Benjamin Harris
@benwatchtowr
Everything is compromised until proven otherwise. Founder & CEO @watchTowrcyber.
We've evolved. The watchTowr Platform now delivers Preemptive Exposure Management – built on our own vuln. research and real attacker telemetry. Proactive threat intel + EASM + continuous validation. Faster reaction. More time to respond. buff.ly/5ip8buj
The @watchtowrcyber team will be at @BlackHatEvents Europe today! 🚀🇬🇧 We’re excited to see everyone and discuss our research, upcoming research 🥷 and our ASM tech.
There is no subtweeting or subcontext here, but if you read this and the shoe fits - that might be a thought to pursue. When you discover a vulnerability in a product, you can do whatever you want with this information. You can sell it, keep it secret, publish it, disclose it…
As I promised, things were coming :-) We are growing - fast - and we're looking for more world-class colleagues to work with. Reach out to anyone in the team for more info, or check out our open roles here: job-boards.eu.greenhouse.io/watchtowr
some news - we're excited to share that we've raised a $19M USD Series A round to continue our aggressive global growth 🚀 in case you're worried, don't - this means 0-day Fridays will continue. speak soon!
funny - a critical software vendor that tries to force vuln disclosures through HackerOne and their T&C (lol, good try) and bans external emails from security@ the disclosure will come to your inbox and the 90 days will start regardless - let your customers know if you care.
Hot off the press from watchTowr Labs member @SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to @irsdl for his help with this exploit!
despite shenanigans with CVSS scores, we can confirm the latest Veeam vulnerabilities (CVE-2024-40711) allow auth bypass. If you want to determine whether an instance is vulnerable, hit this endpoint. The latest version adds authentication. Speak soon.
I'm really excited for the next 18 months of @watchtowrcyber's growth, and I'll be able to share more in the coming weeks. That being said - I continue my desire to work with people smarter than me. If you want to work with a clever team, please reach out - I can connect you.