January 13, 2025

January 13, 2025

January 13, 2025

Academic work on honeypots and deception are often kinda disappointing, but this paper by @debi_ashenden and Reeves is worth the skim (especially since it confirms lots of our @ThinkstCanary takes 😉)

tl;dr : Canaries work, Use ‘em.

—
¹ https://t.co/LAAJdbsBZk pic.twitter.com/1LOeMUbEVw
— haroon meer (@haroonmeer) January 12, 2025

This image is a perfectly analogy for most enterprise compromises — a "sophisticated attacker" was NOT a state-sponsored Threat Actor. It was just a fat cat. pic.twitter.com/r3jY2JPCRr
— vx-underground (@vxunderground) January 11, 2025

OK so Razzlekhan (@HeatherReyhan) just dropped a new music video before her prison sentence starts later this month. The song is titled "Razzlekhan vs. The United States"

It's... a lot. pic.twitter.com/lgsWtXDyhS
— Haseeb ＞|＜ (@hosseeb) January 11, 2025

Vulnerabilities analysis from patch diffinghttps://t.co/mOMWazUL3Q

Credits @suidpit and @Th3Zer0 #embedded #cybersecurity pic.twitter.com/NvvYdcAhVR
— 0xor0ne (@0xor0ne) January 12, 2025

Work smart, not hard? 😂https://t.co/8bCfnexrhf pic.twitter.com/PUFrYsM3B2
— Patrick Wardle (@patrickwardle) January 11, 2025

Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282)

Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282)

As we saw in our previous blogpost, we fully analyzed Ivanti’s most recent unauthenticated Remote Code Execution vulnerability in their Connect Secure (VPN) appliance. Specifically, we analyzed CVE-2025-0282. Today, we’re going to walk through exploitation. Once again, however, stopping short of providing the world with a Detection Artifact

ACE up the sleeve: Hacking into Apple's new USB-C Controller

ACE up the sleeve: Hacking into Apple's new USB-C Controller - media.ccc.de

With the iPhone 15 & iPhone 15 Pro, Apple switched their iPhone to USB-C and introduced a new USB-C controller: The ACE3, a powerful, ver...

This is where the intersection of AI + cyber will be consequential. Not in the doomsday scenario of zero shot 0-day exploits, but in the exponential growth of attack surface vulnerable to simple scaleable attacks.

I wrote about this 3 years ago https://t.co/bftjYY0we2 https://t.co/adqnLLVrXS
— chrisrohlf (@chrisrohlf) January 12, 2025