July 14, 2022
Some basic numbers on ransomware which seem to be maybe reasonable? Measuring one of the most lucrative parts of the infosec industry and the driver for so much security budget seems like a good idea.
Is #ransomware up or down? Up in ‘21 as our latest blog by @hrbrmstr explains. More to come on how ‘22 is shaping up.
But, as we noted in our recent Progress Report, as an ecosystem we’re in a sub-optimal position when it comes to incident information. https://t.co/9HBAB7174g
Institute for Security and Technology @IST_org
The actual post:
https://securityandtechnology.org/blog/rtf-year-two-new-map-new-data-same-mission/-
-
Books to read to understand financial crime.
https://www.economist.com/the-economist-reads/2022/07/11/the-best-books-to-read-to-understand-financial-crime-
A thread of excellence.
-
Yesterday @GPriyandita @B_Herscovitch and I published a @CarnegieEndow paper on how Huawei became Indonesia’s trusted cybersecurity partner. Rather than being seen as the problem. They have successfully positioned themselves as the solution. 1/6
-
Compare decompiler output. Thanks to Binja
https://binary.ninja/2022/07/13/introducing-decompiler-explorer.htmlThe site:
https://dogbolt.org/-
'shall we just tell them about the 9 million we need for the new spyware or also mention the cost of the hardware?'. Top things not to discuss when standing next to a member of the parliamentary committee for supervision of the intelligence services...@thegrugq @ciaranmartinoxf
Stefan Soesanto @iiyonite
-
So, I've spent some time trying to unpack my reactions to this @CFR_org report: cfr.org/report/confron… I'm curious what others think. To me, the individual recommendations are great, but I'm deeply concerned by the decision to declare "the era of the global internet is over."
-
In defense of offense: information security research under the right to science (2022) doi.org/10.1016/j.clsr… ❤️
-
Marcin @Wyrwal of onet.pl has published a fascinating piece on how Ukrainian software developers are using artificial intelligence (AI) to improve the aim of their bomber drones. It deserves attention in English, so here's a 🧵 to summarise it. /1
-
Wait what, Unity is merging with the company best known for its malware delivery system, so popular that it has its own entries in VirusTotal, was blacklisted on Windows by MS, and was used to spread fake flash installers through the Equifax site?! What??
Unity for Games @unitygames
-
This deal, and things like adding ad placements to your phone's lock screen, are more to the heart of building the Metaverse than VR goggles.
Metaverse is essentially "ad tech maximalism", and its vision is to grow the industry by building more media surfaces into your life.
shoshana wodinsky (she/her) @swodinsky
-
When militants attacked Timbuktu's ancient libraries in 2012, thousands of books were smuggled out by Malian librarians
After a decade of digitization, the manuscripts-with topics ranging from spirituality to science and the occult-are available online:
nytimes.com/2022/07/12/wor… 
-
What is your favorite color and why it is blue.
https://www.bbc.com/future/article/20220601-what-your-favourite-colour-says-about-you-
"The 'CSC-TSCM Expert Group' will bring together specialists from EU states "to prevent, detect and potentially neutralise eavesdropping of information in any physical or electronic form [...]" #SIGINT
-
Coworker: (seeing me drink coffee) You should try low caffeine green tea instead. It will change your life.
Me: you should try having 3 kids
Coworker:
Me: it will change your life!
Coworker:
Me: I'm going to get more coffee.
-
AI Red Teams and Adversarial Data Labeling, with Redwood Research
Some very simple adversarial red teaming of ML.
https://www.surgehq.ai/blog/ai-red-teams-and-adversarial-data-labeling-with-redwood-research-
Don't miss what's next. Subscribe to the grugq's newsletter: