@mitohormesis
 Singapore
important.zip
Joined March 2021
  • Tweets518
  • Following527
  • Followers882
29Media
John Doe retweeted
Grace@euphoricfall5 Nov 2023
"why did everyone sh*t on CTI teams?" Spicy takes, real underlying issues reddit.com/r/cybersecurity/s…

From the cybersecurity community on Reddit

Explore this post and more from the cybersecurity community

reddit.com
1
13
4
70
73,065
Yesterday 1Password released an Incident Response Report believing that when Okta was breached (again) the Threat Actor(s) tried to pivot to them. They noted they used MalwareBytes™ FREE AV
26
94
13
760
111,975
A harsh but extremely fair admission from ex blue team member of 1Password As a result of their recent post I am no longer recommending @1Password being used in any mission critical or corp environments, they in their current state are a liability. xitter.cf/Hacker_Horse/status/17…
10
22
2
176
53,166
John Doe retweeted
Fox-IT
@foxit23 Oct 2023
🚨IMPORTANT🚨 We have observed that the implant placed on tens of thousands of Cisco devices has been altered to check for an Authorization HTTP header value before responding [1/3]
10
222
29
503
153,679
anything > SPL
Jonny Johnson
@JonnyJohnson_16 Oct 2023
I had to use Splunk to query something today for the first time in a long time. I hope it's the last time in a long time. Inb4 all the Splunk lovers come after me, KQL > SPL.
4
338
I had to use Splunk to query something today for the first time in a long time. I hope it's the last time in a long time. Inb4 all the Splunk lovers come after me, KQL > SPL.
11
3
1
53
16,558
New blog post is up which looks at an unpatched vulnerability in macOS which allows us to hijack entitlements from signed binaries.. aka.. DirtyNIB. blog.xpnsec.com/dirtynib/

@_xpn_ - MacOS "DirtyNIB" Vulnerability

While looking for avenues of injecting code into platform binaries back in macOS Monterey, I was able to identify a vulnerability which allowed the hijacking of Apple application entitlements....

blog.xpnsec.com
12
121
5
300
78,334
Datadog's security team has just released KubeHound, an open-source attack mapping tool for Kubernetes clusters securitylabs.datadoghq.com/a… kubehound.io/ Comes with 25 attack types, each one comes with step by step instructions of how to exploit it
3
129
2
334
36,412
Very nice project from @craiu , @Now_on_VT ! Get notified when interesting APT/FIN indicators of compromise appear on VirusTotal! @craiu any info on how this works? and if there is a stream we can contribute to add IOCs/reports to follow? xitter.cf/Now_on_VT/status/17088…
Is Now on VT!
@Now_on_VT2 Oct 2023
Sample is now on VT! 🚩Hash: 84b078d4a9e6e2a03e8ae1eca072dc83 🎯Actor name: APT29 🔹Comment: Mandiant and Google TAG have tracked an increase in the frequency and scope of APT29 phishing operations. 🌐URL: mandiant.com/resources/blog/… 🔎OnVT: virustotal.com/gui/file/84b0…

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
1
7
15
5,204
Scaling detection and response operations at Coinbase part 2 & 3: 🔍 Driving context into detection logic with machine and user profiles 🔧 Codifying automatic remediation for high-risk detections 📫 Automating alert triage with employees via Slackbot coinbase.com/blog/scaling-de…
1
29
77
8,925
Florian Roth ⚡️
@cyb3rops20 Sep 2023
I asked MidJourney to generate a picture showing a group of cyber security professionals ... but when I saw the last picture, I was really creeped out 🫣
7
12
124
26,164
Mitre Att&ck Turla Vendors With No Config Changes paloaltonetworks cybereason sentinelone ibmsecurity somma watchguard symantec
1
1,292
A couple thoughts on ATT&CK Evaluations...yes, the marketing is ridiculous. I also hope the useful parts of these evaluations won't get completely lost in that. You can find a lot of insight on tools if you dive into the results. Here are some example questions to consider...
3
30
1
113
15,000
MITRE Att&ck Turla Results 2 vendors 100% on all categories (Crwd,PaloAlto) 3 vendors 100% analytic (Crwd,Cynet,PaloAlto) 5 vendors 100% visibility (Crwd,Cybereason,Cynet, Msft,PaloAlto) 7 vendors 100% protection (Crwd,Cybereason,Msft, PaloAlto,S1,Symantec,Trendmicro)
1
9
4
37
15,701
Highest technique counts - PaloAlto 99% - Cybereason 96% - CrowdStrike 95%
1,048
The first part of my blog series on how we’ve been scaling detection and response operations at Coinbase is live! Interested in speeding up your investigations, increasing the visibility of key data sources, and improving quality of life for analysts? coinbase.com/blog/scaling-de…
3
22
1
120
11,385
msrc.microsoft.com/blog/2023…
181
We would like to express our condolences to Blue Teamers. Microsoft has announced Microsoft Excel will now support Python. More information: techcommunity.microsoft.com/…

Introducing Python in Excel: The Best of Both Worlds for Data Analysis and Visualization | Micros...

            Today, we are excited to introduce the Public Preview of Python in Excel – making it possible to integrate Python...

techcommunity.microsoft.com
66
648
154
2,313
262,233
OMG LOL LOL LOL #Cyber #Lulz metro.co.uk/2023/07/03/cyber…
41
16
6
140
52,485
Missed this from Sat: German investigators reconstructed 2-week voyage of yacht suspected of being used in NordStream attack. Used data from yacht's radio/nav equip + sat/mobile phones used by the perps as well as their Gmail accounts and DNA left on yacht wsj.com/articles/nord-stream…
6
31
4
88
31,177
Load more