Alex Korotin

We’re excited to announce the initial release of ATT&CK for ICS! You can find the ICS knowledge base at https://attack.mitre.org/ics  and a blog post by @ojalexander explaining what’s new and different here: https://medium.com/mitre-attack/launching-attack-for-ics-2be4d2fb9b8 …. Thank you to everyone who helped us get here!pic.twitter.com/xouwwdufV1

Chance encounter at congress. #36c3pic.twitter.com/3nMyTqpAAa

A guide on power plant automation and its security issues on #36c3 conference. Slides and tools from our talk https://github.com/klsecservices/Publications/raw/master/36c3-Security%20of%20turbine%20control%20systems.pdf … kudos to @repdet @_moradek_ @Alender911 @epotseluevskaya @zero_wf @574rzpic.twitter.com/aLGEHLUlhr

Turbines are everywhere, also on #36c3 at #dijkstra! Good thing, they are overcomplicated, with huge attack surface, hard coded credentials and weak hashing schemas. Oh, shi... Nice talk by @kl_secservices team. /cc:@repdet @_moradek_ @Alender911 @epotseluevskaya @zero_wf @574rzpic.twitter.com/OG2jndWJ5o

Fast exploitation method of #sqli in PostgreSQL >=9.0 using 'string_agg' functionpic.twitter.com/NTcjMiAzzq

Светоотражающая куртка «засвечивает» цифровой сенсор - https://xakep.ru/2015/02/13/photobomber/ …pic.twitter.com/hqCRFX60oT

Обход защиты Windows 10 с помощью одного бита - https://xakep.ru/2015/02/12/win10-bug/ …pic.twitter.com/OT4qPtQSKg