Alex Hernandez

Some great stuff this week!

machang-r7's assessment of CVE-2025-27218 | AttackerKB On January 6, 2025, Sitecore published a security bulletin, SC2024-002-624693 , for a critical unauthenticated remote code execution (RCE) vulnerability affect…

Root cause analysis of Sitecore XM + XP remote code execution CVE-2025-27218 via @rapid7.com's pen testing team attackerkb.com/assessments/...

Ok well guess I’m over on here now too. Where’s infosec at?

Bug bounty hunters & content creators Join the conversation

The "bug bounty hunters and content creators" starter pack is now up to 60 users! Follow this to get instantly connected to the bug bounty community & let me know if I've missed you off!

go.bsky.app/GD7hKPX

We see CVE-2024-0012 exploitation attempts since Nov 18th. We are now also observing CVE-2024-9474.
IoCs: unit42.paloaltonetworks.com/cve-2024-001...

Check for signs of compromise and patch:
security.paloaltonetworks.com/CVE-2024-0012
security.paloaltonetworks.com/CVE-2024-9474

Senior Security Researcher - United Kingdom Rapid7's vulnerability and exploit research team does industry-leading attack research that prioritizes and uncovers risk for organizations worldwide. We’re looking for an experienced vulnerability re...

New platform, must inaugurate with a hiring post. Rapid7's vulnerability research team is expanding! Come join us if you wanna analyze (or find) some Hot Vulns™, write some exploits, and occasionally reverse engineer attacks our MDR/IR folks see. Remote UK: careers.rapid7.com/jobs/senior-...

Running GDB in the Browser GDB inside a Linux in a x86 Virtual Machine using Web Assembly running in the browser. Crazy?

blog.wokwi.com/running-gdb-... is pretty cool!

Metasploit Weekly Wrap-Up 11/22/2024 | Rapid7 Blog

Roses are red, the sky is blue —
This week's #Metasploit wrap-up has Windows secrets dump improvements (and a JetBrains TeamCity login scanner, too!)

We're bad at poetry but good at shells. Check out the latest. www.rapid7.com/blog/post/20...

Security Signals: Making Web Security Posture Measurable At Scale

Happy to publish the effort of my last five years: Security Signals.

research.google/pubs/securit...

yep !