January 5, 2023

-

Jan Lemnitzer @JanLemnitzer

When all websites related to the Danish army went down last month, it took them 4 hours to realize they were under DDoS attack and 11 hours to stop it. As I point out to DR, that's not great... @ciaranmartinoxf @thegrugq @DRMoltke

dr.dkDet tog 11 timer for Forsvaret at afværge cyberangreb på hjemmesiderForsvaret var flere timer om at opdage, at et cyberangreb var årsag til nedbrud.

-

J. A. Guerrero-Saade @juanandres_gs

New LABScon drop: Volexity's @r00tbsd on InkySquid (aka Group123, APT37) missing arsenal–

sentinelone.comLABScon Replay | InkySquid: The Missing ArsenalPaul Rascagneres explores a macOS port of the Windows RoKRAT malware and how it bypasses Apple security protections.

-

A GPT3 module for Ghidra

https://medium.com/tenable-techblog/g-3po-a-protocol-droid-for-ghidra-4b46fa72f1ff

-

Chris Wysopal @WeldPond

"A ransomware attack on the Guardian has hobbled the London-based news-organization’s basic operations, shutting down everything from its office wifi to the tills in the staff canteen. The company’s offices will remain closed until at least Jan 23"

semafor.comA mysterious cyberattack has shuttered the Guardian’s office for a month | SemaforThe news organization won’t go into detail about what attackers hit, and why.

-

Tim Starks @timstarks

Behind the scenes of Trump's firing of the CISA director in 2020. w/@aaronjschaffer

washingtonpost.comAnalysis | Behind the scenes of Trump’s firing of the CISA director in 2020Chris Krebs testified to the Jan. 9 committee last month.

-

Arven Brain Rot 24/7 @bleureivers

One of the funniest things that has ever happened on this app, imo, is…well, lemme just show you

-

stypr @brokenpacifist

Looks super interesting 👀 Prototype Pollution in Python Real world example looks very interesting here. Pollution causes COMSPEC being added on subprocess.os.environ, which eventually executes arbitrary command. blog.abdulrah33m.com/prototype-poll…

blog.abdulrah33m.comPrototype Pollution in Python - Abdulrah33m’s Blog> TL;DR The main objective of this research is to prove the possibility of having a variation of Prototype Pollution in other programming languages, including those that are class-based by showing Class Pollution in Python. > Background Prototype Pollution might be one of the coolest vulnerabilities…

-

Mark C. @LargeCardinal

I think @PeterShor1 is right here - the Paper isn't obviously wrong, but there are a number of caveats. 🧵⤵️ ft.com/content/b15680…

ft.comSubscribe to read | Financial TimesNews, analysis and comment from the Financial Times, the worldʼs leading global business publication

Mark C. @LargeCardinal

I think the critique from @PeterShor1 that the researchers haven't calculated run time is a valid criticism. Yes, it (may) work on sub-linear resources. But factoring also 'works' on CPUs - it just might work slightly to very better here... And the time question is the real one!

-

offensivecon @offensive_con

Baseband Exploitation by @amatcama

offensivecon.orgBaseband Exploitation | OffensiveCon

-

Emad @EMostaque

Stories about how chatGPT will kill Google are a bit silly. Google have the best full stack LLM team and infra with custom chips (PaLM, LaMBDA, Chinchilla, MUM, TPUs etc) Nobody can bet them on innovation, cost or go to market. Institutional inertia is only limiting factor.

-

raptor @0xdea

Interesting article by @Denis_Skvortcov Hooking System Calls in #Windows 11 22H2 like #Avast #Antivirus. #Research, analysis and bypass

the-deniss.github.ioHooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass0x00: Introduction

-

Oliver Chang @halbecaf

The OSS-Fuzz and FuzzBench team is helping to run the SBFT'23 fuzzing competition this year! sbft23.github.io/tools/fuzzing Please submit an entry if you're interested in participating! Entries for expressing interest close on Jan 13.

sbft23.github.ioSBFT′23 Fuzzing Competition Instructions

-

Dave W Plummer @davepl1968

As the original dev mgr for Windows Product Activation, this tickles me in a special way :-)