November 6, 2022
New Lazerpig. The ad is probably the greatest ever made.
-
-
european students in the '70s: bruh i got an essay due tomorrow and i gotta kidnap the prime minister and bomb a bank by friday ššš
-
Weekly analysis is out:
-š»š³ ops using hacked IoT
-š·šŗ crime ops in šŗš¦š¬š§
- 30šø ops net $30 mil - inc via SWIFT
-š®š³ ops use stolen code signing certs
-š°šµ š£ ops
plus:
- scanning for šØš³ C2
- root cause from 100 DeFi hacks
- SPARK exploitation
bluepurple.substack.com/p/bluepurple-pā¦
-
Interesting
Former NSA or Intel community? Come on back! We now have a vacancy listing to fast track former employees back in. Check it out.
apply.intelligencecareers.gov/job-descriptioā¦
-
-
Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities š¤¦š¤¦āāļøš¤¦āāļø
// by @OctagonNetworks
octagon.net/blog/2022/10/2ā¦
-
-
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
-
To reinforce @shashj - I went through the history of negotiations in this piece. samf.substack.com/p/getting-to-nā¦ There was never an agreed deal and in his only public statement Johnson accepted that a deal might involve Ukraine abandoning idea of joining NATO.
Shashank Joshi @shashj
-
Crypto phones. Offensive cyber by states. A perspective. [NoScript, or Reader View to read]
In dit interview deel ik mijn onderzoek en inzichten naar de verzameling van inlichtingen door o.a. de politie in de cryptotelefoonzaken (EncroChat, Sky ECC, etc.): ftm.nl/artikelen/jan-ā¦ -> Niet de politie en het OM stellen de grens over wat wel en niet mag, maar de wetgever.
-
CVE-2022-43995 is really something.
Sudo 1.8.0 through 1.9.12 contains an array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by local users with access to Sudo by entering a password of 7 chars or fewer.
github.com/sudo-project/sā¦
-
-
Top officials tried to link protesters to an imaginary terrorist plot in an apparent effort to boost Trumpās reelection odds, raising concerns now about the ability of a sitting president to co-opt billions of dollarsā worth of domestic intelligence assets
-
check this story for the slides alone but also for quotes like this
"The greatest achievement to date of Project Merciless [ā¦] have come from successful penetration operations targeting vocal critics inside the FIFA organization."
swissinfo.ch/eng/business/-ā¦
-
Glibc heap exploitation: House of IO technique
Blog post by @Dooflin5
maxwelldulin.com/BlogPost/Houseā¦
#glibc #heap #exploit #infosec #cybersecurity #learning
-
Prof Matt Qvortrup @drqvortrup is the worldās leading authority on independence movements. Heās subjected the SNPās plans to ruthless analysis in his new book about how to create an indy nation. Thereās good and bad news for the Yes movement. Iāll explainš§µheraldscotland.com/politics/23104ā¦