July 5, 2022

Lets start with a lol

The message below was meant to start an embargo for the issue, but it was CC'ed to netfilter-devel, which is a public mailing list, so it also appears here:

oss-sec: Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init

Lawrence Abrams @LawrenceAbrams

AstraLocker ransomware shut down and sent us their decryptors.

bleepingcomputer.comAstraLocker ransomware shuts down and releases decryptorsThe threat actor behind the lesser-known AstraLocker ransomware told BleepingComputer they’re shutting down the operation and plan to switch to cryptojacking.

SUEDE @SuedeBlade

Still blows my mind that Elmo, Grover and Kermit were all legitimate, relatively common names before the muppets made it impossible to name your child that. There was a president named Grover! Theodore Roosevelt's son was named Kermit!

Now that's truly leaving a mark on culture

Michael Bazzell @IntelTechniques

Three years ago, we were bullied into taking our search tools offline, threatened with lawsuits, and suspended by our web host. Today, the tools return with updates, free for everyone. New features soon. Details on Friday's show. Please be responsible:

inteltechniques.com/tools/

Bad crypto.

Police CyberAlarm Uses Alarming Cryptography – Semantically Secure

Today we’re going to be talking about this code, shared on Twitter by Paul Moore. It’s worth noting that this code snippet was after Paul attempted to alert them to security issues with…

This is a great interview with Stanimir Dobrev Twitter.com/delfoo on the state of the Russian military and Russian policymakers thinking. This guy was very very good on pre invasion assessments of Russian military capability. Now he disagrees with the German assessment.

To put that in context, the head of the German foreign intelligence service had to be rescued from Kyiv when he was surprised by the invasion. Germany is not exactly covering itself with glory on the intelligence front.

https://warontherocks.com/2022/06/strange-debacle-misadventures-in-assessing-russian-military-power/

samczsun @samczsun

1/ Today, someone tried to hack me with a crypto stealer, so I guess I've finally made it

Fortunately, they weren't successful, but all it would've taken was three clicks. Read on to learn about how the attack works, how to protect yourself, and some basic malware analysis🕵️