0-days) to infect Apple users! 👀
Interested in a triage of the macOS implant (named OSX.CDDS), including:
▫️ Installation
▫️ Persistence
▫️ Capabilities
📝 Have a read:
objective-see.com/blog/blog_…
Erye Hernandez retweeted
New: In August Google caught hackers using an old Mac exploit together with a zero-day that was published by a research group at a Chinese cybersecurity conference in April.
The hackers were targeting Hong Kong users.
vice.com/en/article/93bw8y/g…
Erye Hernandez retweeted
More technical details from @eryeh and the team on last months exploit and the associated campaign.
blog.google/threat-analysis-…
TAG discovered watering hole attacks targeting visitors to Hong Kong websites for a media outlet and a prominent pro-democracy labor and political group.
0day privilege escalation for macOS Catalina discovered in the wild by @eryeh
support.apple.com/en-us/HT21…
We saw this used in conjunction with a N-day remote code execution targeting webkit.
Thanks to Apple for getting patch out so quickly.
Glad to be able to share some additional details on the campaign leveraging the macOS privesc (CVE-2021-30869) to install a new macOS backdoor
blog.google/threat-analysis-…
Erye Hernandez retweeted
0day privilege escalation for macOS Catalina discovered in the wild by @eryeh
support.apple.com/en-us/HT21…
We saw this used in conjunction with a N-day remote code execution targeting webkit.
Thanks to Apple for getting patch out so quickly.
Congrats A*0*E!!
Congratulations to @teama0e all members!🏆We are the champion! Glad to join such a charming event held by @oooverflow with everyone!👍
Erye Hernandez retweeted
We disabled 210 channels on YouTube when we discovered channels in this network behaved in a coordinated manner while uploading videos related to the ongoing protests in Hong Kong. blog.google/outreach-initiat…
