EXODUS BLOG

exodusintel

Silver Bullets and Fairy Tails

JULY 23, 2014

Introduction This week we made mention on Twitter of a zero-day vulnerability we’ve unearthed that affects the popular Tails operating system. As the Tails website states: Tails is a live operating system, that you...

A browser is only as strong as its weakest byte – Part 2

DECEMBER 9, 2013

As promised, the follow up from our previous post. Before Thanksgiving, we left off with IE9 coughing up bytes. We’ll poke it some more today and make it do a little dance for us....

A browser is only as strong as its weakest byte

NOVEMBER 26, 2013

Back in September, FireEye posted a blog entry discussing CVE-2013-3147, a vulnerability in Microsoft Internet Explorer. They pointed out that Microsoft patched the issue on July 9th in Bulletin MS13-055. While reading their post...

Vulnerability Development Master Course: Windows Edition

NOVEMBER 12, 2013

Throughout 2013 we have given training courses on a variety of advanced subjects which have consistently been filled with students from around the globe. The classes have been hosted both publicly at security events,...

Introducing LiveFire

AUGUST 29, 2013

Exodus Intelligence is excited to announce a new service offering developed via a partnership with Syndis, an Icelandic information security think-tank based in Reykjavik. Here at Exodus, we focus exclusively on developing sophisticated zero-day...

Bypassing Microsoft’s Internet Explorer 0day “Fix It” Patch for CVE-2012-4792

JANUARY 4, 2013

Update: After we reported our bypasses to Microsoft, they released the MS13-008 bulletin to patch CVE-2012-4792 officially. After posting our analysis of the current 0day in Internet Explorer which was used in a “watering...

Happy New Year Analysis of CVE-2012-4792

JANUARY 2, 2013

A new year has arrived and, although a little late, the time has come for me to unpack the present that Santa gave to the Council on Foreign Relations this Christmas. Quite a few...

Exodus Intelligence 2013 Training Courses

DECEMBER 17, 2012

Thoughts of winning Pwn2Own–or just have the urge to thoroughly bend browsers to your will? Come learn the tricks of the trade firsthand from a former Pwn2Own winner himself! Peter Vreugdenhil and Brandon Edwards...

What does a flightless bird and SCADA software have in common?

NOVEMBER 25, 2012

They’re both easy targets. If you’ve been paying attention to the security industry for any length of time then you’re probably familiar with the non-disclosure vs responsible disclosure vs full disclosure stances researchers take...

Reversing the Interview Process

SEPTEMBER 18, 2012

As you may know, we recently brought Rolf Rolles on board the team here at Exodus. We all met at our Austin office and Rolf spent a week working alongside us. Our interview process...

← Previous 1 2 3 Next →