December 10, 2022
On war and cybers, some thoughts
The first reports are now coming out about the offensive cyber operations of the Ukrainian intelligence services. Apparently they’re very interested in the Russian government. I’m as shocked as you are.
Please like and subscribe.
The more important lesson to learn here is that espionage is more useful than effects operations conducted without context. What I mean by that is, effects operations are most effective when employed within a strategy that takes advantage of them. Effects operations executed at random are generally speaking of negative value — they train the opposition and burn access.
Intelligence is almost always useful. Effects are useful inside a strategic context. Information operations are orthogonal because they typically don’t involve the same resources.
This focus on espionage demonstrates that Ukraine is focussed on getting the most value from their limited resources. They don’t have the same sort of cyber forces available as the Russians.
Ukraine has limited resources and must get maximum value from what they have. That means espionage.
Cloud Atlas targets entities in Russia and Belarus amid the ongoing war in Ukraine - Check Point Research
Introduction Cloud Atlas (or Inception) is a cyber-espionage group. Since its discovery in 2014, they have launched multiple, highly targeted attacks on critical infrastructure across geographical zones and political conflicts. The group’s tactics, techniques and procedures (TTPs) have remained relatively static over the years. However, since the rapid escalation of the conflict between Russia […]
-
This is the biggest, most impactful cryptographic result in years, and nobody is talking about it. You can have a whole successful career and not discover something half as important as this.
Dec 10, 2022
-
Using openAI chat for phishing
Using OpenAI Chat to Generate Phishing Campaigns | Rick's Blog
BackgroundOpenAI chat has exploded in popularity over the last couple of weeks. People are using it to do all sorts of interesting things. If you are unfamiliar with OpenAI Chat and GPT-3, you can fin…
-
Sad day for pre Pwn2Own bugs.
The Last Breath of Our Netgear RAX30 Bugs - A Tragic Tale before Pwn2Own Toronto 2022 | STAR Labs
Background Some time ago, we were playing with some Netgear routers and we learned so much from this target. However, Netgear recently patched several vulnerabilities in their RAX30 router firmware, including the two vulnerabilities in the DHCP interface for the LAN side and one remote code execution vulnerability on the WAN side which we prepared for Pwn2Own Toronto 2022. This blog post focuses on the vulnerabilities found in version 1.0.7.78You can download the firmware from this link, and eas...
Cool vulns don't live long - Netgear and Pwn2Own
Cool vulns don't live long - Netgear and Pwn2Own
-
This is absolutely hilarious.
A researcher created a bunch of research reports about vulnerabilities that weren’t actually vulnerabilities. And for an alleged RCE they included a broken PoC (it even hits the wrong web page). The developers off the Moobot malware (some sort of Mirai-alike) used the PoC to add support for this fake vulnerability!!
Moobot Uses a Fake Vulnerability | Blog | VulnCheck
An investigation into CVE-2022-28958 finds the vulnerability doesn't actually exist.
-
Delegating is hard because you have to intentionally not do stuff that you want to do because you delegated it. That only leaves the stuff you didn't want to do that you couldn't delegate.
Dec 9, 2022
-
-
US Air Force posters published in 1983 as part of a series imagining the USAF in the year 2000.
Dec 8, 2022
-
Weekly analysis is out: -🇷🇺 ops on gov, intel, and mil -🇷🇺 ops use Slack C2 -❓ wiper ops in 🇷🇺 -🇻🇳 Linux IoT implants -🇰🇵 ops for ₿ -🇮🇷 ops on activists, journos etc. -🇮🇷 wiper ops in 🇮🇱 -🇵🇰 CT ops burnt then lots of ChatGPT RevEng tooling and more.. bluepurple.substack.com/p/bluepurple-p…
Dec 10, 2022
Bluepurple Pulse: week ending December 11th
600k Euro fine under GDPR in France for storing passwords as MD5s without salts
-
Happy Log4j Anniversary, Everyone.
Dec 9, 2022
-
Secure messaging is more complex than “use libsignal.”
https://mjg59.dreamwidth.org/62598.html-
—
A Windows executable from the Mingw Dynasty
Dec 10, 2022
-
https://emacs.ch/@anticomputer/109487317977257354Here’s a reminder that there’s a really good collection of offense focused security talks bit-rotting away in the old Immunity Vimeo account, e.g.[see below]… not sure if they’ll be up forever since many of the original folks are no longer with the company, so probably worth grabbing before they completely go the way of the dodo.
-
Add a comment: