November 19, 2023

                            November 19, 2023

                November 19, 2023

                        November 19, 2023
Ever find yourself on an endpoint with SentinelOne and have Local Admin? Just ask SentinelAgent.exe nicely, and it will dump a process for you, including itself!https://t.co/WU6ZDPR91H

It bombs out on LSASS, but most other processes work. pic.twitter.com/wgjIlEiBpk
— Adam Svoboda (@adamsvoboda) November 18, 2023

The lecture notes of "Cryptographic Computing", the master level course I teach together with @schollster, are available at https://t.co/YxKl2EL1bd #aarhuskrypto
— Claudio Orlandi (@claudiorlandi) November 16, 2023

"We thank the reviewers for the helpful suggestions"pic.twitter.com/yIKInoDbx5
— Björn Schumacher (@schumacherbj) November 18, 2023

I am proud to present you the pre-print of our paper on GWP-ASan. 5+ years of work by four companies, spanning Server, Desktop, and Mobile, running on billions of devices. Finding and fixing thousands of bugs and potential vulnerabilities.https://t.co/0lpzxi3oUC
— Kostya Serebryany (@kayseesee) November 17, 2023

pretty wild that the first job openai took was sam's
— Siqi Chen (@blader) November 17, 2023

This is one of the first big examples of in-the-wild QR scamming success for an attacker. 

It starts with a QR code scam in a train station then progresses to attacker posing as bank in phone call (classic) to gain access to bank account to take out fraudulent loan / steal money. https://t.co/caBpMxygit
— Rachel Tobac (@RachelTobac) November 18, 2023

Thornaby: Woman loses £13k in train station QR code scam https://t.co/KZwAXOGKTp
— Joe Tidy (@joetidy) November 18, 2023

Lockheed is now tracking phones and walkie-talkies from space, and the UAE military is allegedly a "strong" customer

I’m gonna keep including stuff on the war in Burma, even if it’s not directly cyber related. The conflict is relatively near me, plus the whole thing is fascinating.

i just published radius2 1.0.25 which just has some little improvements. namely i added some caching so that this IDA ctf challenge can now be solved pretty quickly without having to jump over a large loop! down to ~23s from 3 min. pic.twitter.com/QSlEKXtcDk
— 𝚊𝚕𝚔𝚊𝚕𝚒 (@alkalinesec) November 19, 2023

Using GPT4V to understand risks of unique corporate structures. pic.twitter.com/WjJDmu06yt
— Yohei (@yoheinakajima) November 18, 2023

Headline improves with every word pic.twitter.com/JZqziHvQn4
— Pinboard (@Pinboard) November 19, 2023

About a decade ago I was hearing of hackers working for narcos doing various jobs. Interesting that there’s now media coverage on the topic. 
Organized criminals smuggling cocaine through Europe’s commercial ports have historically had to corrupt long chains of port personnel, from crane operators to customs inspectors.

Now they have hackers on their side. #Narcofiles: The New Criminal Order https://t.co/3Mp3SdmOku
— Organized Crime and Corruption Reporting Project (@OCCRP) November 10, 2023

Lists of automated SQLi attempts.

            GitHub - lee101/hidden-form-on-the-internet: I left a text field form on my site no one could see.
            I left a text field form on my site no one could see. - GitHub - lee101/hidden-form-on-the-internet: I left a text field form on my site no one could see.

This is the funniest one of these I've ever seen. The dollar amount. The selection of items. Just posting this image with no caption or context and immediately limiting replies. Thank you for emptying out the glove compartment of a 17 year-old's 2006 Ford Fiesta https://t.co/8bzHr1yMeu
— Respectful Niceperson (@warmandpunchy) November 19, 2023

pic.twitter.com/cZ9WzAxcZt
— Barrie Police (@BarriePolice) November 18, 2023

One decade ago I published my reversing of the Windows security tool EMET, which was my first public work that got significant public attention. I remember yelling with excitement when I saw my work mentioned by @daveaitel  alongside @aaronportnoy https://t.co/BTMds6augB https://t.co/SabvsaH0cG
— Scott Piper (@0xdabbad00) November 18, 2023

I actually had taken vacation days in order to work on the paper, because I didn't have a job that let me work on this type of thing. I'm still proud of this document.  https://t.co/TxBZaOxFkW
— Scott Piper (@0xdabbad00) November 18, 2023

https://x.com/switch_d/status/1726053053759914067

Happy Birthday to Phrack!

The first issue of Phrack was released on November 17, 1985.https://t.co/P00jc2DVd3 pic.twitter.com/ZdLTnjzikz
— nyxgeek (@nyxgeek) November 18, 2023

The clearest image of Pluto captured by the New Horizons spacecraft. pic.twitter.com/knOYi3iCBT
— Amazing Astronomy (@MAstronomers) November 19, 2023

            The 4th in the 5th: Temporal Aspects of Cyber Operations | Recorded Future
            Time is the enemy. Until cybersecurity is perfect, the cyclical nature of breaches and discovery means that time will betray both defenders and attackers.

            Kate Starbird: "In ~2014, my colleague & I argued that social med…" - Mastodon 🐘
            In ~2014, my colleague & I argued that social media (esp. Twitter) had become part of the critical infrastructure of disaster response. People were turning to Twitter during crises to share information about impacts and resources. Disaster responders were using the data shared there for situational awareness, and were communicating in real-time with their constituents. Today’s events underscore just how dangerous it is for society to come to rely on private platforms as critical infrastructure.

            Kate Starbird: "In this paper documenting the "work" of communiti…" - Mastodon 🐘
            In this paper documenting the "work" of communities responding to disaster events, Dharma Dailey and I explain how social media is operating as critical infrastructure, borrowing from Star and Ruhleder's conceptualizations of infrastructure, which notes that we often don't know that we're relying upon infrastructure until it breaks down. https://dl.acm.org/doi/pdf/10.1145/2998181.2998290?casa_token=pzel650FuLcAAAAA:qIKePiHWEJGjfD8OLn4_UPQlboUVj0Cq25s0ijGDq92pBUhWDi9edeT2NtQwT-EgSpMm7uNUWwyPpg

                            Don't miss what's next. Subscribe to the grugq's newsletter: