Hadrian (@hadriansecurity) header
Hadrian (@hadriansecurity) profile picture

Digital security insights from a hacker’s perspective

Amsterdam / London
Joined August 2021
Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)Photo by Hadrian (@hadriansecurity)
Attackers didn't need malware to turn supermarket freezers into heaters. They just needed to find the controllers. #OTSecurity #CriticalInfrastructure #AttackSurfaceManagement
1
2
674
The way in was simple: temperature controllers exposed to the internet, weak authentication and poor configurations. No zero-day required. Our Head of Hacking, Melvin Lammerts, shared his take with @SCMagazine.
1
47
His advice to operators: find every exposed controller, cut unnecessary remote access, and set hard temperature limits the equipment can't be pushed past. You can't secure what you don't know is exposed. scworld.com/news/fbi-cisa-wa…
13
Hadrian retweeted
Manually auditing unfamiliar codebases for security vulnerabilities without a strong methodology can be tedious... 😓 OpenHack by @hadriansecurity is a lightweight, file-based workspace for source-guided whitebox security reviews, helping you systematically trace, annotate, and track vulnerabilities across large codebases! 🤠 Check it out! 👇 github.com/hadriansecurity/O…
3
16
4,481
🤔 Exim-tremely Critical? Do you need to worry about CVE-2024-39929?
1
1
2,196
🔍 A serious vulnerability (CVE-2024-39929) has been discovered in the Exim mail transfer agent, which could enable attackers to send harmful attachments straight to users' mailboxes. With a CVSS score of 9.1 out of 10, this flaw is notably dangerous.
1
2,126
📈 July sets a record for the highest number of vulnerabilities reported in 2024!
1
1,235
🚨 Microsoft has updated its July Patch Tuesday, and among these is the zero-day vulnerability CVE-2024-38112, which enables attackers to spoof web content, deceiving users into interacting with malicious resources.
1
1,019
Additionally, many more vulnerabilities pose an immediate risk to systems. Click the link to read the full list: lnkd.in/drECG2gU
684
🚨 Critical Alert: OpenSSH Vulnerability CVE-2024-6387
1
857
💡 Although there's no proof of concept for this vulnerability and it's only been exploited in lab conditions, a public exploit could emerge soon. It's advised to patch this vulnerability promptly.
1
541
🎊 Celebrating one year of the National Anti-Scam Centre! Let's continue protecting ourselves from scams by staying informed and vigilant. 🔒 Stay safe and scam-free! #CyberSecurity #AntiScam #DigitalSafety
413
🔥 Fireside Chat: The State of Retail Security Webinar is NOW LIVE! #HadrianSecurity #CyberSecurity #Retail
1
457
🚨Must Know: qTox’s RCE Vulnerability🚨 A critical vulnerability has been unearthed in qTox's latest version 1.17.6, a favored communication platform among malicious hackers due to its anonymity features. But who's gaining the upper hand? 👇 Read Below
1
356
🔒 Ethical hackers, armed with newfound knowledge, have seized the opportunity to disrupt cybercrime networks. By leveraging their understanding of RCE, they've dealt a significant blow to malicious actors, hindering their operations.
1
279
💡 The qTox vulnerability saga sheds light on the evolving landscape of cyber warfare and the critical role of RCE in cyber attacks. RCE vulnerabilities allow attackers to gain unauthorized access to systems, leading to data breaches, ransomware attacks, and other cyber threats.
278