Feb 4, 2023
I suspect this wasn’t the secret service. They’re a bit busy these days, what with the war and all.
Nice. Ukraine’s security service hacked a zoom-call between moscow and the quislings in Ukraine. And officially notified the latter that they’re charged with treason.
And then let them listen to 🇺🇦 anthem.
#StandWithUkraine
-
-
-
The intelligence officer in #Germany unmasked as a #Russian agent and charged with treason has been identified: Carsten Linke, 52. A "rising star" in the BND, Linke handled foreign SIGINT, some related to Ukraine, all of which he sold to Moscow.
-
Mr. President, a second balloon has been spotted. https://t.co/bkEryHSzBD
CNN @CNN
-
Today in 1961, the first “Looking Glass” EC-135 airborne command post went aloft from SAC HQ at Offutt AFB, Nebraska, ensuring the ability to fight a nuclear war if SAC were destroyed. For more than 29 years—until July 24, 1990—at least one aircraft was continuously airborne.
-
We're updating our course on the economics of information security, which is used by many universities and other organisations worldwide:
-
Cryptophone service "Exclu" has been dismantled; 79 searches & 42 arrests took place in a/o NL, DE & BE, incl. owners & operators of Exclu.
The Exclu app cost € 800 per 6 months. It had ~3k users, ~750 of whom speak Dutch.
News release (Feb 3, in Dutch)
-
MITRE Cyber Resiliency Engineering Framework (CREF) Navigator crefnavigator.mitre.org/navigator
Free visualization tool to allow organizations to customize their resiliency goals, objectives & techniques, aligned w/NIST SP 800-160, Vol. 2 (Rev. 1).
Press release: businesswire.com/news/home/2023… 
-
Want anonymity? Make a persona not a mystery.
The technique described here are called “apparent cover.” The idea of apparent cover is that the observer fills in the cover story based on the clues provided. For example someone dressed as a fisherman — vest with pockets, floppy canvas hat, fishing pole, tackle box — hanging out at the docks at dawn, an observer is unlikely to even notice them but if they did they’d assume they’re a fisherman. Not a spy.
https://sive.rs/anon-
„An employee belonging to the company reportedly used the GIS data during a test and left a database online without securing it. Investigators said the hacker found the data through a search engine 'that wasn't Google'.“
-
Software Supply Chain Attacks: An Illustrated Typological Review (.pdf, January 2023, 50pp) css.ethz.ch/content/dam/et…
By Sean Cordey, former Researcher in the Risk and Resilience Team at @CSS_ETHZurich and currently Associate for Cyber and Digital Policy at @ICRC 👏.
-
Well done @frycos, such a sweet pre-auth RCE!
ϻг_ϻε (@stevenseeley@infosec.exchange) @steventseeley
-
Handbook to combat CBRN disinformation (4.3MB .pdf, Jan 2023, 122pp) unicri.it/sites/default/…
A @UNICRI report on countering misleading & deceptive info re: chemical, biological, radiological & nuclear (CBRN) threats.
By Francesco Marelli & Mariana Diaz Garcia (@MarianaDiaz_Ga)
-
Retired Air Force Intelligence Officer Had Hundreds of Classified and Secret Files at His Florida Home: Military.com
-
New p-code emulator for fuzzing based on ghidra sleigh. Full system fuzzing perf comparable to qemu, CmpLog support etc.
Icicle: A Re-designed emulator for greybox firmware fuzzing arxiv.org/pdf/2301.13346…
-
Don't miss what's next. Subscribe to the grugq's newsletter: