July 11, 2022

the murmurings linking the Predatory Sparrow attack with Israel have been loud enough to prompt a response from the Israeli government.

According to Israeli media reports, defence minister Benny Gantz has ordered an investigation into leaks that led to Israeli journalists heavily hinting that Israel is behind the hack.

The minister is reportedly concerned that Israel's "ambiguity policy" on its operations against Iran might have been broken.

https://www.bbc.com/news/technology-62072480

-

NCC Group Research & Technology @NCCGroupInfosec

In "Practical Attacks on Machine Learning Systems" @chris_anley shares: ➡️ A taxonomy of attacks on ML systems ➡️ Exploit techniques for SciKit-Learn, Keras, PyTorch & TensorFlow ➡️ Replication of key results from several canonical ML security papers research.nccgroup.com/2022/07/06/whi…

-

This is a very good read, easy with google translate.

Nurlan Aliyev @anurlan

RBK's report on how various 🇷🇺institutions, including Wagner, are recruiting volunteers to take part in the war in Ukraine; how they are trained; how much they pay and what tasks they focus on rbc.ru/politics/09/07…

-

Matthijs R. Koot @mrkoot

Unmasked: Who were Putin's spies in the Kingdom of Belgium? (Jul 11) euobserver.com/world/155468 Identities of 21 Russian diplomats expelled by Belgium in April leaked to @euobs (see pic). Report by Andrew Rettman, supported by @journalismfund. Mirror: hxxps://archive.ph/q1gom

-

John Blaxland @JohnBlaxland1

Evidently not just in Australia: "China's global espionage network: controversy around telco Huawei has shone a spotlight on the murky world of Chinese espionage, agent-recruitment & an ambitious programme of extending its influence across the globe"

www-bbc-com.cdn.ampproject.orgThe spying game: China’s global network - BBC NewsThe latest controversy around Huawei has shone a spotlight on the murky world of Chinese espionage.

-

Jacques Chester @jacques_chester

If you’re wondering why PyPI, npm and RubyGems are slow walking the rollout of required MFA, it’s for two reasons. One is ordinary caution, we want to be sure it works smoothly before progressing to larger cohorts. The second and much bigger reason is support burden.

-

Eva @evacide

L3 Harris' deal to buy NSO Group has fallen apart in the face of opposition from the White House. Oh well. *kermitdrinkingtea.gif*

theguardian.comUS defence firm ends talks to buy NSO Group’s surveillance technologyWhite House opposition on security grounds seen as fatal obstacle to L3 Harris proceeding with purchase

The New York Times @nytimes

A team of executives from an American military contractor quietly visited Israel numerous times in recent months to try to carry out a bold but risky plan: purchasing NSO Group, the Israeli spyware company blacklisted by the Biden administration.

nyti.msDefense Firm Said U.S. Spies Backed Its Bid for Pegasus Spyware MakerThe American contractor L3 Harris is said to have cited support from intelligence officials for its effort to acquire NSO, the Israeli spyware company blacklisted by the Biden administration.

-

Arai @sweetraccoons

-

Sean Lyngaas @snlyngaas

New —> US officials say 1000s of North Koreans are landing jobs at tech firms overseas, offering a critical source of funding for DPRK weapons programs. I spoke to 1 crypto entrepreneur who, the FBI told him, had a North Korean on the payroll for months.

cnn.comHere’s how North Korean operatives are trying to infiltrate US crypto firmsDevin, the founder of a cryptocurrency startup based in San Francisco, woke up one day in February to the most bizarre phone call of his life.

-

Mark Manning @antitree

A follow up blog post from the @sysdig Kubecon talk. More ways to pwn Kubernetes via a publicly exposed service. This time it's Prometheus.

sysdig.comHow attackers use exposed Prometheus server to exploit Kubernetes clusters – SysdigKubernetes and Prometheus advise problems with exposing your data to the world, but regardless, exposed Prometheus are still widespread.

-

Gennady Rudkevich @grudkev

There's a disconnect between the ostensibly high public support for the war and Russia's inability to recruit troops to fight it. The situation in Russia is much closer to the US in 2005 than the US after 9/11. Clear implications for actual public support.

nytimes.comDesperate for Recruits, Russia Launches a ‘Stealth Mobilization’Leery of a national draft for the Ukraine war, the Kremlin is offering cash bonuses and employing strong arm tactics.

-

Roxi Horror 💀🌸 @roxiqt

My body is not a temple, it is a 7-Eleven and you wouldn't leave a baby in a 7-Eleven

-

Jen Gentleman 🌺 @JenMsft

"You've worked in tech for more than a decade" I whisper to myself as I flip the USB around for the third time trying to get it to go in

-

Dmitry Melikov @DmitriyMelikov

Apparently this is the very first sample (#Follina) found in the wild. (CVE-2022-30190). It ended up in InQuest Labs. 2022-04-08 12:38:14

labs.inquest.netInQuest Labs - InQuest.netInQuest Labs is an open API and interactive research portal designed to empower individual analysts with the tools and data requisite to discover and publish new and novel threats.

-

Everest Today @EverestToday

Check out this incredible avalanche footage from the Tian Shan mountains in Kyrgyzstan. Luckily, everyone survived. Account: cutt.ly/fLkOldS

-

Elsa Wainblum @ElsaWainblum

Avoid phishing scams by not opening your emails