April 12
A look at accidents. The wrong approach is to blame “bad person” and the correct approach is to blame the bad system. This has strong parallels to OPSEC, security, and info sec, among others. The problem is usually not the person but the environment or tooling that permits or even encourages the errors.
In Criminalizing Error, We Are Doomed to Repeat Our Mistakes | The Nation
Sending a nurse to prison for causing a patient’s death may satisfy the thirst for vengeance, but it won’t make hospitals any safer.
Some clever crypto something something. Fraud, basically. It is always fraud.
Rekt - Inverse Finance - REKT
DeFi / Crypto - Inverse Finance got flipped for ~$15M. A professionally executed hack allowed an anonymous actor to manipulate the price of INV and help themself to an exclusive deal from the ETH based lending protocol.
The Purge
Putin in on a bit of a purge right now. Taking out the domestic policy guy who was also in charge of Ukraine policy. Clearly he screwed that one up.
The Purge, Electric Butthole Glue
There are a lot of vacancies showing up in the FSB if you’re interested in a new job with a short life expectancy.
https://archive.ph/2022.04.11-203347/https://www.thetimes.co.uk/article/putin-purges-150-fsb-agents-in-response-to-russias-botched-war-with-ukraine-lf9k6tn6g
Great work by ESET.
Lots of reports about the Sandworm attack against Ukrainian electrical substation(s). There are a lot of questions about this, like how the hack was detected and remediated inside an hour.
Industroyer2: Industroyer reloaded
ESET researchers have responded to a cyber-incident that affected an energy provider in Ukraine and involved ICS-capable malware that we've named Industroyer2.
CERT-UA
УÑÑдова команда ÑеагÑÐ²Ð°Ð½Ð½Ñ Ð½Ð° компâÑÑеÑÐ½Ñ Ð½Ð°Ð´Ð·Ð²Ð¸ÑÐ°Ð¹Ð½Ñ Ð¿Ð¾Ð´ÑÑ Ð£ÐºÑаÑни, Ñка ÑÑнкÑÑонÑÑ Ð² ÑÐºÐ»Ð°Ð´Ñ ÐеÑÐ¶Ð°Ð²Ð½Ð¾Ñ ÑлÑжби ÑпеÑÑалÑного звâÑÐ·ÐºÑ Ñа Ð·Ð°Ñ Ð¸ÑÑÑ ÑнÑоÑмаÑÑÑ Ð£ÐºÑаÑни.
The Russian military drones might not be as advanced as they liked to believe. On the other hand, it does seem very pragmatic to use commercial solutions to cut down on costs. Not really sure about that one… particularly since it seems maybe the cost savings weren’t passed on to the customer (the military.)
And here is an entire article written about the above tweet.
Video: Ukraine Soldier Disassembles Russian Drone, Reveals DIY Work
Ukraine's Defense Ministry posted a video on Twitter Sunday of the solider taking apart a Russian Orlan-10 drone.
Security vulnerabilities in the cloud.
Somewhat late on this, but… it looks like SIGINT on Kadyrov and his Chechen buddies was a possible source for US intelligence on the Russian war plans.
A look at how troll farms work, which is always a bit interesting.
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6137759/
Start the conversation: