May 3, 2022

Detailed Mandiant report on attacker activity that is pretty cool, such as embedded devices and old conference video systems(!). Nice to see the use of SSH and reGeorg too.

https://www.mandiant.com/resources/unc3524-eye-spy-email

---

A look back at the journey from bug hunting to pwn2own

doar-e @doar_e

New blogpost by @0vercl0k: "Competing in Pwn2Own 2021 Austin: Icarus at the Zenith" doar-e.github.io/blog/2022/03/2…

---

Geopolitical strategic alliance semiconductor… thing happening.

Patrick M. Cronin @PMCroninHudson

Japan, U.S. to deepen cooperation in securing cutting-edge chips asia.nikkei.com/Business/Tech/… sometimes less really is more: #USJapan to cooperate on 2-nanometer chips & more advanced #semiconductors @SecRaimondo @hagiuda_ko1 #IBM

asia.nikkei.comJapan, U.S. to deepen cooperation in cutting-edge chipsEyeing China, allies aim to push beyond 2-nanometer technology

---

Research on evolving methods of ISIL propaganda propagation

The RESOLVE Network @resolvenet

5 Key Takeaways from @resolvenet's latest research report with @cytrec and @techvsterrorism! @CTProject_SM, @Connor_Rees67, and Joost S. of @MoonshotTeam discuss pro-IS use of file-sharing platforms and a proposed strategy for combating this resolvenet.org/research/remov…

---

A thread of good historical documentaries, as rated by archeologists.

Dr. Jennifer Raff @JenniferRaff

Archaeologists, I'm looking for recent examples of GOOD documentaries and shows about the past. (e.g. not history channel crap). A few come to mind, but I'm curious about what you recommend! #Archaeology

---

A list of books for information warfare, some of them are great and some of them …are on the list.

IA_Scholars_CGSC @IA_Scholars

As promised, these are the books that you all recommended. Choosing the "right" books for our IA scholars is always a challenge. Thank you all for the reading list. #ReadingList #InformationAdvantage

---

Attacking CPUs, which is cool.

hardwear.io @hardwear_io

🎥Webinar Uploaded! Pawel @wipawel @opensrcsec presented details of a new & surprising vulnerability of some AMD processors: direct unconditional branch SLS (CVE-2021-26341) 🍿Enjoy the webinar➡️youtu.be/GC_LArfIiTg #hardwear_io #hardwaresecurity #spectre

youtu.beThe AMD Branch (Mis)predictor: New Types & Methods of Straight-Line Speculation(SLS) VulnerabilitiesAbstract:-------------------In modern super-scalar and out-of-order processors, branch prediction is a crucial component in maximizing instruction throughput...

---

Loki Gwynbleidd, ragondin crayonneur 🏴🎨 @Lokigwyn

---

Dan Kois @dankois

Delighted to announce that my plane was showing THE LAST DUEL but the closed-captioning was from KNIVES OUT

---

It is a very weird operational environment that militaries have to operate in. In 2011 the secret mission to kill bin Ladin was covered in real time on Twitter

Sohaib Athar @ReallyVirtual

Helicopter hovering above Abbottabad at 1AM (is a rare event).

---

Attacking Azure.

sagitz @sagitz_

Today Wiz Research (@shirtamari, @nirohfeld, @ronenshh and myself) published details on #ExtraReplica, a severe vulnerability that allowed anyone to access the databases of other #Azure customers. Here’s how we did it: 🧵 (1/n) wiz.io/blog/wiz-resea…

wiz.ioWiz Research discovers “ExtraReplica”— a cross-account database vulnerability in Azure PostgreSQLTenant isolation is a fundamental premise of the cloud. Organizations trust that the cloud services they use, especially high value assets such as databases, are isolated from other customers. Wiz Research has discovered a chain of critical vulnerabilities in the widely used Azure Database for Postg…

---

A lesson in building cultural soft power. Really great read

T. Greer @Scholars_Stage

New essay: Why Chinese Culture has Not Conquered Us All

scholars-stage.orgWhy Chinese Culture Has Not Conquered Us AllXi Jinping regularly exhorts China’s diplomats, propagandists, journalists, writers, filmmakers, and cultural figures to “tell China’s story well.”The slogan flows naturally from the operating assu…

---

Lots of surveillance going on these days. The good stuff the government has is purchased from the private sector.

Joseph Cox @josephfcox

New: docs on CDC's phone tracking. Saw if people complying with curfews. Bought for COVID response, but said it will use for lots of non-COVID too. Monitoring schools, places of worship. Data came from company funded by former Saudi intel head, Peter Thiel

vice.comCDC Tracked Millions of Phones to See If Americans Followed COVID Lockdown OrdersNewly released documents showed the CDC planned to use phone location data to monitor schools and churches, and wanted to use the data for many non-COVID-19 purposes too.

---

Wow.

Ryan Hausknecht @Haus3c

One of the dumbest things I've seen this year: An EDR product allowed a sample to go through because it was compiled using .NET 3.5 and the EDR's sandbox didn't have .NET 3.5 installed, so since it didn't detonate properly it deemed it safe.

---

Kendra Albert @KendraSerra

Because of my work with @Cyn_K, I had the opportunity to learn more about the Jane Collective back in early spring. I really recommend The Story of Jane, which talks a lot about the political organizing that made this work possible. goodreads.com/en/book/show/6…

Arielle Cohen 🌹🔥 @ariellecohen

Today is a good day to read about the Jane Collective, a group who successfully ran an underground abortion clinic in Chicago. In May ‘72, they were raided by CPD. In Jan 73 the SCOTUS legalized abortion, and all charges were dropped against the Janes. https://t.co/whpFygfQI6