Look what's happening at the French Embassy in Washington DC.

'Did you even say thank you?'

SecDef has ordered a pause on offensive cyber and info operations while the US & Moscow are in talks, though planning for operations continues, according to sources. While such a pause is not unusual, the move comes as Trump accommodates Putin in his designs on Ukraine. wapo.st/4kjGtrI

We are experiencing an assault on science unparalleled by anything I’ve seen in my life. It’s not one issue or another anymore, the entire institution is under attack by the most powerful individuals in the country. This Friday, where will you be? standupforscience2025.org

Why this matters: 1. While NSA doesn't have to stand down, many service members working *at* NSA work for their individual services, addressing their intelligence priorities. The national mission broadly benefits from this. These members likely must stand down. 1/ therecord.media/hegseth-orde...

This is a really cool post if interested in Redteam and bypassing AVs.. en.r-tec.net/r-tec-blog-b...

“Lazarus group evolves its infection chain with old and new malware” #threatintel #cybersecurity securelist.com/lazarus-new-...

New password generation algorithm just dropped, get cracking.

“Russian government spies targeted Ukraine using tools developed by cybercriminals” #nationalsecurity #intel #infosec techcrunch.com/2024/12/11/r...

Told Assad I am not mad and to prove it I've given him apartment with large windows & scenic views.

Would you like to work with great folks to secure something important? LinkedIn security is hiring -- with more roles coming, including a Sr. Director for Risk and Compliance. I'd love to work with you! No jerks, please.

(Should not be a surprise :) “US alleges China hacked calls of 'very senior' political figures, official says” #nationalsecurity #cybersecurity www.reuters.com/world/us-all...

Breaking: The House Permanent Select Committee on Intelligence has released an unclassified report into the IC and its work on Havana Syndrome, or Anomalous Health Incidents. From the first lines of the executive summary: "It appears increasingly likely…that a foreign adversary is behind some AHIs."

A Russian APT hacked the infrastructure and tools of other APTs and cybercriminal groups to conduct cyber espionage attacks in South East Asia. Great @microsoftsecurity.bsky.social report. #infosec www.microsoft.com/en-us/securi...

“Guidance Urges Visibility and Device #Hardening against PRC-Affiliated Threat Actor” #infosec #cybersecurity www.nsa.gov/Press-Room/P...

The irony, it burns. Yes, there are tradeoffs to end to end encryption, but it's wild for the FBI to start agreeing with basically the entire security community that it's an often-necessary security message. www.nbcnews.com/tech/securit...

#CobaltStrike ‘s Process Inject Kit from C to C++ BOF templates.. courtesy Rasta Mouse #redteam #infosec #cybersecurity github.com/rasta-mouse/...

“DFIR Labs Capture The Flag (#CTF) competition” #infosec #cybersecurity fun in December thedfirreport.com/services/dfi...

“Dissecting JA4H for improved Sliver #C2 detections” #cybersecurity #infosec #dfir #detection blog.webscout.io/dissecting-j...

Secure PDF Viewer app version 20 released: github.com/GrapheneOS/P... See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog. #GrapheneOS #privacy #security #pdf #android

GRUB LUKS Bypass and Dump, #linux #cybersecurity #infosec remyhax.xyz/posts/luks-v...

If you missed my blackhat talk on the security of LLM applications, it's up on youtube now: m.youtube.com/watch?v=Rhpq...

“The UK government recently supplied Ukraine with dozens more Storm Shadow cruise missiles, according to people familiar with the matter, a first under Prime Minister Keir Starmer” www.bloomberg.com/news/article...

New tech brings new vulnerabilities. Introducing CWE-1427: Improper Neutralization of Input Used for LLM Prompting, Externally-provided data used to build prompts provided LLMs, but the way they are constructed causes the LLM to fail to distinguish between user-supplied inputs and system directives

Great post about malware analysis #cybersecurity #infosec #dfir cloud.google.com/blog/topics/...

