the grugq's newsletter

Subscribe
Archives
November 30, 2023

November 30, 2023

November 30, 2023

The legendary Serbcalibur - he who pulls it out of the tree will become the new king of Yugoslavia pic.twitter.com/maSJ8Erppi

— Alexander Stoyanov (@Al_Stoyanov) November 6, 2023


Hey remember the Okta breach impacting just 1% of their users?

Jk they just figured out all their customers were impacted. pic.twitter.com/3GkaeFwVLh

— Matt Johansen (@mattjay) November 29, 2023

Unauthorized Access to Okta's Support Case Management System: Root Cause and Remediation | Okta Security

Executive Summary

I wonder about the PR strategy here. They tried to minimise the impact and then it blew up in their faces. Should they have just gone straight for “we believe only a small percentage of users are impacted, however out of an abundance of caution we’re…”

There have certainly been more than enough breaches and PR follow-ups with pretty much every variation of what could go wrong, that by now someone must have done a study on “best way to handle post breach PR”

It just seems like a professional PR person in this space should not be winging it. They should have a load of case studies of previous breaches and crisis communications campaigns allowing them to make informed decisions that actually minimise harm to client.


Huge deal.

US law enforcement has an Indian national in custody indicted of attempting to assassinate a US citizen on the orders of BJP Indian government officials.

They will try him, which means a lot may come out in court.https://t.co/J4QXV6fF2x

— Dr. Audrey Truschke (@AudreyTruschke) November 29, 2023


The cryptocurrency mixer Sinbad has been designated and taken down today. Had been used to launder DPRK stolen funds 🇰🇵 https://t.co/4bItaB7dcY

— J. Burns Koven (@JBurnsKoven) November 29, 2023


We recommend nerds to never ever, not even once, approach LinkedIn. LinkedIn is overflowing with psychopaths.

Example A. Man states he takes meeting notes in the middle of his date, has him and his significant other doing sprints and daily stand ups. pic.twitter.com/6DhKpqwTY1

— vx-underground (@vxunderground) November 29, 2023


"There are nearly 600K unfilled cybersecurity jobs in the U.S. right now, and about 3.5M open roles globally, says Lisa Gevelber, Google’s chief marketing officer for the Americas"

This is because all the openings are entry level positions requiring 5 yrs experience.

— Chris Wysopal (@WeldPond) November 29, 2023


An unknown Threat Actor seemingly attempted to social engineer @abigailwhidden, a sales person at @GreyNoiseIO.

Unfortunately for them, GreyNoise is a rather tight knit company and it is difficult to masquerade as someone who sits beside you pic.twitter.com/bSZx0A1Zic

— vx-underground (@vxunderground) November 30, 2023


Everybody is celebrating Kissinger dying and no one is thinking about the low wage workers forced to build an entire new level of hell at depths never reached before. You guys are so anti-labor. #1u

— Mo Weeks (@mo87mo87) November 30, 2023


I would argue this patch to stop the “Kia Boyz” exploit in Hyundai/kia cars has more direct harm reduction potential than any other software patch in history.https://t.co/oFu2KGzalE pic.twitter.com/HAJV0Quy0C

— David Weston (DWIZZZLE) (@dwizzzleMSFT) November 30, 2023


YES

— Is Henry Kissinger Dead Yet? (@DidKissingerD1e) November 30, 2023

https://t.co/v9lJr9c8Bw pic.twitter.com/BkG7RtLep3

— Fuck You I Quit (@fuckyouiquit) November 30, 2023

‘Twas the night we call Kissmas
and all over the tweets
were gifs of crabs dancing
like we’ll dance in the streets

All the hellfires are stoked
all the brimstone glows red
wish it had come sooner
but at last! Henry’s dead

— Jorts (and Jean) (@JortsTheCat) November 30, 2023

You're laughing. Editors everywhere are scrambling to come up with euphemisms for war crimes and YOURE LAUGHING

— ALJ Dredd (@UnionSaltBae) November 30, 2023

Frequently, I’ve come to regret things I’ve said. This, from 2001, is not one of those times: pic.twitter.com/1NiHlupJkL

