Thinking of my friend @cryptokippers Kip Goldencoin today. Wherever you are buddy, I hope you slayed those demons and found exit liquidity so you could accept that administration job www.proofpoint.com/us/blog/thre...

Obligatory #infosecgarden update. Early summer peak

Stanford review published a great piece of journalism on the CCP's on-campus activities. stanfordreview.org/investigatio...

Alot being made today about CN aviation technology & its practical capabilities against NATO manufactured jet technology. The analog conflict of PK & IN are both 4.5 generation aircraft. CN has 5th gen capability and is developing a 6th. also true of US www.washingtonexaminer.com/policy/defen...

You love to see it! Talented super friends beating up on the bad guys

Treasury today sanctioned the Chinese company that U.S. officials say provided technical support to Beijing's Flax Typhoon hacking campaign against critical infrastructure: https://bit.ly/4a2dC6A

News you wouldn't expect to break on Xmas Eve: UN Adopted the Convention Against "Cybercrime" (proposed by Russia): unis.unvienna.org/unis/pressre... Here's why you should be concerned if you are a fan of privacy and freedom of expression

#Treasury sanctions #Chinese #cyber company, employee for 2020 #global #firewall attack. The department’s Office of Foreign Assets Control said Guan Tianfeng used a zero-day exploit to deploy #malware on 81,000 firewalls. via @mattbracken.bsky.social cyberscoop.com/treasury-san...

Never a dull moment. Rapid7 is also observing exploitation of CVE-2024-50623 in the wild. www.rapid7.com/blog/post/20...

Chinese security firm Knownsec 404 has published a profile on ELITETEAM, an infamous bulletproof hosting provider for cybercrime operations medium.com/@knownsec404...

“We are not lovers because of the love we make but the love we have We are not friends becauseof the laughs we spend but the tears we save I don't want to be near you for the thoughts we share but the words we never have to speak I will never miss you because of what we do but what we are together”

Vaccination works.

Look, Scattered Spider was good at one thing: initial access/ransomware. But they weren’t some super talented group of hackers - they are stupid teenagers. Hence the reason law enforcement has been able to nab so many.

This blog is wild. “Secret Blizzard (Turla) has used the tools and infrastructure of at least 6 other threat actors during the past 7 years.” www.microsoft.com/en-us/securi...

190 present, 190 voted to DEMAND END TO MARTIAL LAW DECLARATION

The antimatter’s effect on the van was immediately apparent. www.nature.com/articles/d41...

Notre Dame Cathedral unveils its new interior 5 years after devastating fire abcnews.go.com/Internationa...

For those interested in the Syrian rebel group that has captured Aleppo. “Today, HTS can be thought of as a relatively localized Syrian terrorist organization, which retains a Salafi-jihadist ideology despite its public split from al-Qaeda in 2017” www.csis.org/programs/for...

#PIVOTcon25 #CfP is open and you can submit your proposals till 7 FEB 2025 Remember - one track,30m - no recording/streaming/tweeting. U should feel comfy to share more - No TLP:WHITE - Original content only Let us guide u through with a little meme-thread #CTI #ThreatIntel 1/10

@milenkowski.bsky.social and I are looking forward to presenting together at #CyberThreat2024 in London next month. We‘ll be discussing China-nexus APTs engaging in cybercriminal activities like ransomware.

Optimist: the cup is half full Pessimist: the cup is half empty Art Historian: the punched filigree of the cup is indicative of the international gothic style in Sienna Italy just before the high renaissance. Art Collector: I’d like to collateralize a loan with this cup so I can buy borrow die

Worth reading through this report for deep insights into Microsoft’s #storm0558 security key response

Thank you friends @cyberwarcon.bsky.social. It’s been heavy lately and seeing everyone in one place made it feel light again. Turns out everything IS everything.

stuck in PAN-OS vuln world today, easy detect for exploit of #CVE-2024-0012 GET Request URI "/php/ztp_gate.php/.js" AND Request Header Content including "Auth Header: X-PAN-AUTHCHECK: off" security.paloaltonetworks.com/CVE-2024-9474

Reading today about incoming administration considering Medicaid cuts to pay for tax breaks has an eerie similarity to the death throes of Athenian Democracy. When govs start paying citizens for things that don’t materially improve society it unleashes trouble www.searchengine.show/listen/searc...

CrowdStrike previews exec Adam Meyers' afternoon Senate testimony about a group of Chinese government hackers targeting telecom companies for intelligence collection: https://www.crowdstrike.com/en-us/blog/liminal-panda-telecom-sector-threats/ CS is separating two groups it previously combined.

Did you use #TweetDeck earlier, on #Twitter ? That tool was fantastic as it allowed handling several columns to monitor specific keywords etc... Well, Deck.Blue does just that. Priceless :-) #CTI #newsmonitoring

Bit going on with edge device exploitation at the moment labs.watchtowr.com/pots-and-pan...

New Zealand prepares to tighten espionage laws to stop foreign interference – Reuters: ‘While Goldsmith did not name any country, the bill comes at a time when New Zealand is increasingly vocalising its concerns about China’s behaviour in the Pacific.’

Thinking of starting a petition where society renames Lukas Nelson as Lil Willy now with more Wiggles. Also accepting pitches about Patrick Schwarzenegger and Wyatt Russell. We need your help!

@volexity.bsky.social has published a blog post detailing variants of LIGHTSPY & DEEPDATA malware discovered in the summer of 2024, including exploitation of a vulnerability in FortiClient to extract credentials from memory. Read more here: www.volexity.com/blog/2024/11...

Really cool to see folks sharing actionable hunting and iocs on Bluesky!

🧵Today’s blogpost focuses on a newer ransomware variant named SafePay. Needless to say, ransomware sucks. When this new variant appeared, it gained our attention. 👀 Let’s dig into what happened and what makes it tick ⬇️:

Make Pegasus Great Again? www.intelligenceonline.com/surveillance...

This headline reads like a Community Chest card in Monopoly Dystopia Edition. “Do not pass go, collect your feelings and go directly to therapy.” www.nytimes.com/2024/11/14/b...

#Latrodectus campaign from today gist.github.com/myrtus0x0/cd.... If anything comes of it, I'll put in thread

New: FBI/CISA confirm details about China’s hack of telecoms that we have previously reported, including breach of data related to law enforcement requests and theft of private comms. “We expect our understanding of these compromises to grow as the investigation continues.”

Wait... did a Chinese security vendor just publish research on a suspected Chinese APT backdoor? 🙃 I need your thoughts here @jags.bsky.social blog.xlab.qianxin.com/analysis_of_...

A #poem for today November 13 The only things we keep are area codes and crooked teeth. For fear that that we won’t recognize, the person from the town we haven’t been back to. Where hope was tender most treasured.

Writeup on DPRK IT workers by Unit42. unit42.paloaltonetworks.com/north-korean...

Mothers, teach your daughters about Judith beheading Holofernes. #themoreyouknow

1/ In a recent cyber campaign, the Chinese state-sponsored group TAG-112 compromised two Tibetan websites to deliver the Cobalt Strike malware, highlighting an ongoing espionage focus on Tibetan entities: www.recordedfuture.com/research/chi...