Patrick Wardle

This account is verified. Learn more

@patrickwardle

🛠 🍎 👾 Objective-See'ing & DoubleYou'ing

Maui, HI objective-see.org Joined October 2013

999 Following 42K Followers 11K Posts

Latest posts 5

Pinned post

Patrick Wardle @patrickwardle Apr 25, 2024

Stoked for the next (ad)venture: "DoubleYou" techcrunch.com/2024/04/25/ex-…

Cofounded w/ long-time friend @hexlogic, we're empowering those building security tools for Apple devices 🍎🛡️

And by bootstrapping this venture, our core value of democratizing security remains our focus!

techcrunch.com Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices | TechCrunch Patrick Wardle and Mikhail Sosonkin want to sell specific tools to cybersecurity companies focused on protecting Apple devices.

Patrick Wardle @patrickwardle 5d

Congrats on the milestone! 🥳

And mahalo David (@dps) for reaching out & being so open to candid bug bounty feedback! 🙏🏽

Stoked our Foundation's work led to more ack'd bugs. Payouts TBD; but w/ @Meta's 2x match for non-profits hopefully turning 🐛 into 💰 for @objective_see! 😇

David Singleton Verified account @dps Nov 3

We've now paid out more than $1M in @muse bug bounties. That includes $300,000 to a security researcher who found the most critical bug we've seen in Muse. muse.ai/blog/securing-…

View quoted post on X

Patrick Wardle @patrickwardle 6d

Apple, can we (please) have Endpoint Security for iOS now!? @AppleSupport @Apple 🙏🏽🥺

Calif Verified account @calif_io 6d

Lockdown Mode helps, until it doesn't.

View quoted post on X

Patrick Wardle @patrickwardle Oct 30

"@PhorionTech has detected a backdoor in the official Claude Code for VS Code extension bundle on Open VSX that drops a persistent SSH backdoor across macOS, Linux, and Windows." 🫣

Read More:
phorion.io/blog/offical-c…

phorion.io Official Claude Code Extension Compromise: Security Advisory | Phorion Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up...

Phorion @PhorionTech Oct 30

Phorion has discovered a compromise of the official Claude Code for VS Code extension (2.1.313) on Open VSX.

Here is a breakdown of how the implant works, a bug in its macOS setup logic, and what to hunt for across your fleet. 🧵

View quoted post on X

Patrick Wardle @patrickwardle Oct 15

Neat ChatGPT bug 🐛

Found manually (even after @OpenAI “pointed Astra at its own systems until it ran out of bugs")

Local (unpriv'd) attacker:
• Hijack your Dot
• Take over your account
• Access protected macOS files
+more 👀

@OpenAI's $500 bounty donated to @objective_see