Trey Darley (@treyka) header
Trey Darley (@treyka) profile picture

cat herder; bit-flipper; human;

Brussels, Belgium
Joined March 2008
Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)Photo by Trey Darley (@treyka)
Thank you so much for the privilege of giving this special talk, which was the culmination of over 33 years of research — and which would never have seen the light of day had y'all not kindly asked me to speak at your most excellent conference (to which I would eagerly return) 𓃦
The second day starts with @treyka Keynote.
5
440
Trey Darley retweeted
This article covers a lot of our joint research (@treyka and mine) and is a very important awareness piece. We can continue to pretend there is no elephant in the room. It's there, it's big, and we need to start moving it because it will move very slow and... tempus fugit!
3
3
413
/me yawns and stretches like a cat in the dusty trickling motes of an October sunbeam...
61
In the kingdom of the blind, the one-eyed may be kings — but they lack all depth perception, and so they still keep tripping over the elephant in the room.
81
My many thanks to @campuscodi and @riskydotbiz to bring much needed attention to the Epochalypse Project! I just want to clarify it is a community project that could not exist without the tireless efforts of @treyka, talking about it, from a coffee table to security conferences, he has been raising awareness for years, for those willing to listen. If not for him, Epochalypse Project would probably never existed. We are trying to avoid the FUD, which is quite normal to feel once you start to grasp how immensely overwhelming the problem is. Instead, we choose pacient testing, documenting, brainstorming and sharing. This is the way. Our way, at least. Want to learn more about Y2K38 and challenges we face? Come learn more at epochalypse-project.org/
3
1
8
1,247
Hey folks, I've been working on something. Y2038. Something that the more I learn, the more I get concerned. The sheer size of the task is absolutely daunting. We will need all hands on deck for this one. Please take a read, join in if it ressonates. epochalypse-project.org/
3
5
351
Turns out, Mallory was actually Jeff.
64
Trey Darley retweeted
Warning: #PaloAlto has patched a critical authentication bypass vulnerability (CVE-2024-0012; CVSS: 9.3). This flaw is actively exploited, as reported by #CISA. Palo Alto recently addressed other vulnerabilities as well. Time to #Patch #Patch #Patch
4
424
Trey Darley retweeted
Warning: Multiple High Vulnerabilities in #FortiClient #Fortinet #FortiOs #FortiAnanlyzer #FortiManager #CVE-2024-47574, 36513, 23666 #CVE-2023-50176 CVSS: 7.5 - 8.2 They can lead to Privilege escalation and Improper access control #patch #patch #patch
3
1
506
I'd call that Ultra-Unreliable 🍻
Warning: Critical Command Injection in @Cisco Ultra-Reliable Wireless Backhaul gives root-level control. #CVE-2024-20418 CVSS: 10. #Patch #Patch #Patch bit.ly/3O09MAw
1
97
I wonder when we'll see our first CVSS 11.
2
1
97
Trey Darley retweeted
Warning: Multiple vulnerabilities found in #RedHat OpenShift Container Platform 4.17. Critical severity with CVSS score up to 9.0. No exploits detected yet. Update to version 4.17.3 to stay secure. #Patch #Patch #Patch
4
442
Today, @CISAgov released our first International Strategic Plan, which guides how we will engage our international partners in 2025-2026 to strengthen security and resilience in the globally interconnected critical infrastructure we all depend on. 👉 go.dhs.gov/UQS
3
17
1
67
3,933
Trey Darley retweeted
Warning: #Cisco published multiple vulnerabilities concerning their products, including 3 Critical vulnerabilities and 1 actively #exploited in Cisco ASA, FTD and FMC. #Patch #Patch #Patch bit.ly/3NB0Xx5
2
326
Trey Darley retweeted
Warning: Critical Missing Authentication in #FortiManager can lead to Arbitrary Code Execution. #CVE-2024-47575 CVSS(3.1): 9.8. The vulnerability is actively #exploited. #Patch #Patch #Patch #FortiJump
3
518
Trey Darley retweeted
WARNING : A critical remote code execution (RCE) vulnerability, CVE-2023-22527, in outdated versions of Atlassian Confluence servers is #actively exploited. See our updated advisory bit.ly/3z0tbxB. Please #Patch #Patch #Patch
1
1
412
Trey Darley retweeted
Warning! There is a critical RCE vulnerability in #Juniper Networks Session Smart Router (#CVE-2024-2973). If successfully exploited, the attacker can bypass authentication and take full control of the device. It's time to take action and #patch #patch #patch
1
2
557
Electric cars are unimaginative greenwashing, we should be investing much more in rail and other transport modalities.
1
119
I miss Twitter.
2
102