Johannes

Really enjoyed @CYBERWARCON yesterday. 👨🏼‍💻

@smoothimpact Good luck 🤞🏻

Bank Holiday weekend not going entirely to plan - kitchen, and upstairs bathroom now ripped to pieces trying to find a leak that decided to announce itself by pouring through the ceiling at breakfast this morning. 😭💦

"The enemy does not check your risk register prior to attacking." - Sun Tzu, The Art of Cyber War

✅

Great ideas.

@stfn42 @defconch @floyd_ch @angealbertini @svbl @nullpointer_ch @pstirparo @olknz @ChrisJohnRiley @mylaocoon @rexploit @xorkiwi @mikispag @we1x @ant0inet @fenceposterror @pebkacch Next time :)

Meaning: intelligence agencies are going deep into your system infrastructure (most enterprise assets are running on ESXi or equivalent virtualization tech)

NSM, a play in three acts. > Our SIEM isn't getting all of our logs ☹️ > Our SIEM is now getting all of our logs 🙂 > Our SIEM is on fire 🔥

"Granddad? Where did you fight in the Cyber War?" "I was a Blue Teamer, Billy. They had us deployed at 18.228.0.0/16. 'Hold the line!' they told us. And by God, Billy...we did." #CyberwarCon

@floyd_ch @angealbertini @xorkiwi @mezdanak @nullpointer_ch @PatrikPMarxer @wizche @pstirparo @ant0inet @stfn42 @cocaman @newsoft @ChrisJohnRiley @fenceposterror @mikispag @d3sre @h725_81 @fel1x @mylaocoon @rexploit I didn‘t make it :( I hope it was/is fun.

@floyd_ch @angealbertini @xorkiwi @mezdanak @nullpointer_ch @PatrikPMarxer @wizche @pstirparo @ant0inet @stfn42 @cocaman @newsoft @ChrisJohnRiley @fenceposterror @mikispag @d3sre @h725_81 @fel1x @mylaocoon @rexploit I will try :)

@ObiWan666 got promoted… after hacking smart locks (in 2017), he is targeting yachts now ;-) #Hacklu

why does host 127.0.0.1 have so many vulnerabilities

Someone uploaded a PDF to @virustotal containing multiple zero day exploits. @msftsecurity found it (presumably using VTI), discovered the vulnerabilities, and got them patched before they were exploited in the wild. Via @TheHackersNews thehackernews.com/2018/07/window…

"Security and risk providers' excessive use of messaging around artificial intelligence and machine learning has left customers unable to differentiate hype from real value." buff.ly/2HCfqZb [Gartner access reqd]

@pstirparo @Google Congrats!

Level unlocked: finally joining the amazing @Google #DFIR team

Interesting details on a Kubernetes hack in the wild: medium.com/handy-tech/ana…

Incredible news. @SignalApp is launching the Signal Foundation—with a $50 million donation from WhatsApp co-founder Brian Acton—that will make the encrypted messaging app sustainable for years to come. wired.com/story/signal-f…

BadUSB Cable #2. HID attack through an Apple MacBook USB-C charger. Great for shared workspaces! Build info coming this month. Still working out some things. These cables work on just about any device with a USB port (Mac/Win/Linux, phones too)