Simon simonsen

Super pumped to release the latest version of SOF-ELK, an appliance-style VM preconfigured with the Elastic Stack, a ton of log and related parsers, built to ease analysts' workflows even with massive amounts of data.

Get the details and download link here: for572.com/sof-elk-readme

Enjoy!!

Suggestion for Azure abuse team - monitor GreyNoise. Azure’s becoming biggest source for a bunch of vulns.

A friend of mine who lives in Austin saw this at a bar and said she had never been so offended by something she 100% agreed with.

Microsoft Used China-Based Engineers to Support Product Recently Hacked by China - Slashdot Microsoft announced last month that Chinese state-sponsored hackers exploited vulnerabilities in SharePoint to breach hundreds of companies and government agencies, including the National Nuclear Security Administration and Department of Homeland Security. The company omitted that SharePoint support...

People probably saw the report recently about people in China doing support on US Government systems, unknown to the USG.

As I said at the time to @briankrebs - don’t worry, there’s plenty of skeletons in that closest. Here’s another: https://slashdot.org/story/445166

As usual, Bill Burr doesn’t miss 🎯

Deleting Hidden Proxy Settings that Break Windows Apps Windows leaves behind hidden proxy configurations in the ProxyMgr registry that break apps even after disabling proxy settings. Learn how to identify and completely eliminate these phantom settings th...

New blog post! 📰 Ever "disabled" Windows proxy settings but apps still can't connect? Windows secretly leaves hidden ProxyMgr registry keys that break everything — even Kerberos auth! Here's how to delete the phantom settings 👻🔧👇
awakecoding.com/posts/deleti...

Yes you are an ant.

Hopefully someone has already gone through the pain? Is there an MCP server for GitHub Actions yet? Otherwise I'm thinking Copilot could be instructed to call the GitHub CLI with a flow that pushes to a branch, triggers a workflow, checks the logs, etc.

And a Russian asset.

Talks from the HackMiami 2025 security conference, which took place in May, are available on YouTube: www.youtube.com/playlist?lis...

Talks from the Securi-Tay 2025 security conference, which took place in February, are available on YouTube: www.youtube.com/playlist?lis...

My whining thread :p

I couldn't find any reports, queries, etc., to help us assess impact :(

The responsibilty to discover licensing costs was left to the customer with sparse instructions to go figure it out...

"Just look at your audit logs!"

learn.microsoft.com/en-us/entra/...

Detecting code copying at scale with Vendetect Vendetect is our new open-source tool for detecting copied and vendored code between repositories. It uses semantic fingerprinting to identify similar code even when variable names change or comments ...

Security firm Trail of Bits has released Vendetect, a tool for automatically detecting copy/pasted code between repositories.

blog.trailofbits.com/2025/07/21/d...

github.com/trailofbits/...

#squirrel 🐿️

Dear @stephencolbert.bsky.social,

Thanks for all the years of speaking truth to power & finding the funny in fascism.
Looking forward to following you wherever you land,

Your fan, Mar🐫

❗️Monitoring channels report takeoff of 🇷🇺Russian strategic bombers Tu-95MS. Missile attack on 🇺🇦Ukraine possible at night

Interesting moves by Trend Micro - they appear to stolen a competitors research into AI, not named them (it was Aim), written about the importance of collaborative AI research (lol), not linked research, said it is "new" (it is old).. and about 50% of the article text appears to be generative AI.

The corporate cybersecurity fantasy vs the cybersecurity reality.

Germany-funded long-range weapons to arrive in Ukraine by late July, general says German Major General Christian Freuding confirmed that the weapons systems' initial deliveries are expected by the end of July. The arms will be supplied in a "high triple-digit quantity," he said.

⚡️Germany-funded long-range weapons to arrive in Ukraine by late July, general says.

German Major General Christian Freuding confirmed that the weapons systems' initial deliveries are expected by the end of July. The arms will be supplied in a "high triple-digit quantity," he said.

I’m tracking 128 active CitrixBleed 2 victims in telemetry, today, from attacker infrastructure (one threat actor group).

The value of understanding how permissions work in Active Directory cannot be understated. Out of all the common findings on internal pentests, of ad environments, that seems to be the # 1 most difficult for admins to identify on their own

Learning how to research and self-educate in the IT/cybersecurity fields, heck in life, is such a super critical skill to develop...

Ukraine, Denmark sign deal to launch Ukrainian military production on Danish soil "This is a unique case of international cooperation for the Ukrainian defense industry," Strategic Industries Minister Herman Smetanin said.

⚡️ Ukraine, Denmark sign deal to launch Ukrainian military production on Danish soil.

"This is a unique case of international cooperation for the Ukrainian defense industry," Strategic Industries Minister Herman Smetanin said.

So do I.

The key component is interceptor drones, which have already proven effective in Ukraine, said Zelensky during his visit to Denmark.

“We’ve tested models from several companies, and now we’ve signed a very serious contract. We’re counting on shooting down large numbers of Shaheds,” he added.

RCE Security has found major vulnerabilities in the Wind FTP server.

Attackers can bypass authentication on the server's web interface just by appending a NULL byte to the username followed by any random string.

www.rcesecurity.com/2025/06/what...