Matthew Flanagan

mattimustang.com

16 October 2026 23:53

During active testing for a client in August, I found that the local administrator account on their BMC Helix Network Management platform would sign in with any password. That finding is now CVE-2026-111283, a critical authentication bypass (CVSS 4.0: 9.5).

Matthew Flanagan

mattimustang.com

18 August 2026 11:45

The Palo Alto Networks firewall Master Key is p1a2l3o4a5l6t7o8 and it is well past time you changed it!

Matthew Flanagan

mattimustang.com

19 May 2026 07:57

I had a great time presenting to the @bsidesmelbourne.bsky.social crowd on the weekend. Thanks to the crew and volunteers for running such a welcoming, vibrant conference, with a great selection of talks! Big ❤️ to Edwina Richards for the photos! #BSidesMelb2026 #WontSomebodyPleaseEatTheFruit

Matthew Flanagan

mattimustang.com

17 April 2026 07:34

I'm excited to announce I'll be taking the stage at @bsidesmelbourne.bsky.social 16-17 May 2026 at SEEK HQ in Cremorne. I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls on how attackers can exploit FW features and weaknesses to increase the impact of a compromise.

CrikeyCon

crikeycon.bsky.social

17 March 2026 08:33

Woohoo! 700, we're filling up! Stoked, can't wait to see you Saturday next week. If you're keen to join us 21st March, get in now and grab your tickets here: events.humanitix.com/crikeycon-11