— Anthony Bourdain (@Bourdain) February 5, 2018

Ladies and gentlemen: we got him. pic.twitter.com/qf1ps98xlh

— Corey Quinn (@QuinnyPig) November 30, 2023

Noisestorm - Crab Rave [Monstercat Release] - YouTube

🎧 Support on all platforms: https://Monstercat.lnk.to/CrabRaveA huge shout out to Noisestorm whose artistry made this song and video possible - he produced ...


y’all pic.twitter.com/FaGqwIm1jt

— Ian Coldwater 📦💥 (@IanColdwater) November 30, 2023


X has - rather quietly - rolled out a new way to provide researchers access to public data on X, as required per article 40.12 of the Digital Services Act. How can you do get access? See the thread below 👇#dsa

— Mathias Vermeulen (@mathver) November 29, 2023


#OTD 1952, @CIA officers John Downey and Richard Fecteau were shot down in a C47 over China trying to exfiltrate an agent. Unknown to them, the agent had been captured & turned to lay a trap. Both officers were captured by China. Fecteau was released in 1971, Downey in 1973. pic.twitter.com/OGyHlKxx0l

— NCSC (@NCSCgov) November 29, 2023


ANTI-CRIME COMPUTER pic.twitter.com/QM3LFNnHu8

— Batman 66 Labels (@BatLabels) September 26, 2021


Wow. "The United States Justice Department has filed an indictment against Indians, including an “Indian govt. employee” for a foiled plot to assassinate U.S. citizen and Khalistani separatist Gurpatwant Singh Pannun." https://t.co/qfRun7Hzqy

— Shashank Joshi (@shashj) November 29, 2023


Clean Code is a bad book for beginners learning how to represent complex ideas in code; instead, people starting out should read Baudrillard’s “Simulacra And Simulation”, Umberto Eco’s “The Name Of The Rose”, and Italo Calvino’s “Invisible Cities”

— cara.city elsewhere (@caraesten) November 29, 2023


something to be horrified by: "chat" might be legitimately be the first dedicated 4th person pronoun

— himejoshi chat (@angeIsighting) November 29, 2023


https://t.co/ANY2DPxrEI pic.twitter.com/Y1dUSN3j4C

— Jean-Michel Connard 🎃 (@torriangray) November 29, 2023

Would it kill Georgia to be warmer?

— Bad Thought Enthusiast. (@bad_enthusiast) November 29, 2023


I never dreamed this tweet would end up applying to the person who bought this website but it's the most poetic possible outcome https://t.co/IaYe1IoRhU pic.twitter.com/RCVKXF9jeM

— Mr. Midwest (@InternetHippo) November 29, 2023

Elon Musk, at DealBook summit, has message to advertisers boycotting X/Twitter: "Don't advertise." If someone is going to try to blackmail me with advertising, with money, go f— yourself."

— Ted Johnson (@tedstew) November 29, 2023

This headline in @theintercept... https://t.co/rhN0CzmsCx pic.twitter.com/krzaNvQZPt

— Gerry Shih (@gerryshih) November 30, 2023

Southern District of New York | U.S. Attorney Announces Charges In Connection With Foiled Plot To Assassinate U.S. Citizen In New York City | United States Department of Justice

Damian Williams, the United States Attorney for the Southern District of New York, Anne Milgram, the Administrator of the Drug Enforcement Administration (“DEA”), and James Smith, the Assistant Director in Charge of the New York Field Office of the Federal Bureau of Investigation (“FBI”), announced the filing of murder-for-hire charges against Indian national NIKHIL GUPTA, a/k/a “Nick,” in connection with his participation in a foiled plot to assassinate a U.S. citizen in New York City.  


After ALPHV ransomware group ransomed Advarra, exfiltrated their data, and subsequently mocked executives and employees, they commissioned a custom cake to be made to celebrate ... pic.twitter.com/ySH9RiKN7k

— vx-underground (@vxunderground) November 29, 2023


First ever image of another multi-planet solar system captured by ESO Telescope pic.twitter.com/VuN0Du6eUW

— Space (@redditSpaceView) November 29, 2023


Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X