Security value isn’t created downstream.

Researchers find real flaws early.
Defenders need that insight before exploitation.

Desired Effect connects both — and pays researchers fairly.

#CyberSecurity #ThreatIntelligence #ExploitResearch #DesiredEffect

Flashback to my conversation with Olivia Gallucci on identifying race conditions without source access. Look for split operations — checks or comparisons followed later by an open. Automated tools catch patterns, not context.

#CyberSecurity #ExploitResearch #ThreatIntelligence #DesiredEffect

Sebastiaan Groot & Frank Cozijnsen (KPN) fuzzed a Steering of Roaming component and turned a crash into remote code execution, even across operator boundaries.
Watch here: youtu.be/JxkcG7bbxGw?...

#Orangecon #TelecomSec #ExploitResearch