D Milroy

BACKDOORS & BREACHES - CARD OF THE DAY
Have you experienced this?
Deck: Core Deck 2.2
Attack/Procedure Type: C2 and Exfil
Attack/Procedure: DNS as C2

Tools:
dnscat2 - github.com/iagox86/dnsc...

Learn more:
www.blackhillsinfosec.com/bypassing-cy...

BACKDOORS & BREACHES - CARD OF THE DAY
Have you experienced this?
Deck: Core Deck 2.2
Attack/Procedure Type: Procedure
Attack/Procedure: Server Analysis

Tools:
DeepBlueCLI - github.com/sans-blue-te...

Get Backdoors & Breaches: spearphish-general-store.myshopify.com/collections/...

BACKDOORS & BREACHES - CARD OF THE DAY
Deck: Cloud Deck
Attack/Procedure Type: Initial Compromise
Attack/Procedure: Credentials Posted Publicly in a Code Repository

Tools:
Gitleaks - github.com/gitleaks/git...
TruffleHog - github.com/trufflesecur...
Gitrob - github.com/michenriksen...

BACKDOORS & BREACHES - CARD OF THE DAY
Have you experienced this?
Deck: Cloud Deck
Attack/Procedure Type: Initial Compromise
Attack/Procedure: Malicious OAuth Application

Tools:
O365 Attack Toolkit - github.com/mdsecactiveb...

Learn more:
threatpost.com/oauth-phishi...

CARD OF THE DAY
Deck: Core Deck 2.2
Attack/Procedure Type: Pivot and Escalate
Attack/Procedure: New Service Creation/Modification

Tools:
Impacket - github.com/SecureAuthCo...
Metasploit - www.metasploit.com

Get decks: spearphish-general-store.myshopify.com/collections/...

BACKDOORS & BREACHES - CARD OF THE DAY
Have you experienced this?
Deck: Core Deck 2.2
Attack/Procedure Type: Persistence
Attack/Procedure Evil Firmware

Play for free play.backdoorsandbreaches.com

Get physical card decks spearphish-general-store.myshopify.com/collections/...

YouTube video by Black Hills Information Security Your First Three Linux IR Commands If You're Compromised! | John Strand | BHIS Nuggets

1st 3 Linux IR Commands youtu.be/_VullFykaP0?...

1st 3 Windows IR Commands
youtu.be/ilhzt-Hw_sY?...

Compromised? What Do We Do Next?
youtu.be/DuIXbz30mqk?...

How to Prepare Before the Compromise
youtu.be/V-3-RGsdqpM?...

Demystifying Windows Malware Investigations
www.youtube.com/live/TsTBnAo...

Microsoft shows off novel quantum chip that can scale to 'a million qubits'. So far: Eight Not just a matter of time but a matter of Majorana fermions, too Microsoft says it has developed a quantum-computing chip made with novel materials that is expected to enable the development of quantum computers for meaningful, real-world applications…

Microsoft shows off novel quantum chip that can scale to 'a million qubits'. So far: Eight

YouTube video by Rancid - Topic Nihilism

But it’s a kick ass song so there’s that.

youtu.be/f8GQ-nafTgY

Ozzy Osbourne and Black Sabbath will reunite for the final time this summer Ozzy Osbourne and the original Black Sabbath lineup will reunite this summer for the first time in 20 years. It's expected to be Osbourne's final live show.

Ozzy Osbourne and the original Black Sabbath lineup will reunite this summer for the first time in 20 years. It's expected to be Osbourne's final live show.

After Amazon imposed a strict return-to-office policy that takes effect in January 2025, other companies followed suit. But are RTO mandates a way to boost productivity and charm Wall Street - or just a way to lose your best performers? In this short video, Brian Elliott, who has studied RTO mandate RTO Mandates: Hard Truths for Leaders

Folks at MIT Sloan looked at multiple studies of return to office (RTO) mandates & found they are lose-lose-lose. No reward from Wall Street for “getting tough,” an actual decrease in productivity & revenue, and loss of top talent. youtu.be/4ec_yZCWOCY...

