@exploresecurity

IT security miscellany, commentary and curiosities || the geeky alter ego of @MrJeromeSmith || thoughts are my own (who else's would they be?)

 Cambridge, England
exploresecurity.com
Joined March 2013
  • Tweets951
  • Following214
  • Followers683
71Media
exploresecurity retweeted
Ali Ghodsi
@alighodsiAug 13
Today, we announced that we crossed $7B in revenue run-rate, growing over 80% year over year in Q2. We also shared: 🚀 $100M+ revenue run-rate for Lakebase 🚀 $1.5B+ revenue run-rate for Lakehouse, growing over 100% year over year 🚀 Continued positive adjusted free cash flow And we raised $5B in our latest fundraise. We’ll use this capital to invest in: 1️⃣ Lakebase, our serverless Postgres database built for AI agents 2️⃣ Genie, our AI coworkers that actually understand your business data 3️⃣ Unity AI Gateway, our multi-AI governance solution that helps control costs @iamVictorDey shares more in @Forbes: forbes.com/sites/victordey/2…

Databricks Hits $190 Billion Valuation As CEO Ali Ghodsi Claims AGI Has Already Arrived

Databricks has raised $5 billion at a $190 billion valuation as CEO Ali Ghodsi claims AGI already arrived, with the fortune now buried in context the models don't have.

forbes.com
77
243
49
1,018
312,762
exploresecurity retweeted
AmberWolf@AmberWolfSec27 Dec 2024
All I want for Christmas is U(RL handlers not vulnerable to RCE)... AmberWolf has published information about CVE-2024-12908, a Remote Code Execution vulnerability in the Delinea Secret Server Protocol Handler. You can read our blog & PoC here: blog.amberwolf.com/blog/2024…
1
9
32
3,187
🚨 Urgent Update: #Google has released a Chrome update to patch a new high-severity zero-day #vulnerability (CVE-2023-5217) that is being exploited in the wild. Read: thehackernews.com/2023/09/up… #infosec #cybersecurity #informationsecurity

Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability

Google has released a Chrome update to patch a new high-severity zero-day vulnerability (CVE-2023-5217) that is being exploited in the wild.

thehackernews.com
5
205
13
299
97,781
exploresecurity retweeted
BSides Cambridge@BsidesCambs10 Aug 2023
First round of BSides Cambridge tickets are live! We've got some great talks lined up. Get your tickets now. If you're a student, message us or @secmum and we'll sort something out. #bsides #bsidescambs #infosec #cybereast eventbrite.co.uk/e/bsides-ca…

BSides Cambridge

Please join us for the first BSides Cambridge.

eventbrite.co.uk
10
2
13
3,777
exploresecurity retweeted
Burp Suite
@Burp_Suite26 Jun 2023
Want to create customized scans without learning to build an extension? Extend Burp Scanner's capabilities quickly and easily, with a BCheck, to scan applications for exactly what you're looking for. Coming to stable soon. #bchecks portswigger.net/burp/documen…
7
25
2
95
17,746
exploresecurity retweeted
gaut
@0xgaut15 May 2023
chatGPT is becoming a real engineer
200
4,712
415
44,950
2,746,845
exploresecurity retweeted
CNCF
@CloudNativeFdn19 Apr 2023
[NEWS from #KubeCon] New #Kubernetes security audit complete and open sourced 🔐 cncf.io/blog/2023/04/19/new-…
19
5
41
21,221
exploresecurity retweeted
Jerome Smith@MrJeromeSmith12 Mar 2023
Garth continues to extract his pound of flesh from me.
Matthew Holness@MrHolness12 Mar 2023
Having fielded audience questions (badly) during last night’s TerrorTome gig in Cambridge, the ‘Man Who Gets Killed at the Start of Scotch Mist’ has officially repaid an additional 38 minutes of outstanding Darkplace-related (and contractually-still-owed) filming time. GM
1
1
4
287
exploresecurity retweeted
Salesforce Ben@SalesforceBen7 Mar 2023
Hot off the press: Salesforce is launching Einstein GPT to deliver auto-generated AI content - right within the #Salesforce platform. Is this is the world’s most powerful, intelligent, generative CRM? bit.ly/3ZtjC1Y
3
1
14
1,700
Raccoon - tool for checking #Salesforce data sharing - updated to v1.1 by @exploresecurity at github.com/nccgroup/raccoon. Can now be used with an account that’s SSO and/or MFA-enabled. Original blog post at research.nccgroup.com/2021/0…

GitHub - nccgroup/raccoon: Salesforce object access auditor

Salesforce object access auditor. Contribute to nccgroup/raccoon development by creating an account on GitHub.

github.com
5
9
3,378
The appropriately-named 'Ransack' library can be exploited to steal password reset tokens character-by-character! This sterling research by @positive_sec is a great example a web library destroying critical security primitives. positive.security/blog/ransa…

Ransacking your password reset tokens | Positive Security

We demonstrate how the popular "Ransack" library (Ruby on Rails) can be abused to exfiltrate sensitive data via character by character brute-force, allowing for a full application compromise in some...

positive.security
3
46
1
140
23,388
exploresecurity retweeted
Matthew Holness@MrHolness9 Dec 2022
More dates added!👇🏻
Live Nation UK
@LiveNationUK9 Dec 2022
EXTRA DATES ADDED: Garth Marenghi, Grand Archduke O’ Darkdom, has added extra stops to his TerrorTome book tour in Exeter (@execornexchange) AND Dublin due to overwhelming demand! 😱 Secure your tix now 👉 livenation.uk/lJPs50LOzhP @MrHolness
9
15
92
exploresecurity retweeted
Jerome Smith@MrJeromeSmith30 Nov 2022
‘Tis me! This was a total surprise. Dare I say, more terrifying than Garth’s Horrotica.
Matthew Holness@MrHolness29 Nov 2022
Thanks to everyone who came out to see Garth Marenghi’s TerrorTome at the Cambridge Junction, and special thanks to Jerome Smith, star of ‘Scotch Mist’, for fielding audience questions and paying back the day’s work he still owed Garth from Darkplace.
1
1
8
Stealing passwords from infosec Mastodon - without bypassing CSP portswigger.net/research/ste…
19
622
119
1,797
exploresecurity retweeted
Matthew Holness@MrHolness17 Aug 2022
Coming in November in hardback, ebook and audio: three spine-shattering tales of fright from Garth Marenghi’s long-lost multi-volume epic: TerrorTome.
239
1,255
782
7,641
exploresecurity retweeted
Jerome Smith@MrJeromeSmith7 Jul 2022
Replying to @GeoffreyBoycott @NightwatchmanXI
No third man, Geoffrey?
2
exploresecurity retweeted
Chris Anley@chris_anley6 Jul 2022
Whitepaper - Practical Attacks on Machine Learning Systems research.nccgroup.com/2022/0…
36
2
78
"Exception Handling and Data Integrity in Salesforce” - new blog post from @exploresecurity about how trying to do the right thing in Apex might have unintended consequences for security research.nccgroup.com/2022/0…

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

nccgroup.com
5
1
3
Technical Advisory – Tesla BLE Phone-as-a-Key Passive Entry Vulnerable to Relay Attacks, by Sultan Qasim Khan research.nccgroup.com/2022/0…

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

nccgroup.com
1
38
6
59
We are taking applications for our Junior Security Consultant training programme to start in October. Work with an learn from some of the best minds in the industry, as you start your journey towards becoming a Penetration Tester. nccgroup.wd3.myworkdayjobs.c…
2
1
3
Load more