🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
I will leave this site on Jan 1. 2025. If you see this message please reply with your mastodon @ 🙏
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
"I am American woman housewife in swing state. I voting for most excellent Donald Trump because he for the womens."
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
New LOL project, LOLAD a collection of Active Directory techniques! 👇
lolad-project.github.io/
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
🚨 Breaking: A zero-day vulnerability (CVE-2024-47575) has been observed impacting Fortinet FortiManager devices, posing serious risks. Learn how the exploit works, and how to defend against the threat.
Read more -> bit.ly/4hbqmuR
#ThreatIntelligence
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
KQL to spot missing Microsoft logs
(excludes weekends since those are normally low)
SigninLogs
| where TimeGenerated >= ago(90d)
| summarize SignInCount = count() by bin(datetime_utc_to_local(TimeGenerated,"US/Pacific"), 1d)
| where dayofweek(Column1) !="6.00:00:00" and dayofweek(Column1) !="00:00:00"
| order by Column1
I have additional variations of this that I am working on such as only plotting when the variance is > 30% - input from community is welcome.
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Also good evening folks especially @NathanMcNulty
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
❓Selon vous, comment le marché du travail en cybersécurité a-t-il évolué au cours des dernières années ?
📢Professionnels de la cyber, vous avez jusqu'au 31/10 pour participer à l'enquête de l’Observatoire des Métiers et nous permettre de le savoir !
🔗s1.sphinxonline.net/surveyse…
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Replying to @thegrugq
Nothing to really worry about, cryptanalysis-wise. Incrementing nonces is totally ok, and tbh forward secrecy isnt a big deal, for the reasons you point out.
(Unlike the report suggests, nothing wrong with deterministic IVs, as long as they're unique.)
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
In the EU, Hungary is now pushing a controversial law on chat control. The latest strategy is to make monitoring by “AI” optional, but the rest of the law (bulk monitoring of private conversations, including those with end-to-end encryption) remains. buff.ly/3Ym3BN7
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Major Russian state media are down following to a cyberattack. "Online broadcasting and internal services are not working, there is no Internet or telephony". Reports of data destruction (including backups) and expectation of long down-time. Rossia 1 and Rossia 24 (TV), in addition to more than 80 regional television and radio stations gazeta.ru/tech/news/2024/10/…
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
EXCLUSIVE: A China-linked cyberattack breached major broadband providers, potentially accessing information from systems used for U.S. wiretaps on.wsj.com/3ZRMQdR on.wsj.com/3ZRMQdR
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
TIL that if you change a AD user's password, there will be a 3 to 5 minutes time window during which both passwords are valid in order to let password synchronization occurs. Meaning that if a user you compromised an account for changes its password, you can still roll it back :D
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Today, a coalition incl. @NCA_UK announced an indictment of a senior member of INDRIK SPIDER – also an affiliate of BITWISE SPIDER – as well as multiple sanctions against key members of INDRIK SPIDER.
#CrowdStrike has tracked INDRIK SPIDER since 2010 and provided critical threat intelligence to NCA in support of today’s announcement.
🔗 See our blog for in-depth analysis on these #adversaries: crowdstrike.com/en-us/blog/a…
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Breaking: The seized LockBit darknet site has been resurrected for more @NCA_UK announcements, including a link between a sanctioned Evil Corp member and the ransomware scheme, plus arrests (plural!) in the UK, and maybe France too?
Information to be released tomorrow afternoon.
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Your files are dying.
That SSD you keep in the closet, the one from your old system "just in case". Yup, degrading as we speak.
SSDs are *shockingly* bad at power off retention, esp if it's near it's endurance rating.
The JEDEC standard only requires 1 year of unpowered data retention at 30C after max TBW (writes).
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
It is amazing how the industry came together to invent a universal USB-C connector and then decided to instead make it all a giant mess.
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Une deuxième journée paralympique s'achève, la vasque veille sur Paris 🌕
📸 Paris 2024 / @OdieuxBoby



































