Google #antigravity taking over the manual testing in the browser from you, all the blue cursor actions are automated by Gemini3, I only sit and watch (and record). Then it takes screenshots and write a report for you. Very impressive.

🚨 NEW VIDEO! I tested the AI-powered #PromptLock ransomware, and it failed spectacularly! 🤯 Impact: 0/10. Fun: 11/10. Watch it here: www.youtube.com/watch?v=-qex... #Ransomware #AI #Cybersecurity

@volexity.com is looking to grow our Threat Intelligence team. New job posting for Senior Analyst role is up here: www.volexity.com/company/care... If you have any questions, don't hesitate to ask.

Microsoft, what in seven hells is that? This just randomly popped up on my screen, and yes it's animated. Also how cool is the fact that according to Microsoft I need to throw away my $5k PC just because I don't have TPM module (yes I know there are workarounds)

Wow: after 15 years, YouTube has taken down the original 'Rick Roll' video due to a "licensing issue," likely due to the acquisition of Astley's record lable. The metadata remains, but if you click through it goes to 'video not found': www.youtube.com/watch?v=dQw4...

Current vibes... 😅

Vibe coding is real…

I was just blown away by Gemini 2.5 Pro capabilities to write python code. It took ~5 minutes to refactor 1500 LOC python script the way I wanted. What's even better is that it also fixed a few other minor bugs, added comments, debug messages, and improved the overall readability of the code. 1/3

Oooh!!

In July 2024, #ESETresearch discovered that the China-aligned #FamousSparrow APT group, thought at the time to have been inactive since 2022, compromised the network of a US trade group and a Mexican research institute. www.welivesecurity.com/en/eset-rese... 1/5

Confirmation that Michael Waltz was the one who added Jeffrey Goldberg to the chat

They were in fact not "currently clean on OPSEC"

Following multiple denials from Trump and participants in the "Houthi PC small group" Signal group that information shared was classified, The Atlantic is now sharing information posted in the group. It's fair to say it has a big "Classified" energy around it. www.theatlantic.com/politics/arc...

Chinese hacking is becoming bigger, better and stealthier @euben.bsky.social and I on the beat economist.com/china/2025/0...

There’s been infinite memes and commentary on the single breach, but this is worth your time, this is a much bigger issue. www.washingtonpost.com/technology/2... by @jik.federate.social.ap.brid.gy ht @zackwhittaker.com

Developing low visibility, low signature forms of compromise for signal accounts is a clear area of investment for Russia's services as well. Generally speaking if you use the app for sensitive comms: audit your linked devices. Do it now. cloud.google.com/blog/topics/...

I to tyle z teorii, że Hermes to drugi Pegasus czy północnokoreański ransomware 🤡 Anna Dworak: Dzien Dobry. Anna Dworak, TVP Info. Ja mam pytanie do któregoś z panów. Jakby panowie mogli wyjaśnić proszę jaka jest różnica między oprogramowaniem Pegasus a Hermesem #Hermes

Love this commentary on our recent blog, pineapples vs ananas 😂 If you don't yet listen to "Three Buddy Problem" podcast you are missing out! www.youtube.com/watch?v=KHhr...

Great to see our UNC3886 Juniper malware blog mentioned in my favorite podcast 🥰

And old, powerful, and mysterious language... #regex #DigitalForensics

🔥 new blog covering recent UNC3886 ops. Massive S/O to all the authors for dropping such a great blog.

Super happy this blog is finally released. Dive into the intricacies of backdoors targeting Juniper devices, veriexec bypass zero-day and other interesting TTPs, all with UNC3886, a China-nexus cyber espionage group as your guide! cloud.google.com/blog/topics/...

This is a "clip" that the POTUS publishes on his social media account, regarding a region that has been impacted by one of the greatest humanitarian crisis of our times. I try not to comment publicly on the US politics, but... REALLY??? truthsocial.com/@realDonaldT...

Woke up to see Donald Trump sharing a video on Truth Social about turning Gaza into a holiday resort with a giant gold statue of Trump, ending with a final shot of Trump and Netanyahu enjoying the beach together. Absolutely unhinged. truthsocial.com/@realDonaldT...

As an IRS agent, Tigran Gambaryan was perhaps the most effective crypto investigator in history. Then last year he was charged in Nigeria with money laundering and thrown in prison. Throughout, he was texting with me from a secret phone. This is his full, untold story. www.wired.com/story/untold...

I started doing victim notification (vn) work back in 2011. At the time, I was working as a Security Analyst at #SecureWorks in their Security Operation Center. In between the alerts for malware, there would be an occasional alert for malware check-in, but the domain had expired. 🧵

The Com is a group of criminals, responsible for serious and disturbing online attacks. The fact that one of their former members has access to sensitive information should be of immediate concern. krebsonsecurity.com/2025/02/teen...

