Black Hat

Snowpacalypse Now (I love the smell of briefings in the morning)

BlueHat / By / June 20, 2019

Handle:Avatar IRL: Karl Hanmore Rank: Senior Security Strategist (aka Sergeant Grunt) Likes: Getting the job done, bringing the fight to the bad guys, good single malt whiskey Dislikes: Cowards, talkers not doers, red tape, humidity Handle:Mando Picker IRL: Dustin Childs Rank: Security Program Manager Likes: Protecting customers, working with security researchers, second Tuesdays, bourbon, mandolins …

Snowpacalypse Now (I love the smell of briefings in the morning) Read More »

Attacking SMS

BlueHat / By / June 20, 2019

This year at BlackHat USA in Las Vegas, we presented on the topic of attacking Short Message Service (SMS). Our presentation focused on the different ways in which SMS can be used to compromise mobile security. We’re excited to give an updated version of our talk at the upcoming BlueHat v9 conference later this month, …

Attacking SMS Read More »

Threat Complexity Requires New Levels of Collaboration

BlueHat / By / June 20, 2019

When complex security issues that affect multiple vendors arise, calling them “challenging” is an understatement. We created the Microsoft Vulnerability Research Program (MSVR) to meet those challenges, learn from those experiences and strengthen the ties of our community of defenders across the industry in the process. As the state of software security matures beyond straightforward …

Threat Complexity Requires New Levels of Collaboration Read More »

Black Hat USA: Hoping what happens in Vegas doesn’t actually stay in Vegas…

BlueHat / By / June 20, 2019

    Handle:Security Blanki IRL: Sarah Blankinship Rank: Senior Security Strategist Lead Likes: Vuln wrangling, teams of rivals, global climate change – the hotter the better Dislikes: Slack jawed gawkers (girls are geeks too!), customers @ risk, egos This week our team is preparing to travel to Black Hat USA in Las Vegas Nevada, a …

Black Hat USA: Hoping what happens in Vegas doesn’t actually stay in Vegas… Read More »

Chills and Thrills at FIRST

BlueHat / By / June 20, 2019

Sveika! Hey Steve here, been a while since I posted on the EcoStrat blog. With all the security events that happened during the latter half of 2008, I have been very focused on working with the security update releases and Microsoft Active Protections Program (MAPP). Handle: Cap’n Steve IRL: Steve Adegbite Rank: Senior Security Program …

Chills and Thrills at FIRST Read More »

One Month Analysis: Exploitability Index

BlueHat / By / June 20, 2019

Handle:Silver Surfer IRL: Mike Reavey Rank: Director, MSRC Likes: Warm weather, Battlestar Galactica, and responsibly reported vulnerabilities Dislikes: Rain, Rain without end, Clouds with potential for rain, reality TV, and unpatched vulns Hey folks – We’ve just released the November Security Bulletins and that also marks the one-month point after the release of the initial …

One Month Analysis: Exploitability Index Read More »

MS08-067: Example of Need for Increased Collaboration

BlueHat / By / June 20, 2019

Handle: Cap’n Steve IRL: Steve Adegbite Rank: Senior Security Program Manager Lead Likes: Reverse Engineering an obscene amount of code and ripping it up on a snowboard Dislikes: Not much but if you hear me growl…run You’ve probably heard that we released an out-of-band Security Bulletin for a vulnerability in Windows (MS08-067).  By now you …

MS08-067: Example of Need for Increased Collaboration Read More »