Putin’s Nuclear Meltdown: My Geopolitics Decanted chat with @armscontrolwonk.bsky.social about implications of Russia’s nuclear doctrine changes, Oreshik missile launch, the real Putin redlines, Iran’s resumption of warhead design work and China’s nuke buildup podcast.silverado.org/episodes/put...

“The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access” #threatintel #dfir #cybersecurity #infosec www.volexity.com/blog/2024/11...

I attended a meetup in Seattle and got to spend time with @bnewbold.net and @pfrazee.com from the Bluesky engineering team. I walked away with an understanding of the role DIDs and PDSs play in the grand scheme of things, and why the most exciting work sits higher up the stack. I almost unretired.

www.thebrighterside.news/post/for-the... 👀 #encryption #cybersecurity

Great post by crowdstrike, #dfir #cybersecurity #infosec “The adversary … using … (GSM) protocols to enable C2, and developing tooling to retrieve mobile subscriber information, call metadata and text messages (SMS). “ www.crowdstrike.com/en-us/blog/l...

Radare conf material, #reverseengineering #infosec #r2 radare.org/con/2024/

Virtually all cybersecurity breaches both by volume and by severity are via trivially preventable problems (reused passwords, failing to update, failure to use minimum standards), not anything particularly sophisticated

CISA warns of actively exploited Linux privilege elevation flaw, “Exploitation of CVE-2024-1086 allows an attacker with local access to achieve privilege escalation on the target system, potentially gaining root-level access.” #linux #infosec

My conversation with @FoxNews @BretBaier about why America is a new Cold War with China and why 2028-2032 will be a very dangerous time window for possible conflict #WorldOnTheBrink youtu.be/_MzZyPEHeCs

“The EXPMON system is mainly a sandbox-based system but with static analysis modules.” #threatintel #dfir #blueteam justhaifei1.blogspot.com/2024/04/open...

“Disrupting malicious uses of AI by state-affiliated threat actors” interesting blog post by OpenAI #threatintel #cybersecurity #infosec openai.com/blog/disrupt...

1923: Hitler’s failed coup. No real consequences. No fundamental changes. 1933: Hitler takes power. I wish I could implant this into everyone’s brain.

In case you missed it, highly recommend you check out this last Geopolitics Decanted pisode where we go deep into the opportunities and challenges being presented by drones on the battlefield in Ukraine With @michaelkofman.bsky.social, Rob Lee and Ukraine Defense Fund’s Andrey Liscovich

You may be wondering why I'm salty about data privacy in cars all of the sudden: therecord.media/class-action...

In the year 2023, an Egyptian politician had malware delivered to his phone via MITM when he visited a website that was not using HTTPS. This is why we must finish encrypting the goddamn web.

Yesterday @silverado.org ran a table top exercise for the House Select Committee on the Chinese Communist Party and private sector leaders examining the economic deterrence options and impacts of a China-Taiwan conflict. Some of our key insights from the exercise are summarized here:

Pro-Russian saboteurs halted more than 20 Polish trains, likely to hamper Ukraine's allies. @lukaszolejnik.bsky.social figured out how they did it: A "radio-stop" command broadcast at a certain frequency with as little as $30 of equipment. https://www.wired.com/story/poland-train-radio-stop-attack/

Alarms have been raised about CVE-2023-24489 and CVE-2023-3519 -- Citrix vulnerabilities being exploited by a variety of actors #Citrix https://therecord.media/cisa-warns-of-citrix-vulnerabilities

Great read, “Review Of The Attacks Associated with Lapsus$ And Related Threat Groups Report” https://www.cisa.gov/resources-tools/resources/review-attacks-associated-lapsus-and-related-threat-groups-report

That's a wrap on the interview questions for now. I'll be at DEF CON this week; looking forward to meeting a load of you! The questions will return after I get back, and we'll throw in a few easier ones too. All questions and answers are on my website: https://tib3rius.com/interview-questions

“Breaking Fortinet Firmware Encryption” #crypto #encryption #firmware #reversengineering #CyberSecurity https://bishopfox.com/blog/breaking-fortinet-firmware-encryption

Let’s create a list of #OSINT practitioners accounts to follow on BlueSky! Add the usernames you have in the comments! (It can be you 😅)