Drunk Binary

a man and a robot are reaching out to touch each other 's hands . ALT: a man and a robot are reaching out to touch each other 's hands .

Robot Jox needs a reboot/remake

Also highly recommend a quick jaunt down to San Jose for Henry's Hi-Life for some of the best ribs and sauce and Nob Hill Cafe in SF has some amazing italian food.

Tracing...

I will be speaking at @kernelcon.bsky.social on Fri, Apr 3rd. The talk will cover previously-unreported features of the sedexp Linux malware found in the wild - including loading of a memory-only rootkit! Talk will cover how the rootkit was discovered & how to analyze with @volatilityfoundation.org

MSTIC is hiring! Current roles in US and AU.

The Microsoft Threat Intelligence Center (MSTIC) is recruiting experienced nation-state threat hunters with highly honed threat intel analysis skills. MSTIC is responsible for delivering timely threat intelligence across our product & services teams.

State actors have a hard requirement to have access into telecoms, ISPs, and cloud providers of interest – always and forever

If you aren’t actively finding and evicting them on a regular basis, you’ve missed them

If you do successfully evict them, they will try again

Access is their steady state

Hahaha

Haha Busch lattes

@bigbadw0lf.bsky.social
www.instagram.com/share/reel/_...

Hanging Christmas lights sucks

Me climbing my ladder to hang Christmas lights today:

Underrated swag from @cyberwarcon.bsky.social

It was bread in captivity

The Wizards of Winter War have unleashed their Christmas Canon in D to lay low the Mad Russian Christmas offensive.

Looking good

Elon’s habitual underinvestment in security is about catch up to him

The mentality of “we will go faster than the speed of IP theft” can work when it’s manufacturing with exotic metallurgy, producing terrible cars, or tanking a social media platform

Adding a telecom to your ISP is a ticket to pain

Cyber threats to critical infrastructure are rising!

Join Casey Brooks & Kyle O'Meara at #CYBERWARCON to explore tactics by CyberArmyofRussia_Reborn, CyberAv3ngers, and VOLTIZITE targeting water, energy, and telecom.

Don’t miss this ICS & OT security talk!💡
🎟️ www.cyberwarcon.com/registration

The unfortunate reality of most software developers writing CRUD apps.

My night had been yarascan.Yarascan is not the same as yarascan.YaraScan in volatility when every other module is first letter uppercase the rest lowercase for the sub module

BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA In July 2024, Volexity identified exploitation of a zero-day credential disclosure vulnerability in Fortinet’s Windows VPN client that allowed credentials to be stolen from the memory of the client’s ...

@volexity.bsky.social has published a blog post detailing variants of LIGHTSPY & DEEPDATA malware discovered in the summer of 2024, including exploitation of a vulnerability in FortiClient to extract credentials from memory. Read more here: www.volexity.com/blog/2024/11...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

I can fix her

The answer is “Option 3”

GRU Unit 74455 operators arguing about the minimum reading requirement to be a certified “Sandworm” operator:

😂🤣
(courtesy of @drunkbinary.bsky.social’s twitter)

Hahaha I just noticed your handle change

lol this feels deliberate

When does Good Krebs get on here?