juushya

Thread: Surveillance with no accountability is dangerous #PegasusProject has shown. Judges can be blackmailed, politician dethroned & journalists killed. But its not just high-profile targets, ordinary citizens are at risk too. We reported this before. Stay with me as I explain

It's done: The IT Rules, 2021, are officially in play. We cannot stress this enough - this fundamentally changes the Indian internet. Please RT this thread on the Rules and how they bring government control over digital media like never before. internetfreedom.in/intermediaries… 1/n

COVID-1984: Propaganda and Surveillance During a Pandemic by Mauro Eldritch youtu.be/2ldvZVAQHTQ via @YouTube

Today, we're releasing BloodHound 2.1, with a giant heap of bug fixes, as well as new edges to abuse the awesome resource based constrained delegation attack. Find more details at posts.specterops.io/bloodhound-2-1… and get the release at github.com/BloodHoundAD/B…

It appears that Samsung would rather ignore merit altogether when virtue signaling about diversity and inclusion at technical conferences.

BadMod - BadMod Detect Website CMS, Website Scanner & Auto Exploiter ift.tt/2pVsajt

My #metasploit PR for Cambium ePMP and cnPilot has landed. Brings in modules for - Login brute force/loot config/hash dump/pass reset/cmd exec/remote shell. Check them out -> rapid7.com/db/search?utf8… #hacking #Cambium #epmp #cnpilot #pentesting

SANS | #PenTest Poster Blueprint: Building a Better Pen Tester by: @SANSPenTest BRAND NEW! Download PDF: pen-testing.sans.org/u/yP2

@CambiumNetworks ePMP routers used mainly for fixed #broadband #wireless by ISPs in remote and rural areas and for #cctv connectivity - found riddled with #vulnerabilities by @juushya @rapid7 @todb Now patched. hubs.ly/H09vFNW0

Thanks @rapid7 for a smooth disclosure run :) twitter.com/rapid7/status/…

"Mandiant Internal networks and its clients data has been compromised" pastebin.com/raw/6HugrWH4 #LeakTheAnalyst #Mandiant

@XI_Research Hey guys, I have a question. Can DM?

@iDefense Hey, have a question. DM?

@FirmwareRE hi quick q. Is the service still up? 'processing' been going on for hours now..

@pluralsight Does Pluralsight have a bounty program?

Threat Actor Techniques youtu.be/QOzvtnK4cqA via @YouTube

@bonsaiviking never heard 'dude's gang' feminist cribbing frm any of my female InfoSec colleagues. Hv seen their career grow leaps ovr d yrs

@bonsaiviking to earn the respect of this dude’s gang, you need to play it right. - prblm is - dude's gang. shud've been -> peers/community

@bonsaiviking addnl challenges? professional ones? imo this is not uniq to women. goes for guys as well, incl baseless assumptions.

@bonsaiviking quote - Being a woman in InfoSec isn't easy - being qualified is a necessity not a priv, applies equally to men & women.