Jan 18, 2023

KillNet claims to have hacked 198 million records from the IRS including sensitive “personal information like usernames and passwords.” Which sounds a bit weird to me. Also, a Belarus forum has formed a hacking group and they are collaborating with KillNet. Sad to see the anti-Belarus Cyber Partisans

https://naon.tinosmarble.com/ukraineeng/hackers-will-exchange-the-stolen-base-of-the-us-internal-revenue-service-for-loyalty-to-moscow-and-minsk/

-

-

Adam Cerious @Browtweaten

[last day working as a human cannonball] you can't fire me I quit

-

FBI deanonymized a Tor user who visited an .onion site which hosted ISIS content. The legal document lists which pages he visited. That is the full extent of the information. No clues as to how he was found, deanonymized, or anything. Most likely he was grassed up by someone who knew him, and then his computer was compromised w/ malware, and that is how they tracked him. But, who knows? We probably wont.

https://www.schneier.com/blog/archives/2023/01/the-fbi-identified-a-tor-user.html

-

Biden’s new Cybersecurity executive order.

https://slate.com/news-and-politics/2023/01/biden-cybersecurity-inglis-neuberger.html

-

Glitching the Olimex LPC-P1343

https://grazfather.github.io/posts/2019-12-08-glitcher/

-

Alfredo Ortega @ortegaalfredo

2019: Those futurists cyberpunk comics are so ridiculous. 2023: Using an N99 mask to buy used GPUs from an illegal cryptocurrency mining operation for my private artificial intelligence.

-

Absolutely in love with this story about all the mistakes being made by the AI that writes CNET's articles now https://futurism.com/cnet-ai-errors

https://mastodon.social/@caseynewton/109705722163516208

-

0xor0ne @0xor0ne

Symbolic execution using KLEE for exploit development (CVE-2016-2147) Credits @NCCGroupInfosec research.nccgroup.com/2022/12/12/kle… #infosec #cybersecurity #exploit #cve

-

Roy Ben-Tzvi @Roy_Bntz

@proetrie We are living in a world where increasingly we are simply doing real life things to document them for our online world

-

Jacob Baines @Junior_Baines

I was recently writing an exploit for CVE-2022-3626 so I put together a blog showing some logs the exploit will generate and shared a version scan of internet-facing Sophos Firewall.

vulncheck.comAssessing Potential Exploitation of Sophos Firewall and CVE-2022-3236 - Blog - VulnCheckSophos Firewalls were exploited using CVE-2022-3236 in September, 2022. Few details have been published about this vulnerability. In this blog, we look at log entries the exploit creates and determine how many vulnerable internet-facing firewalls still exist.

-

SRonis @SRRonis

Following up on our talk about attribution tradeoffs (and my misbehaving children) at #cyberthreat22, @TheCollierJam and I published a new @Mandiant blog

mandiant.comNavigating the Trade-Offs of Cyber Attribution | MandiantThe messy realities behind attribution and the different trade-offs involved in the process.

-

Hyundai Head Unit Hacking

https://xakcop.com/post/hyundai-hack-2/

-

Lukasz Olejnik (@LukaszOlejnik@Mastodon.Social) @lukOlejnik

My #TechLetters analysis of Ukraine's report highlighting the links between kinetic warfare and cyberattacks, suggesting the need for a new definition of aggression. I evaluate it, and explain that cyberattacks can already constitute an aggression...

techletters.substack.comTechLetters Insights - Ukraine report highlighting the links between kinetic warfare and cyberattacks - is a new definition of aggression n…Not really.

-