Czas na wywiad! Rozmawiamy z pi3 i Solarem o LKRG (Linux Runtime Kernel Guard), które może znacznie utrudnić zhackowanie Linuxa. Co słychać i jak przebiega rozwój projektu, czy ktoś próbował skutecznie obejść LKRG? Zapraszamy do lektury! adwersarz.pl/polskie-proj...

Ruszyłem z własnym portalem o bezpieczeństwie (i nie tylko) :) To będzie skromny projekt realizowany z pasji i dla pasjonatów. Zapraszam więc do wywiadu o LKRG, który poniekąd otwiera oficiajlnie portal! :)

For anyone who cares what Google thinks about Russian Espionage, this is really, really good news. Gabby is one of the smartest people currently working in cyber.

For many in the DC-area flying community, the crash tonight wasn’t a matter of if, but when. DC airspace is some of the most congested in the world, with helicopters and jets forced into a small operating area. Doesn’t exactly help that the Army uses it as a training ground.

Auschwitz was at the end of a long process. It did not start from gas chambers. This hatred was gradually developed by humans. From ideas, words, stereotypes & prejudice through legal exclusion, dehumanization & escalating violence... to systematic and industrial murder. Auschwitz took time.

I feel like I'm watching the train I'm riding derail in slow motion. Meanwhile the majority of the other passengers are doing their best to ensure that it derails with the maximum amount damage possible.

DHS has terminated the memberships of everyone on its advisory committees. This includes several cyber committees, like CISA's advisory panel and the Cyber Safety Review Board, which was investigating Salt Typhoon. That review is "dead," person familiar says. www.documentcloud.org/documents/25...

Ok, today have finally done it. I removed my X account, I was struggling with this decision for long as there's still a bunch of cool people doing cool stuff over there. But there's a time when enough is enough. I guess this means I should be a tad more active here.

One of the places I’ve departed from the “cypherpunk dream” over the years is the idea that all speech is good for a healthy democracy. I’m saying nothing that hasn’t been said before, but social media can be incredibly toxic.

Some good books last year 📕

#100daysofRUST Day 11 - I decided not to spam with this every day, since this is not so interesting. I will be sending a summary each 10 days. So far I covered basic IO, syscalls, spawning processes and basic IPC. I am also using Gemini more and more. Link to repo below. 1/2

Pan redaktor pewnego "alternatywnego" portalu o bezpieczeństwie, aktywnie namawia do ludobójstwa. Tego nie było w moim bingo...

🚨 New: Zero-day vulnerability #CVE-2025-0282 in Ivanti Connect Secure VPN is being actively exploited, including by suspected China-nexus cyber espionage groups. Our team at Mandiant in partnership with Ivanti just published our initial findings. 🧵 cloud.google.com/blog/topics/...

🔥 new blog detailing 0day exploitation of Ivanti appliances as well as some newly observed malware families tracked as PHASEJAM and DRYHOOK. We also detail activity related to the previously observed SPAWN* malware ecosystem tied to China-nexus cluster UNC5337. cloud.google.com/blog/topics/...

New Year - New Ivanti Zero-Day. Almost exactly 1 year later, UNC5337 returns with their SPAWN malware family. Blog: cloud.google.com/blog/topics/...

(please re-post for reach - thank you!) Learned a cool new Linux trick? Know an interesting quirk in a network protocol? Or have something else to share? Write a 1-page article for the #6 issue of Paged Out! :) pagedout.institute?page=cfp.php Soft deadline is Feb 1st.

I’m generally bullish on the use of GenAI to make our lives better. I also really appreciate Apple’s notification summaries. Less so this: scam SMS comes in and is summarized, but whereas the initial language was “scammy,” Apple Intelligence “upscales” it to be more professional in the process.

Day 4 of #100DaysOfRUST - writing to files github.com/lasq88/100da... #100DaysOfCode

This year I decided to do a personal #100DaysofRust challenge. I try to not upload only dry code snippets, but understand and explain the code that was unclear to me. So maybe someone will find it useful. You can follow my progress here: github.com/lasq88/100da... #100DaysOfCode

Wishing everyone a Happy and Healthy 2025! 🎉- In case you missed it, I created a GitHub repository in 2024 covering Windows Debugging topics. It includes using tools like WinDbg to analyze memory dumps and more. If you're into Windows, check it out here: github.com/DebugPrivile...

#100DaysofYARA 2025 edition begins tomorrow! Any #CTI or #detectionengineering folks looking for a self-paced challenge to start the year with a laid back & fun community? Look no further! The challenge is simple - write a YARA rule every day for 100 days

Happy New Year!