tlansec

two purple beach chairs on the beach with the words these are waiting for us ALT: two purple beach chairs on the beach with the words these are waiting for us

Reminder that the #PIVOTcon2026 CFP closes this Friday, February 6. Get those papers in. We want to see you at @pivotcon.bsky.social in Malaga! 😎

You say "Security Feature Bypass"... I say.... "Remote Code Execution":

msrc.microsoft.com/update-guide...

The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit Rapid7 Labs, together with the Rapid7 MDR team, has uncovered a sophisticated campaign attributed to the Chinese APT group Lotus Blossom.

For folks looking for Notepad++ IoCs, @rapid7.com just dropped a write-up. www.rapid7.com/blog/post/tr...

#apt #unk via VT
BULLETEN_H.doc 7c396677848776f9824ebe408bbba943
1291.doc d47261e52335b516a777da368208ee91
Courses.doc 2f7b4dca1c79e525aef8da537294a6c4
Consultation_Topics_Ukraine(Final).doc 95e59536455a089ced64f5af2539a449
freefoodaid[.]com wellnessmedcare[.]org

A++

I promise you. I absolutely guarantee. You are not ready for what happens when you click this link. ovu.moe

WHAT?!?

LABYRINTHM CHOLLIMA is evolving!

Congratulations

Your LABYRINTH CHOLLIMA evolved into LABYRINTH CHOLLIMA!

That parameter is also a palindrome and does the same thing in reverse!

Release v1.11.0 · VirusTotal/yara-x Make the parser stricter (#502). Implement dex module (#458). Implement C api console log (#515). Implement permhash for the crx module (#510). Implement the imports() method for the Rules object i...

github.com/VirusTotal/y... - 1.11.0 is out! Lots of new features, modules and bug fixes. Read the release notes and congrats to Victor and the contributors!

Microsoft is so fucking stupid.

Microsoft renamed Microsoft Office to Microsoft 365 Copilot App

I'm not joking

Volexity Volcano Server & Volcano One v25.12.18 adds 300+ YARA rules, full parsing of Windows prefetch and Linux cron jobs, inline syscall hooking detection, and 5-level page table support. [1/3]

Narrator Voice: And so thousands of infosec people looking for relevance and attention logged into VirusTotal looking for samples uploaded from Venezuela in the last year.

finally, we're living through precedented times

Some phishers have taken inspiration from Russian cyber-espionage group UTA0355 and are using a technique that tricks users into sharing their OAuth material in a web page (UAT0355 did it via email replies)

pushsecurity.com/blog/consent...

everyone in the uk, internally hears: _OH DARLING HOLD MY HAND_

A study in the evolution of SVR cyberespionage tradecraft

Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks In early 2025, Volexity published two blog posts detailing a new trend among Russian threat actors targeting organizations through the abuse of Microsoft 365 OAuth and Device Code authentication workf...

@volexity.com tracks a variety of threat actors abusing Device Code & OAuth authentication workflows to phish credentials, which continue to see success due to creative social engineering. Our latest blog post details Russian threat actor UTA0355’s campaigns impersonating European security events.

On the plus side, everytime there's a Cloudflare outage 1000s of threat actors around the world have their malware C2 go down for a few hours.

I don't work for Insikit group.

CTO at NCSC Summary: week ending November 30th “A lack of liability for software vendors is among the most pressing issues putting Britain’s economic and national security at risk"

Weekly summary is out..

ctoatncsc.substack.com/p/cto-at-ncs...

🎵🎶All I want for Christmas is… electrons 🎶🎵

Release v1.10.0 · VirusTotal/yara-x New yr fix warnings command (#493). Generate more efficient WASM code for some expressions, reducing the size of compiled rules (5efc214, a865681). Improve the API for traversing the AST in DFS ord...

Yara-x 1.10.0 released today! It can now automatically fix some warnings, and some improvements in code generation. This is another great step forward for the project.

github.com/VirusTotal/y...

A picture of the evolution of warfare rising from early primate with a bone all the way to a threat developer hunched over a laptop.

Really digging this year’s CYBERWARCON logo

a man says where do i register in front of a woman ALT: a man says where do i register in front of a woman

#PIVOTcon26 registration is now OPEN 🤟📷 #ThreatResearch #ThreatIntel 📷https://pivotcon.org
Please read carefully the whole 🧵 for the rules about invite -> registration (1/6)🌐

Enhance your CyberChef experience with GeoCities mode!

Remember NFTs? 😂😂😂😂😂😂😂

YouTube video by Oli Frost Private jets don't pay fuel tax. Now I don't either.

This is so good. bahahaha:

www.youtube.com/watch?v=dr9M...

At @ncsc.gov.uk we have just launched the CyberUK tech talks call for papers across three topics

- Cyber applications of AI
- What works: approaches that reduce cyber harm
- The evolving threat

www.cyberuk.uk/2026/call-fo...

my response to this is the loudest OK BRO you've ever heard in your life