the grugq's newsletter

Subscribe
Archives
August 2, 2024

August 2, 2024

August 2, 2024

The first version of Arcane, formerly known as PowerRemoteDesktop is now available. For those unfamiliar with the project, Arcane is a fully functional remote desktop server for Windows, entirely written in PowerShell. I've now migrated the viewer/client to Python with a… pic.twitter.com/ru0olRKdnY

— Jean-Pierre LESUEUR (@DarkCoderSc) August 1, 2024


https://www.youtube.com/@TonsOfTONZ/videos


Our new documentary, “Putin’s Trader,” is live now on YouTube! https://t.co/WkC3IkZIjb

This is the inside story of the rise and fall of young Russian oligarch Vladislav Klyushin - who was traded back to Moscow today as part of the historic prisoner swap with Russia.

He led one…

— Eamon Javers (@EamonJavers) August 1, 2024


Very excited to release PANIX, a highly flexible Linux persistence tool for security research and detection engineering. Test your security posture and learn about Linux persistence. https://t.co/ohTz7xkLdP#DetectionEngineering #SecurityResearch #Persistence #Linux #Security pic.twitter.com/f4ECcBXO0i

— Ruben Groenewoud (@RFGroenewoud) August 1, 2024


The @WSJ’s piece about the secret negotiations to free Evan Gershkovich ends with an incredible anecdote: pic.twitter.com/wM7aWu44tu

— David Gura (@davidgura) August 1, 2024


LockBit ransomware titan now hangs by a thread

I like this analysis. The centre of gravity for LockBit was their brand reputation, not their technology, meaning that a tarnished reputation could kill the organisation. It’s not clear that it would work on any other group, of course.

https://www.theregister.com/2024/07/31/five_months_after_lockbit/


Alright, so MSRC told me they couldn't reproduce the two bugs I recently discovered in Excel despite I have provided the full write-up and stack trace etc. Guess for the 1st time I have to make screen videos for them.. Sigh..

— Haifei Li (@HaifeiLi) August 1, 2024

I'd suggest MSRC go hire more senior engineers, many years ago I was able to give just tips and they could find all the variants by their own. Sigh..

— Haifei Li (@HaifeiLi) August 1, 2024


Excellent free book introducing cryptography concepts and algorithms in an accessible way.

"Practical Cryptography for Developers Book"https://t.co/BZvOdE28hN

Credits Svetlin Nakov (@svetlinnakov)#cryptography #cybersecurity pic.twitter.com/WoXDhb4r5D

— 0xor0ne (@0xor0ne) August 2, 2024


In a 2022 NYT article on the Pegasus spy software - which I happened to only read recently - it is claimed that countries purchasing it have become more supportive of Israel in the UN. I was curious if it was possible to visualize this relationship: preliminary graphs below⬇️ pic.twitter.com/HcJXmD5fsk

— Alexander Sorg (@alexander_sorg) August 1, 2024

Thread by @alexander_sorg on Thread Reader App – Thread Reader App

@alexander_sorg: In a 2022 NYT article on the Pegasus spy software - which I happened to only read recently - it is claimed that countries purchasing it have become more supportive of Israel in the UN....…


A great reminder that while people argue endlessly about tooling, it’s expertise that dominates outcomes. https://t.co/Pk96tYLloq

— @norootcause@hachyderm.io on mastodon (@norootcause) August 1, 2024


Nazi concentration camp Ravensbrück used female forced labor for textile and clothing manufacturing, including sock-knitting for the Wehrmacht. Some women knitted mistakes into the heels, making them uncomfortable or painful to wear. Such a great example of textile as resistance pic.twitter.com/IqRtjdQDAt

— Yuliya Komska 🇺🇦 (@ykomska) August 1, 2024


Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X