April 1, 2023

                            April 1, 2023

                April 1, 2023

Jan Lemnitzer @JanLemnitzer
If this is a supply chain attack them it is a very well chosen target as the critical services it provides to the UK government will be very difficult to replace.
@thegrugq
theguardian.comFailed IT systems at Capita fuel fears of cyber-attack on crucial NHS providerStaff unable to access computers and local authority phone lines knocked out as outsourcing giant investigates possible data breach1:49 PM ∙ Mar 31, 2023
3Likes2Retweets
-
J.R.R. Jokien 🗡️🏹🪓 @joshcarlosjosh
[youth pastor voice] you know who else was arrested the week before Easter?11:45 PM ∙ Mar 30, 2023
66,623Likes9,577Retweets
-
Cybersecurity and Infrastructure Security Agency @CISAgovYesterday, the United States released a statement with other like-minded countries announcing our commitment to identify steps that we can take to help defend civil society groups from being targets of transnational repression by cyber threat actors. cisa.gov/news-events/ne… 
2:02 PM ∙ Mar 31, 2023
58Likes36Retweets
-
Dara Conduit @daraconduitI spent the first part of my DECRA project on Digital Authoritarianism thinking about the role that patriotic hackers play in authoritarian regimes. My first paper on this has just been published in @democ_journal : 
tandfonline.com/doi/full/10.10… 1/
tandfonline.comDigital authoritarianism and the devolution of authoritarian rule: examining Syria’s patriotic hackersGiven the sensitive nature of cybersecurity in authoritarian regimes, the existence of semi-autonomous patriotic hackers raises questions about their function because no security-adjacent actor can...10:15 PM ∙ Mar 30, 2023
101Likes31Retweets
-
raptor@infosec.exchange @0xdea
#CodeQL zero to hero part 1: the fundamentals of #static #analysis for #vulnerability #research 

github.blogCodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research | The GitHub BlogLearn more about static analysis and how to use it for security research!In this blog post series, we will take a closer look at static analysis concepts, present GitHub’s static analysis tool CodeQL, and teach you how to leverage static analysis for security research by writing custom CodeQL querie…8:07 PM ∙ Mar 31, 2023
46Likes15Retweets
-
Ollie Whitehouse @ollieatnowhereWeekly analysis is out:

-🇺🇸🇬🇧🇫🇷 & friends go after commercial spyware
-🇷🇺 ops on 🇺🇸 elected
-🇰🇵 supply chain op
-🇨🇳 ops on 🐧
-🇨🇳 ops on all sectors 🌐
-🇮🇳 ops on 🇨🇳☢️
-🦹‍♂️ 51k website breach

& the usual offensive/defensive tradecraft & tooling..

bluepurple.binaryfirefly.com/publish/post/1…
bluepurple.binaryfirefly.comBluepurple Pulse: week ending April 2ndGovernment commercial spyware counter proliferation activities begin at scale ..6:19 AM ∙ Apr 1, 2023
24Likes7Retweets
-
Kevin Gosse @KooKiz
Still a very early prototype, but here is Windbgpt, a #chatgpt-powered AI assistant directly in #Windbg! It analyzes the output of the commands, and provides guidance to solve the stated problem. Here is an example of it investigating a deadlock in a .NET application. 
10:16 PM ∙ Mar 30, 2023
357Likes67Retweets
-
Dr. Dan Lomas @Sandbagger_01
Israel's government might be flailing, but the Mossad is flourishing washingtonexaminer.comIsrael’s government might be flailing, but the Mossad is flourishingPrime Minister Benjamin Netanyahu’s government might be in chaos, but Israel’s foreign intelligence service is flourishing.7:34 AM ∙ Apr 1, 2023
24Likes12Retweets
-
In general it seems like a good idea to know this probability yardstick.
Dan Black @DanWBlack
Oh boy. Please reference the yardstick before penning the UK says Gerasimov is on the way out takes🙏  
Ministry of Defence 🇬🇧 @DefenceHQ
(4/4) After ten years as CGS, there is a realistic possibility that Gerasimov is pushing the limits of how far Russia’s political leadership will tolerate failure.7:15 AM ∙ Apr 1, 2023
82Likes16Retweets
-
Igor Os @igor_os777
10:04 PM ∙ Mar 29, 2023
241Likes45Retweets
-
soul nate @MNateShyamalan
lmaooo someone submitted a pull request called “better recommendations on timeline” and all it does is hide the tweets of anyone who pays for twitter 
8:08 PM ∙ Mar 31, 2023
16,707Likes1,527Retweets
-
J. A. Guerrero-Saade @juanandres_gs
Ok, a delayed connecting flight is finally giving me some time to reflect on the madness of the past few days. Let’s talk about the #3CX software supply chain attack campaign we dubbed SmoothOperator. A brief recap of timeline and salient points… 
1:06 PM ∙ Apr 1, 2023
10Likes7Retweets
-
author_isnt_elon @i0null
@vxunderground 
8:33 PM ∙ Mar 31, 2023
71Likes9Retweets
-
Tay 🦊 💖 @tayvano_
The selling of this bitcoin is, by far, the least interesting part of the saga.

The govt's seizure, the dude who had his bitcoin seized, and why it even got seized in the first place is full of so many amazing, hysterical, enraging gems.

Heads up...not a short story. Buckle up. 
db @tier10k
[DB] US Govt Sold 9,800 BTC on March 14, Intends to Sell a Further 41,500 BTC Connected to Silk Road in Four Batches Over the Course of the Year: Court Filing10:17 PM ∙ Mar 31, 2023
1,899Likes517Retweets
-
Bert Hubert 🇺🇦 @bert_hu_bert
For your weekend: a from first principles introduction to deep learning, with working code that learns to read handwritten letters. & along the way we cover advanced subjects like Adam, weight decay, dropout, data augmentation & quantisation (@ggerganov): berthub.euHello Deep Learning - Bert Hubert’s writingsA from scratch GPU-free introduction to modern machine learning. Many tutorials exist already of course, but this one aims to really explain what is going on, from the ground up. Also, we’ll develop the demo until it is actually useful on real life data which you can supply yourself.
Other documents…10:02 AM ∙ Apr 1, 2023
8Likes5Retweets
-

                            Don't miss what's next. Subscribe to the grugq's newsletter: