Paella time

Sorta flattering when you see one of your largest competitors copying your business model and engagement playbook.

This is stupid, shortsighted & 🤬🤬🤬. January and February were already record setting for the number of ransomware attacks against school systems and this will make the situation worse. It’s like the admin wants to help the hackers succeed. Via @colinwood.bsky.social & @statescoop.bsky.social

yeah...

Here's a story about the community counterdisinfo school I have been helping get started, @darktimesacademy.bsky.social. We had to tell the Trump State Department to take a hike after they started demanding student lists and class materials

This is my team!

Sat 5 rows behind this guy and have nothing but great things to say about the play. It was a great motivation to come back to London. Seeing @markhamillofficial.bsky.social was an added bonus :)

Security experts are really getting under the hood of DeepSeek at this point. NowSecure found unencrypted data transmission, hardcoded encryption keys, and advanced fingerprinting—while the Pentagon, NASA, and others are banning the app. Full breakdown here: 🔗 www.vulnu.com/p/expe...

🚨BREAKING: Federal judge BLOCKS Trump spending freeze. A big victory for @democracyforward.bsky.social and their clients. Also a win for democracy and the rule of law. Follow @democracydocket.com for full details. www.democracydocket.com

Like with every single negotiation he does, Donold is going to lose and then declare victory and then his fans will all call him a genius even though he’s a lying moron.

Quick reminder that if you see a headline from a source you’ve never heard of that isn’t being reported by anyone else, you really should do some due diligence before spreading it around as fact. There’s enough misinformation floating around already; no need to add more.

"The threat actor executed ipconfig /all to gather network configuration details. Shortly after, we observed network scanning behavior and brute-force attacks across the 10.xx.xx.0/24 subnet. Targeted services included SSH, RDP, MySQL, MSSQL, FTP, and SMB." 1/3

Check how DeepSeek censorship "jumps in" to block a response that links Salt Typhoon to Chinese state-sponsored groups

2025-01-28 (Tues): A case of web injects--malicious script injected in pages of legit websites. In this example, a site has two instances of injected script, #KongTuke and #SocGholish. A #pcap of the resulting infection, malware samples & more info at www.malware-traffic-analysis.net/2025/01/28/i...

"The threat actors repeatedly leveraged remote services to facilitate lateral movement within the network. Their activity began with the deployment of SystemBC and GhostSOCKS proxy tools to a domain controller." 🌟New report out Monday, January 27th by @r3nzsec, @MyDFIR & @MittenSec!

Inagine relying on this to be able to work

Breathe. Embrace your free time. Pour into your community. Respect what you can't control. Reject nihilism. Remember pace and perspective. Burnout is the enemy and helps no one, least of all yourself, and should be stridently avoided. That's the only way we're gonna get through this. And we will.

'I never thought leopards would eat MY face,' sobs woman who voted for the Leopards Eating People's Faces Party.

SHARE WIDELY. KNOW YOUR RIGHTS. With mass deportations starting today across the country, it is vitally important - for both citizens and non-citizens - to know your rights. You have the right to remain silent. Assert it. You have the right to a lawyer. Ask for one. (1/3)

I find it deeply weird that so many progressive people are posting memes and videos in support of TikTok, a demonstrably evil corporation. So I'd like to share some thoughts on why pro-TikTok takes are bad. Let's start with this graph, which shows how TikTok suppresses speech about Taiwan... 1/🧵

This.. a lot of this

Periodic request for book recommendations. I am picky, I like Terry Pratchet, Brandon Sanderson, Tolkien. Not really into horror or gratuitously violent books, but combat, and adventure are just fine. Send me your ideas please!

In Part 1 of my Intune Attack Paths series, I discuss the fundamental components and mechanics of Intune that lead to the emergence of attack paths: posts.specterops.io/intune-attac...

Why it is difficult to say what a tool does? 🤔 In Part 16 of his On Detection blog series, Jared Atkinson unpacks two examples demonstrating this problem and why it exists. ghst.ly/3C9uA6u

New Rule - Doom scrolling on LinkedIn on Sunday evenings is forbidden

This release by Microsoft is really embarrassing for them Microsoft is stamping its feet because TAs "bypassed" keyword filters for DALL-E, and removed watermarks They're throwing the legal kitchen sink including /RICO/ for *checks notes* stealing API keys cyberscoop.com/microsoft-ge...

When the bubble pops, and it will, you’re not just looking at a few Johnny-come-lately companies shuttering. This is a load-bearing delusion. The entire tech industry is fucked because they all bought in, every VC firm bought in, investors have everything in it. They need to make you like it.

Doggos

It's always amusing running into people who have more ego than sense :D 🤡

Stop Forcing A.I. into Fucking EVERYTHING!

Israeli companies that have set up shop in Barcelona, which are mentioned in this article: - Defense Prime - Epsilon I heard of at least another one, which is not mentioned here.

This is an incredible story by @alexmartin.bsky.social. The interconnected-ness of ransomware, drug dealing, influence operations and more is mind boggling. via @therecordmedia.bsky.social

ICYMI: We began launching different disk images into VMs every day starting on Nov 18th (bsky.app/profile/arse...) & finished the series on Dec 20th (bsky.app/profile/arse...). Scroll through our posts & you’ll see some very interesting things! arsenalrecon.com #DFIR

Saw war of the rohirrim today, if you are a LOTR fan, go see it in the theater

@legdaygaming.bsky.social @lemonkiwi.bsky.social It was great seeing and hearing you both cast for CAH this weekend! well done! more please :)

TIL Adam Harrison maintains a spreadsheet of many known Evidence of Execution artifacts and their applicability to various version of Windows 🚀 It's been very recently updated! blog.1234n6.com/available-ar... #DFIR

This is awesome! From first release of a scanning tool to published detection artifact in hours - love it!!!

Reminder - risk isn't only measured in $$$'s. There are many other factors that should be considered when making control or architecture decisions for Security. Choosing the cheapest option may make your finance ghouls happy, but will negatively impact your ability to prevent/detect/investigate.

"Upon execution of the Windows Shortcut, there were several steps of execution that are discussed further below." Report: thedfirreport.com/2024/12/02/t...

Leet hacks get you applause, reports get you paid.

The reaction of people when you take advantage of the "open door" policy to bring something to them...

“Written on the shell casings were the words ‘deny,’ ‘defend’ and ‘depose,’ according to sources.”

Available Artifacts - Indicators of Execution Updated blog.1234n6.com/available-ar...