Why North Korea Is Planning a Second Korean War and How to Stop It My deep-dive with @andreilankov and @DrRadchenko into North Korean regime, foreign policy, daily life, surveillance state, hackers and much more! youtu.be/hqTbLkdysBo

www.gofundme.com/f/support-ma... CJ is an old friend and a longtime cDc NSF member. He suffered a fall and broke his neck -- his insurance refused to pay for an MRI, which led to the break going undiagnosed for a couple of weeks, until his vertebrae had degraded to the point of quadriplegia.

The One Factor That Could Crash the Russian Economy A new Geopolitics Decanted episode with a deep-dive into the Russian economy and how it's faring in 2025 and what leverage Ukraine might get to negotiate an acceptable peace deal with Putin www.youtube.com/watch?v=VOYl...

This was a phenomenal breakdown of some novel Linux malware techniques. www.elastic.co/secur...

Positive Technologies has developed a new attack that exploits the SD Express standard to gain access to a device's memory through its SD card reader The DaMAgeCard attack exploits the fact that the new SD Express standard can operate in both SDIO and NVMe swarm.ptsecurity.com/new-dog-old-...

ost2.fyi/Sponsorship.... Gold Sponsors & Windows Security Track sponsor Winsider Seminars & Solutions (@yardenshafir.bsky.social & @ionescu.bsky.social) 👇

Long time coming and a cast of hundreds (and a very deep tech stack) but CONGRATS to the team - it's the FIRST ARM64 for Windows build of Git!

There is glory in the unexpressed thought.

I have a legitimate question — given the incredible progress made by Windows on ARM64, it baffles the mind that this is running on an Intel SoC. Especially if it’s meant to be cheap and sustainable. Seriously — why?

As far as intelligence scandals come, and what’s coming… I’d take this scandal over any other, any time.

This awesome fuzzing blog post by @r00tkitsmm.bsky.social covers a super reliable macOS kernel binary rewriting to instrument any KEXT or XNU at BB or edge level. Mandatory reading for anyone interested in fuzzing whether you use MacOS or not. So many good system internals and fuzzing references!

Very excited to finally see this live! An incredible shift in cloud computing.

alright folks, the app code is now public https://github.com/bluesky-social/social-app

So first MSI has been found to ship their Secure Boot policy in “AlwaysExecute” mode on 300+ motherboards, and now they had their BootGuard private key leaked from their source repo (WHY is in their repo? 🤦🏻‍♂️🤦🏻‍♂️🤦🏻‍♂️). Between this and the DBX running out of space, UEFI firmware security needs a reboot.

Windows now has VBS/TPM protected token binding and you can finally now store private keys in hardware and make them truly non-exportable even by a privileged kernel attacker. Great stuff from Dwizzzle: https://gist.github.com/dwizzzle/a1c4cf4b669053dbeda4a4b24a9aca0f

@ washingtonpost dot com you read that right

Probably one of the best pieces of reporting on the Solarwinds supply-chain attack. Excellent piece by Kim Zetter. Highly recommended reading.

Binge-watched BEEF last night on Netflix and everything from the soundtrack to the experience of being a first generation millennial immigrant from a similar cultural background was cathartic. I cried for hours. I can only imagine how much more this speaks to Asian Americans/Canadians.

0%

I just followed so many people from this list. Thank you @ichthyos.com!

I feel like I’m back on IRC but with a Twitter UI front end 🥰

Excited to be on a healthy new platform and share anything from InfoSec knowledge to OS Internals tidbits to startup/VC war stories and more!