the grugq's newsletter

Subscribe
Archives
July 18, 2025

July 18, 2025

July 18, 2025

One of the very first tools/projects I released back in early 2022 looked at hosting malware via DNS records and then retrieving+reassembling. I used MX instead of TXT records to sidestep MDE detection. https://t.co/fRWdbLDkjb https://t.co/RxurMZuPg0

— Octoberfest7 (@Octoberfest73) July 16, 2025


Mitre has a new framework to complement ATT&CK framework to help the financial sector detect and respond to cyberattacks on cryptocurrency assets and other financial targets. What you need to know: https://t.co/ecbDl9W1c6

— Dark Reading (@DarkReading) July 16, 2025


Researchers at the Lookout Threat Lab have discovered a mobile forensics application named Massistant, used by law enforcement in China to collect extensive information from mobile devices. https://t.co/gaBp46qNa6 @Lookout

— 780th Military Intelligence Brigade (Cyber) (@780thC) July 17, 2025


GreyNoise observed exploitation of CitrixBleed 2 (CVE-2025-5777) nearly two weeks before a public PoC was released. Full breakdown: https://t.co/MCTksyYvcW #GreyNoise #ThreatIntel #CitrixBleed #Citrix #NetScaler

— GreyNoise (@GreyNoiseIO) July 16, 2025


https://security-explorations.com/esim-security.html


🚨New paper in @TrendsCognSci 🚨

Why do some ideas spread widely, while others fail to catch on?@Jayvanbavel and I review the “psychology of virality,” or the psychological and structural factors that shape information spread online and offline.

Thread 🧵(1/n) pic.twitter.com/F4Nwyo3c4H

— Steve Rathje (@steverathje2) July 17, 2025

Thread by @steverathje2 on Thread Reader App – Thread Reader App

@steverathje2: 🚨New paper in @TrendsCognSci 🚨 Why do some ideas spread widely, while others fail to catch on? @Jayvanbavel and I review the “psychology of virality,” or the psychological and structural factors that ...…

https://authors.elsevier.com/c/1lRke4sIRvW-G3


“‘All US forces must now assume their networks are compromised’ after Salt Typhoon breach.” I’m not even sure what I could possibly add to that. https://t.co/eW7QemZxgv

— Matthew Green is on BlueSky (@matthew_d_green) July 17, 2025


I'd react the same way if a camera caught me enjoying a Coldplay song. Let's not jump to conclusions https://t.co/qROsVgvkk4

— Pinboard (@Pinboard) July 17, 2025

pic.twitter.com/KgIMRtnn0t

— AndrewMohawk⁽ⁿᵘˡˡ⁾ (@AndrewMohawk) July 18, 2025


Spies and SAS personnel among 100-plus Britons included in Afghan data leak | Defence policy | The Guardian

Sources say leak included details of Britons who endorsed Afghan applications to be brought to UK after Taliban takeover


Don't miss what's next. Subscribe to the grugq's newsletter:
X