I do not want to sign in with Google.
I do not consent to cookies.
I object to "Legitimate" Interests.
I do not want your newsletter.
I will not switch off my ad blocker.
I do not want notifications.
I don't care about your special offer.
I do not want to subscribe.
I do not want to use your app.

Let's just get the myths out of the way.

1. Lost luggage is rare. (Less than 1 percent.)
2. Carousel waits are shorter than the scrum to get off the plane.
3. Even when airlines don't charge (like Southwest) people are asshats about carry-ons

American travelers are spoiled children.

CISA Issues Binding Operational Directive for Improved Cloud Security CISA’s Binding Operational Directive 25-01 requires federal agencies to align cloud environments with SCuBA secure configuration baselines.

CISA Issues Binding Operational Directive for Improved Cloud Security

Russian hackers use RDP proxies to steal data in MiTM attacks The Russian hacking group tracked as APT29 (aka "Midnight Blizzard") is using a network of 193 remote desktop protocol proxy servers to perform man-in-the-middle (MiTM) attacks to steal data and…

Russian hackers use RDP proxies to steal data in MiTM attacks

Major Announcement Regarding the HOPE Conference:

Effective immediately, HOPE will happen EVERY summer, not every two years. HOPE_16 will be August 15-17, 2025!

www.2600.com/content/majo...

Blue teamers — sometimes we can lose sight of Active Directory. I mean, it just works in the background, right? Active Directory is crucial to Windows networks & a perfect target for bad actors. Dive into this article to learn common active directory pitfalls 7 how to avoid getting your day ruined.

I can't spend more than a few minutes on my LinkedIn timeline before I suffer brain melt. Saw this meme recently and finally understood why...

Student kills 4 at Madison Christian school, police chief says The juvenile shooter was also dead at Abundant Life Christian School on Monday, Madison Police Chief Shon F. Barnes told reporters Monday.

Breaking news: A juvenile killed four people and injured five at a Christian school in Madison, Wisconsin, Madison Police Chief Shon F. Barnes said Monday. The shooter is also dead.

“UnitedHealthcare shooting: The person of interest had a 3D-printed Glock, which might have been involved in the first assassination using a 3D-printed weapon

🔗 www.404media.co/unitedhealth...

pgMail 1.5 Released! Well, it's pretty rare that I get anyone talking about my old PostgreSQL email stored procedure, but here we are. I wrote this thing almost 25 years ago to essentially replicate the functionality of xp_sendmail into PostgreSQL. I released it to the world, because I knew other people would have this issue. And as it turned out, they absolutely do.

pgMail 1.5 Released!

Well, it's pretty rare that I get anyone talking about my old PostgreSQL email stored procedure, but here we are. I wrote this thing almost 25 years ago to essentially replicate the functionality of xp_sendmail into PostgreSQL. I released it to the world, because I knew other…

I should hope so. When I'm gone from this earth, all that will be left of me is what I contributed to the AI consciousness.

Vodka maker Stoli files for bankruptcy in US after ransomware attack Stoli Group's U.S. companies have filed for bankruptcy following an August ransomware attack and Russian authorities seizing the company's remaining distilleries in the country.

www.bleepingcomputer.com/news/securit...

I have created a starter pack to shine light on organizations that make notable contributions back to the #infosec community in the form of generous free tiers, valuable webinars, trainings, resources, etc.

I am sure there are others, just DM or reply with any suggestions!

go.bsky.app/NMbiTUL

YouTube video by Motörhead - Topic Stone Dead Forever (Live)

m.youtube.com/watch?v=AjWa...

Modern Work Fucking Sucks. It’s Monday morning. The first thing you see (yes, before you see your kids, your partner, even your coffee) is a Slack notification. That Slack notification leads you to a Confluence document, which...

So I’m not the most jaded and cynical person in the world. lol

www.joanwestenberg.com/modern-work-...

How steam from a Wisconsin factory fueled a 100-mile band of snow The conditions were perfectly set up for this rare phenomenon.

An isolated band of snow whipped up Thanksgiving mischief for travelers in Wisconsin on Thursday.

Over a several-hour period, a localized zone of occasionally heavy snow dropped a couple inches on places not far from Eau Claire — and the primary culprit was exhaust from a nearby glass factory.

A bit early.

The meaning of the life