Mark your calendars!

A reminder that we have a MISP feed! misp.ifin.network/feed (`/manifest.json` for validation)

I will hold an online session of the Paralus LLC Applied #CyberThreatIntelligence course from 27-31 July, 1400-1600 US Eastern/2000-2200 Central European time. Focused, to the point training, two hours per day for five days. Register your interest at the following form: forms.gle/M1LgQTomJGek...

A developer made a browser extension called "Knockoff" that shows what a wasteland Amazon truly is by filtering out brands like "GODONLIF" "EHEYCIGA," ROTTOGOON," and sponsored products. Useful and illustrative even if you don't use Amazon www.404media.co/knockoff-bro...

It does not fill me with optimism about the general quality or completeness of this disclosure that it gives the wrong name for the firm via which Trump made $635 million last year.

No Three Buddy Problem this week. My disappointment is immeasurable. What am I supposed to listen to on my dog walkies?!?? Oh right, Between 2 Nerds. 🙌

1/ NEW RESEARCH: We find that Russian authorities used Cellebrite to gain access to activist Andrey Pivovarov’s phone. Full brief: citizenlab.ca/research/rus...

A newly discovered spider species from Australia uses its silk to craft a spring-loaded, cone-shaped death trap, which catapults its prey into the spider’s main web. https://cnn.it/4w3n6Ip

Thanks @halvarflake.bsky.social -- it's so good / must read (and it's not even finished yet!)

iran has closed the reflecting pool.

AI may have inherited the em-dash addiction from hordes of writers -- but it can pry them from our cold, dead hands.

DAMN STRAIGHT

NEW POD UP: Microsoft threatens legal action against researchers who drop zero-days. We debate whether it’s a fair line against extortion, or amateur-hour PR from a company that already torched its own research community? #threebuddyproblem youtu.be/E5rIJ9nGOUo

Google explains how it will infuse ads into AI answers

NEW POD UP! We discuss the disappearing art of Windows APT paleontology, the absence of complex malware documentation, and why so much threat-intel research has slipped behind paywalls and into private rooms. - Spotify open.spotify.com/episode/0eh4... - Apple podcasts.apple.com/us/podcast/t...

www.faz.net/premium/digi... I wrote a FAZ guest article.

NEW: Google is rolling out a new feature for Android called Intrusion Logging, designed specifically to help researchers investigate attacks done with spyware and forensic tools. Amnesty says this is “a fundamental shift in the amount and quality of forensic data available on Android devices.”

- YouTube youtu.be/jIr6QdgUodU - Spotify (with video) open.spotify.com/episode/4zDJ... - Apple Podcasts podcasts.apple.com/us/podcast/c... - Transcript docs.google.com/document/d/1...

Create a folder called (calc). Shift+Right click « Open PowerShell Window here » and boom you have a command injection. @podalirius.bsky.social found two command injection vulns hiding in Windows Explorer's built-in context menus, both that went undetected for 9 years. https://ghst.ly/42ImlI6

Has Cyber Threat Intelligence evolved or just outgrown its own definition? In Episode 1, Vertex co-founders @invisig0th.bsky.social & John "whippit" Rodgers rethink what CTI should be. Listen: www.youtube.com/watch?v=DdeG...

Pleased to share a simple new GitHub Repo called Awesome-Ransomware, following the genre of ‘awesome-x’ for GitHub repos. Please contribute if you have a resource specifically for any type of ransomware tracking, Pull R… — from @BushidoToken (https://x.com/BushidoToken/status/2051607175739388191)

Award winners include authors Daniel Kraus, Jill Lepore and Yiyun Li, opinion writer M. Gessen and staffers and contributors at The Washington Post, Reuters and AP. n.pr/4f7k5S2

I made a local 'tweetdeck' client for Bluesky: https://github.com/jhuntinfosec/bluedeck Enjoy!

Mark Dowd on vetting customers for highly sensitive projects

We’re excited to have David as a keynote speaker at our free #ThreatHunting Summit! Join David as he invites us to re‑examine the role of the human in threat hunting - www.antisyphontraining.com/event/threat...

NEW PROBLEM UP! 🚨 We discuss a mysterious, VM-obfuscated backdoor that lived undetected on a single U.K. machine for a year before disappearing, finding clues pointing to an elite-level APT intrusion that still evades broader industry coverage. WATCH on YouTube www.youtube.com/watch?v=mSD9...

#agentmentoring — from @JohnHultquist (https://x.com/JohnHultquist/status/2042379534180229147)

On Radio Atlantic, @radiofreetom.bsky.social and Nancy A. Youssef explain the state of  the war in Iran—and how no deal can undo the damage of Trump’s words.

New GreyNoise Report: 39% of unique IPs targeting the edge come from home internet connections. They are everywhere, briefly — 78% appear at most twice before rotating. The rotation rate makes feed-based IP reputation structurally ineffective against this traffic. 🔗 www.greynoise.io/resources/in...

TIL FLARE distributes educational content for free on GitHub. github.com/mandiant/fla...

Tech giants like Apple, Google, and Microsoft are among those on a target list released by Iran’s Islamic Revolutionary Guard Corps. www.wired.com/story/iran-t...

ShinyHunters is ransoming ... HALLMARK CARDS Those fucking shitty birthday cards you pick up at the drug store ARE BEING HELD RANSOMWARE WHO RANSOMS BIRTHDAY CARDS (info via @AlvieriD)

42 years ago 'Minor Threat' aka 'First Two Seven' Inches is a compilation album by the American hardcorepunk band Minor Threat, released in March 1984 and consists of the first two extended plays 'Minor Threat' and 'In My Eyes' . #punk #punkrock #minorthreat #punkrockhistory

Global warming was the plan all along!!!

🧨 🚨 NEW POD UP! (presented by @thinkstcanary.canary.tools) - The Coruna iOS exploit kit, the connection to the Peter Williams/Trenchant exploit sale to Russians, how it slipped from government hands into criminal use @craiu.bsky.social @jags.bsky.social LISTEN everwhere 👇 pod.link/1414525622

These things have always been true: 1. The ability to generate buggy code has never been greater. 2. The ability to find bugs in code has never been greater. 3. The ability to fix bugs in code has never been greater. 4. Many, many more people want to do 1 or 2 than 3. Now scale this with AI.

Our blog at @Censys now has a proper RSS feed https://censys.com/feed/ (cc: @Feedly #GoogleReader)

Why learn to code when you can use an LLM and pay a subscription fee for the rest of your life.

NEW @citizenlab.ca report: Cellebrite Used on Kenyan Activist and Politician Boniface Mwangi citizenlab.ca/research/cel...

Making my GREM index like...

These dudes are awesome! Highly recommend their training if you get the opportunity.

Early career pen tester wanted to break some of azures specialist clouds. #infosecJobs

Non-Deterministic: The most important word you need to understand about AI 🤖 teriradichel.substack.com/p/non-determ...