August 12, 2022

There are some cool projects these days to provide more private access to mobile phone networks.

The pretty good phone privacy project has just entered public beta.

https://invisv.com/pgpp/

There was an earlier pseudonymous sim project before.

sysmocom @sysmocom

@thegrugq @_Sn0rkY reminds me of the osmocom imsi pseudpnymization project we released some years ago:

osmocom.orgWiki - IMSI Pseudonymization - Open Source Mobile CommunicationsRedmine

There is a Russian SIM offering which seems to be a very similar implementation (an MVNO) with a different type of protection. In this case the security is from the silence of the MVNO, rather than the MVNO being unable to link the IMSI in use to a particular customer.

https://www.unlimitedsecuredevices.com/product-collection/encrypted-russian-mvno-sim-server-pgp-multi-imsi-server

-

Subreption LLC @subreption

We have released another exploit from the archives (2008), SharpSeatbelt, abusing a vulnerability in the Scheme interpreter embedded in Apple Mac OS X's Seatbelt policy compiler: subreption.com/offensive-secu… Includes a novel trick against Scheme interpreters!

subreption.comSubreption - SharpSeatbelt: Stack-based Buffer Overflow Exploit for the Mac OS X Seatbelt policy compiler

-

Lost in history @Uncover_history

How an Ancient Egyptian lock worked.

-

Kevin Beaumont @GossiTheDog

If anybody is wondering why Cisco are disclosing, the threat actors appear to have forced their hands. I doubt Cisco were able to whip up that blog post in an hour on a whim 🤣

DarkFeed @ido_cohen2

🌐 Yanluowang #Ransomware team add CISCO to the victim's list 🚨 The group shares a TXT file with all the stolen files, a Total of 82G of data, looks bad 🧐 #Yanluowang https://t.co/6NEjlBpP8G

-

AI tools that write generic blog posts and massage the content to be SEO friendly are already starting to flood Google search results. This is a case of HOOTL (human out of the loop) information warfare!

https://mondaynote.com/the-internet-is-not-ready-for-the-flood-of-ai-generated-text-a082976c6186

-

Patrick Ventuzelo @ Blackhat/Defcon @Pat_Ventuzelo

Slides of my #BHUSA2022 talk about "A Journey Into Fuzzing WebAssembly Virtual Machines" are already available here! If you want to learn different fuzzing techniques and the processes around them, this talk might be useful!

-

Kim Zetter, of Kim Zetter’s newsletter fame, gave a keynote at BlackHat on part of the cyber warfare part of the Russia Ukraine war. In particular the IT Army and what it means for the future of cyber conflict. Things like, “is it ok to allow attacks to originate in your state against another state?” And, “what do the IT Army do after the war is over?”

Topics we’ve covered on ‘The Kim Zetter’s Newsletter Glasshouse Cyber Hour Show’

https://www.theregister.com/2022/08/11/black_hat_hacktivists/

Also relevant is the paper by Stefan Soesanto which she cites

Stefan Soesanto @iiyonite

It's out: The first detailed write-up on "The IT Army of Ukraine - Structure, Tasking, and Ecosystem." You'll get insights into the IT Army's targeting flow and coordination, the non-public structure, where Ukraine's intel services are, and much more. css.ethz.ch/content/dam/et…

-

Steven Adair @stevenadair

We caught another zero-day in the wild (CVE-2022-37042)! This time it was an authentication bypass that was used to facilitate remote code execution via CVE-2022-27925 on Zimbra mail servers around the world. Check out the @Volexity blog on it!

volexity.comMass Exploitation of (Un)authenticated Zimbra RCE: CVE-2022-27925[Note: Volexity has reported all findings in this post to Zimbra. Where an existing contact was known, Volexity has notified local CERTs of compromised Zimbra instances in their constituency. The newest versions of Zimbra are patched for both the RCE vulnerability and authentication bypass vulnerabi…

-

The DogWalk exploit for CVE 2022 34713 patched this last Tuesday.

j00sean @j00sean

microsoft-edge + ms-search + MSDT path traversal 0day = fun of 2-clicks (one click additional due to Protected View if docx is coming from remote btw).

-

Nice! FTC is looking to crackdown on data collection and online surveillance

https://www.ftc.gov/news-events/news/press-releases/2022/08/ftc-explores-rules-cracking-down-commercial-surveillance-lax-data-security-practices

-

Existential Comics @existentialcoms

The evolution of the internet: Web 1.0: static content Web 2.0: dynamic user generated content Web 3.0: scams

-

Lindsay Theisen @lindsaytheis

Being a straight woman is wild because you have to date your only natural predator.

-

The world excel esport championship is on espn.

https://www.ladbible.com/sport/world-excel-championship-that-is-getting-national-tv-coverage-20220809

-

Andrea Woo | 鄔瑞楓 @AndreaWoo

When the science reporter is on holiday but the food reporter is working https://t.co/PqpKbkxCyK

The Independent @Independent

Woolly mammoths are making a comeback. Should we eat them? https://t.co/ex9y7CxQFz

-

eevee @eevee

The CDC has relaxed its advice on quarantining after being bitten, as most people are already zombies anyway

-

x86matthew @x86matthew

ClipboardInject - Abusing the clipboard to inject code into remote processes This PoC uses the clipboard to copy a payload into a remote process, eliminating the need for VirtualAllocEx / WriteProcessMemory. x86matthew.com/view_post?id=c…

-

Senior Oops Engineer @ReinH

Bookmarking isn't about reading something later, it's about not reading it now

-

mtanji @mtanji

Everybody wants the client to fund their private counterintelligence investigation cosplay... ... nobody wants to do an asset inventory.

-

Zack Bornstein @ZackBornstein

Trump has to be one of the first cast members of Home Alone 2 to sell stolen nuclear secrets to the Saudis for $2 billion

-

Shot:

Matthijs R. Koot @mrkoot

EU Commission staff working doc on foreign interference in higher education and R&D orgs: Tackling research & innovation (R&I) foreign interference (0.5MB .pdf, Jan 2022, 63 pages) op.europa.eu/o/opportal-ser… Areas of attention grouped in values, governance, partnerships & infosec.

Chaser:

Matthijs R. Koot @mrkoot

U.S. perspective on risks of foreign espionage (interference) to higher education and R&D: U.S. Gov't Pursues More Aggressive Action to Curb Espionage at Universities (Aug 10) jdsupra.com/legalnews/u-s-… More: GAO-22-105727 report (5MB .pdf, June 2022, 58p): gao.gov/assets/gao-22-…

Matthijs R. Koot @mrkoot

EU Commission staff working doc on foreign interference in higher education and R&D orgs: Tackling research & innovation (R&I) foreign interference (0.5MB .pdf, Jan 2022, 63 pages) https://t.co/tKKhNcLFGl Areas of attention grouped in values, governance, partnerships & infosec. https://t.co/pJIx4J9EfT