New Policy Analysis: Europe's cybersecurity heavily relies on the United States. My key points: 1. Europe's dependencies on the US in the field of cybersecurity extend well beyond software updates, SaaS, and cloud services and would persist even if a EuroStack were developed. /1

The global cybersecurity ecosystem is highly dependent on the US. Germany & Europe should take targeted measures to reduce this dependency and protect cybersecurity in Europe, writes @alexandrapaulus.bsky.social @swp-intsecurity.bsky.social: www.swp-berlin.org/publikation/...

Thank you for your interest in Decoder Loop & #rustlang reverse engineering training so far! This Friday, November 7th, join us at Ringzer0 COUNTERMEASURE, in Ottawa, Canada, where @cxiao.net will present the workshop "Reversing a (not-so-) Simple Rust Loader": ringzer0.training/countermeasu...

if u want a high quality curated source of news relevant to defenders, LOOK AT THIS SITE

Yo! Kinda forgot to post here but I created irchaos.club. I'll let yall discover it :)

The amazing @cxiao.net is offering training at decoderloop.com for #Rust #Malware #ReverseEngineering 😱 Her insight is absolutely priceless, she's taught me all I know about this. If you are organizing an event: This is the state-of-the-art training you are looking for.

🦀 I am starting a training firm, @decoderloop.com, focused on providing Rust Reverse Engineering training! decoderloop.com We hope to come to a conference near you next year. Stay notified on training dates: Follow us at @decoderloop.com, or join our mailing list: decoderloop.com/contact/#tra...

Close your eyes and ✨imagine: From a low-integrity process (from LPAC even), you can inject your data anywhere you want: privileged tasks, PPL/protected processes, the OS kernel itself, and VTL1 trustlets. Now open your eyes. It is not hypothetical. It is the reality. Read it on page 33.

🦀 New Rust reversing article! Let's look at a simple loader for an infostealer, distributed via a "can you try my game" scam on Discord. But it's Rust, so is it really simple? This malware has some twists! cxiao.net/posts/2025-0... #malware #rustlang #infosec #ReverseEngineering #MalwareAnalysis

Microsoft has released security updates that protect customers using SharePoint Subscription Edition and SharePoint 2019 against the risks posed by CVE-2025-53770 & CVE-2025-53771. We’re actively working on updates for SharePoint 2016. Get updated guidance & detection details: msft.it/6010sDzSE

We have updated this blog with more guidance and shipped the out of band patch for SharePoint Subscription edition. The team is working around the clock to ship patches for supported SharePoint editions - SP2019/SP2016. Please follow along on the blog for updates on those patches/other guidance.

Suddenly relevant again today with #CVE-2025-53770 research.eye.security/sharepoint-u...

Good post on the #CVE-2025-53770 RCE in Sharepoint, under active exploitation research.eye.security/sharepoint-u...

We have reproduced "ToolShell", the unauthenticated exploit chain for CVE-2025-49706 + CVE-2025-49704 used by @_l0gg (on X) to pop SharePoint at #Pwn2Own Berlin 2025, it's really just one request! Kudos to @mwulftange.bsky.social

With the Insurrection Act looming, now is the time to learn how it might unfold and the strategic ways to respond — including the power of ridicule, writes @daniel-hunter.bsky.social.

SCOOP: The State Department's new reorganization plan includes the opening of an "Office for Remigration," a term popularized by far right extremists and neo-Nazis in Europe. The office will coordinate directly with DHS "to advance the President’s immigration agenda." My report:

Thank you @botconf.infosec.exchange.ap.brid.gy for the warm welcome and for giving Suw and I the opportunity to share our research on WIZARD SPIDER’s crypters! We had a great time connecting with everyone, hearing amazing ideas, and catching up with both new and familiar faces. Until next time!

Don’t miss Cindy Xiao’s talk on Reconstructing Rust Types from RE//verse 2025 if you’re dealing with Rust in your day to day. It’s one worth adding to your watchlist: youtu.be/SGLX7g2a-gw?...

