May 17, 2022
Someone just noticed that Kaspersky is Russian..
The authorities are "really the only tool that we have to deal with the threat posed by Kaspersky on an economy-wide commercial basis, given our generally open market," @EmilyKilcrease1 tells @Reuters. Read more:
Ann Linde @AnnLinde
An interesting indictment.
An interesting indictment. Venezuelan cardiologist, 55, charged with designing ransomware, sharing profits with cyber criminals, and bragging about his malware being used by Iranian state-sponsored groups.
justice.gov/usao-edny/pr/h…
Iconic.
The losses from this event are staggering. Technology puts it into perspective.
Une fois les photos assemblées, ça rend le massacre plus visible, et impressionnant. La violence des combats lors de ce franchissement raté par les russes a été décrite comme "inouïe"...
Je veux bien le croire...
Seems very cool
Today, we are open sourcing Tetragon after several years of development. eBPF-based Security Observability & Runtime Enforcement.
What’s the easiest programming language in your opinion?
Repo:
https://github.com/cilium/tetragonTheoretical malware running at the same level as “find my iPhone”
https://arstechnica.com/information-technology/2022/05/researchers-devise-iphone-malware-that-runs-even-when-device-is-turned-off/AI can recognise race based on an X-ray, and scientists has no idea how.
https://www.thelancet.com/journals/landig/article/PIIS2589-7500(22)00063-2/fulltextGreat assessment.
In an extremely rare moment of candour on Russian state TV today, defence columnist Mikhail Khodaryonok gave a damning assessment of Russia's war in Ukraine and his country's international isolation. It's fairly long but worth your time so I've added subtitles.
ITW exploited bug.
CVE-2022-22675 is an iOS/macOS in-the-wild 0-day in AppleAVD that was patched in March #itw0days
Microsoft is doing a heckuva job on this one…
CVE-2022-26923 ("Certifried") combined with KrbRelayUp: domain user to domain admin without the requirement for adding/owning previously a computer account. Step-by-step write-up of the attack in a pure Windows environment: gist.github.com/tothi/f89a3712…
Some interesting figures in the @HiscoxDE report on cybercrime in Germany, key insights:
1) Ransomware numbers are still rising: they received almost twice as many reports of companies hit in 2021 than 2020.
2) Almost half of the ransomed German companies paid up. @thegrugq 1/2
JUST IN: The U.S. Air Force says it successfully fired a hypersonic weapon. A B-52 bomber launched the Lockheed Martin-made Air-launched Rapid Response Weapon. The ARRW missile flew at more than five-times the speed of sound
The iOS browser core is gonna be replaceable. ? Hello more attack surface!
https://www.theregister.com/2022/04/26/apple_ios_browser/science has no explanation for why some programming languages are harder than others yet none are easier than others
Eleftheria Batsou @BatsouElef
DPRK infiltration is at it again.
The whole thing felt very surreal:
A read on terrorism. I am very unsure what I think about it.
Don't miss what's next. Subscribe to the grugq's newsletter: