nate

Every time.

@MazdaMX5Cup @GPSTPETE @MazdaMX5Cup where is the paddock with the posters? Not seeing anything on the event map.

Do you want this poster? Do you want this poster signed by all the #MX5Cup drivers at @GPSTPETE? Then come to our autograph session at 11am ET today at Victory Circle!

@UK_Daniel_Card I did a sort of Spotify wrapped after the first year I built it. I'll work on putting something together for last year!

@nate2x4 a top usernames/password by volume might be cool

Facts. I built badpwd.com so you could see not just the user and the source, but also the passwords they're using.

@vxunderground @HCAdamSec @SecureAerospace In it to win it.

Giveaway. @HCAdamSec and @SecureAerospace are sponsoring today’s giveaway of a set of the sold-out Aerospace Village 2024 & 2025 DEF CON badge + SAO. This badge is a fully custom (and hackable) Linux SBC with integrated ADS-B receiver, GPS, and more. The “Charlie” SAO adds even more capabilities including listening to Air-Band VHF audio, broadcast FM (in stereo!) and weather radio on a grayscale OLED, all made possible with a plethora of hardware hacks! The Aerospace Village is a non-profit organization where aerospace security and hacker culture come together to build a more secure aerospace future. - Leave a comment below for a chance to win - United States only

Uh oh.

One of the most insecure defaults is getting less insecure at the end of this month. Microsoft is limiting what permissions a user can consent to. This is very interesting for everyone doing #BEC investigations. Curious to see if this will impact malicious app usage. More info (#microsoft-recommended-current-settings" target="_blank" rel="nofollow noopener">learn.microsoft.com/en-us/entra/id…) #stayInvictus #BEC #CloudIncidentResponse

Just dropped off some NoLogsNoBreach stickers at the #GrrCON stickercon

Sharing for awareness of the awareness.

I can't wait until this tactic is used in a KnowBe4 simulation. Imagine failing this test 😭

🚫 These threat actors tried to hide their code behind the GPU. We caught them anyways. 🐺 Our @AWNetworks Labs team uncovered a threat actor abusing GitHub’s repository structure and Google Ads to redirect users to a malicious download, while a GPU-gated decryption routine kept the payload encrypted on systems without a GPU. We have named this new attack technique #GPUGate. 👉 Full research here: arcticwolf.com/resources/blog… #CTI #ThreatResearch #ThreatIntel #ArcticWolf #SecOps #SOC

@ThatCuberGuy99 If we meet, I've got Infosec stickers! See you at Grrcon.

Hello World, I’m brand new to cyber security and I’m looking for opportunities to learn anything I possibly can. I want to be able to connect with anyone sharing advice or experience. I’ll be at #GrrCon this year hope to meet some of you there!

Woo! Big thank you to @InvictusIR !

Say it louder for those in the back.

@InvictusIR I want access because Invictus always produces good stuff!

💥 𝐂𝐥𝐨𝐮𝐝 𝐋𝐚𝐛𝐬 𝐢𝐬 𝐥𝐢𝐯𝐞! 🏗️ A hands-on lab environment to practice your cloud incident response skills. cloudlabs.invictus-ir.com We're also doing a giveaway here, to enter: 1. Like this post 2. Comment why you want to have access (Winners announced Monday September 1) #stayInvictus #CloudLabs #CloudIncidentResponse

I just started a new blog, and this is my first post. I took a bit of PTO, so this is a little record of some fun I had playing around with Intune during that time. It's about enrollment restriction bypass😄 temp43487580.github.io/intune/bypass-…

A Windows #Clickfix alternative seen in the wild on a mass-spreading malware campaign bypassing traditional Win+R shortcut restrictions User is asked to open the Windows Power User menu (Win+X), open a Powershell terminal and paste and running a malicious Clickfix-style command

First Microsoft introduces the ability to disable direct send after all the abuse, and now Salesforce is providing a method to stop the abuse exploited by ShinyHunters. Better late than never!

Behind the curtain: How Lumma affiliates operate. assets.recordedfuture.com/insikt-report-…

You gotta do this. Something will probably break, but that's the name of the game.