Instacyber

MORPHEUS: They're coming for you, Neo. I can guide you, but you must do exactly as I say. Take the elevator to the lobby and go to the CVS across the street. Purchase 5 Steam gift cards at $200 each. Scratch off the protective coating on the back and tell me the fifteen digit redemption codes. Hurry

CFP when?!

This research was a banger, with pretty broad targeting albeit some that falls within the expected profile for the TA group.

Despite the large initial reach, I expect overall infection rates were hampered by relatively low Firefox market share. Fingers crossed they don’t get a Chrome 0-day..

Diligent intel producers should always be mindful of tracking report readership and gathering feedback.

As a “cyber Intel” practitioner, I’ve found the lowest friction way to achieve the former is just to publish and watch telemetry as a stream of customers start pinging adversary infrastructure 😅

Oh absolutely! We often fall into the trap of chastising obviously negligent behavior (unpatched hosts on the internet!) but sometimes lose sight of the scale and complexity of the challenge.

I would genuinely love to hear these authors opinions with an understanding of modern day cyber threats!

Although I’m viewing this from a practitioner point of view instead of a historical one so maybe I’m missing the point. Unfortunately some folks point to similar sentiment to demonstrate the field has failed, but the challenge is similar to “let’s stop war”..

I’d argue saying the same thing isn’t effective and doesn’t account for reality. Issues have moved from abuse of trust to identification of malice to exploitation of process over the years, and while these quotes evoke a cosy nostalgia they don’t really demonstrate much except human naivety

Can't really beat this advice. One additional (but related) layer that has been helpful for me: people aren't interested in how you came to your conclusions. Your finished product needs to reflect how you think of the project at the end, not the journey of how you got there.

Hash collisions are irrelevant within the context of referencing a sample with a description in an immutable data source (a book), so go with MD5 for space reasons.

I have no idea why people always bring collisions up in similar discussions.

I really liked this article.

My addition is that major offensive cyber campaigns are only really useful as a first strike capability and rapidly lose meaningful utility when conflict moves towards tactical requirements. @moore.bsky.social notes the speed of cyber in his first claim.