🦀 Hi Rust reversing fans - the recording of my talk at @re-verse.io: Reconstructing Rust Types: A Practical Guide for Reverse Engineers, is available for you to watch! www.youtube.com/watch?v=SGLX... #rust #rustlang #ReverseEngineering #reversing #malware #MalwareAnalysis #infosec

I have been working on this non-stop for a few days. It's LUA playground with syntax highlighting and a full alpine linux vm running in WASM in your browser, hosted on github. noctonic.github.io/lua-playgrou...

/1 I don’t know how many folks will show up Sunday, but we’re gonna have a blast. We’ll kick things off with a short presentation covering the basics of intrusion analysis and the investigative mindset. Then it’s straight into DFIR Labs where you’ll walk through a real intrusion step by step.

For those who missed it, our good friend @cxiao.net did a 3hr workshop on reverse engineering Rust at NorthSec 2025 and the workshop recording can be found here: www.youtube.com/live/XE9g2Tg...

I don't tweet enough about how amazing the Ultra profiler is: github.com/xoofx/ultra

If you’ve been laid off from a cyber intel position, please reach out if you’d like to come to @sleuthcon.bsky.social.

I left my job at ProPublica about a month ago. Here's why: I've teamed up with @mantzarlis.com to launch indicator.media, a new publication dedicated to exposing digital deception and to equipping professionals and the public with knowledge and skills to investigate it. Sign up for free below!

📸 our founder Joshua Reynolds presenting on BinjaLattice MCP @northsec.io

Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!

Next Wednesday, May 15 at @northsec.io, I'll be hosting a 3-hour workshop, "Reconstructing Rust Types: A Practical Guide for Reverse Engineers", about reversing types and data structures in Rust binaries! nsec.io/session/2025... #rustlang #ReverseEngineering #MalwareAnalysis #infosec #NorthSec

I got hit with the CRWD RIF. Looking for any DFIR Consulting or SecEng-ish role.. Been doing DFIR for 5 years both at CRWD and at Cylance- I can provide references and resume on request.

Layoffs at CrowdStrike. I’m safe, but if you’re looking for IR consultants I know a bunch of fucking amazing ones that will be looking for jobs 🫠

An American doctor in Gaza described waking up to the sound of bombs last night. "All I could think was: we’re going to go back to this, and the world is going to continue to not care. I don’t know why more people aren’t burning shit down over this, I really don’t.”

Incredible @laurawags.bsky.social profile of NPR's Anas Baba, whose bravery is unmatched www.washingtonpost.com/style/media/...

🙏 Huge THANK YOU to everyone who joined the DFIR Labs CTF this weekend! Over 200 people from around the world jumped in to tackle challenges based on a real case—and we hope you all had fun, learned something new, and sharpened your DFIR skills! 🔎💻 1/3

If you are looking for my slides from my Reverse talk, you can find it and useful artifacts here: github.com/mahaloz/t...

Also, in case you missed my "Reconstructing Rust Types: A Practical Guide for Reverse Engineers" talk at RE//verse - I'll be giving it as a workshop at @northsec.io in Montreal, in May! nsec.io/session/2025... #rust #rustlang #reverseengineering #malware #infosec #NorthSec

The slides for my talk today at RE//verse 2025 (@re-verse.io), "Reconstructing Rust Types: A Practical Guide for Reverse Engineers", are now public: github.com/cxiao/recons... The talk was recorded - will post when video is public! #reverseengineering #rust #rustlang #malware #infosec #REverse2025

Something interesting for IT security: Note-taking application Obsidian published a list of organizations which currently pay for a commercial license, along with a rough number of licensed seats at each organization: obsidian.md/enterprise/ #ObsidianMD #obsidian #cybersecurity #ITsecurity

BlackHoodie will be back at @ringzer0.bsky.social Bootstrap conference in Austin, TX 🤠 On Friday March 21st I'll be teaching Compiler Internals for Security Engineers, a class for women by women, and it's free. Register here blackhoodie.re/Ringzer0_Boo...

As I note in story, CISA has a lot of sensitive security info on its network. It's responsible for defense of civilian federal gov networks and does security assessments for critical infrastructure around country, including election offices. It stores non-public info about security vulns/breaches

Looking forward to seeing folks there ^-^

Will only occasionally post / log in here! Currently more active on Mastodon at @[email protected]: infosec.exchange/@cxiao