ROFL Landlords starting to learn they canโt offload all the work onto customers while collecting โa free revenue streamโ never gets old
@Technovangelist @Airbnb You're in the hospitality business, not the paying-off-my-mortgage-without-consequences-or-inconvenience business.
0
0
2
197
statictear โ ๐บ๐ฆ retweeted
Cloudflare previous CTO sent this into our bug bounty. We are investigating.
104
597
16,397
344,578
statictear โ ๐บ๐ฆ retweeted
What a creative way to celebrate cybersecurity awareness month
33
901
7,091
74,604
If #PHP was written in #Rust this would have never happened. #php2shell is just proof of that.
(This is fucking sarcasm before yall crucify me)
(This is fucking sarcasm before yall crucify me)
2
1
5
475
statictear โ ๐บ๐ฆ retweeted
There is only one answer to cybersecurity threats: Fix your shit.
Scared of threat actors using AI? Worried about rogue agents? Think abliterated models are spooky? Fix. Your. Shit.
The "ban AI models and regulate GPU access" crowd should instead fix their shit.
Scared of threat actors using AI? Worried about rogue agents? Think abliterated models are spooky? Fix. Your. Shit.
The "ban AI models and regulate GPU access" crowd should instead fix their shit.
88
95
579
18,885
statictear โ ๐บ๐ฆ retweeted
Go forth and open-source every IoT device in your house. Dump their comms. See what they're sending home.
God speed.
God speed.
29
85
2,093
146,511
statictear โ ๐บ๐ฆ retweeted
@codisfy @MagicalTux Potentially as simple as putting this into the php.ini :
session.upload_progress.enabled = Off
Will stop it from processing uploads in any arbitrary php file even if it doesn't process uploads...see my other post or this one :
x.com/J4ck3LSyN/statโฆ
session.upload_progress.enabled = Off
Will stop it from processing uploads in any arbitrary php file even if it doesn't process uploads...see my other post or this one :
x.com/J4ck3LSyN/statโฆ
0
3
12
3,669
statictear โ ๐บ๐ฆ retweeted
This report on a Chinese threat actor using AI to automate hundreds of attacks has a very funny conclusion:
23
48
451
13,494
statictear โ ๐บ๐ฆ retweeted
RAPID RESPONSE: Huntress has become aware of a widespread security incident involving ConnectWise Cloud Backup (formerly SkyKick).
Weโve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. ๐งต
Weโve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. ๐งต
11
119
460
117,530
statictear โ ๐บ๐ฆ retweeted
I had the domain for quite some time and the website was already up - but finally it's where I wanted it to be.
โฝ๏ธFull XDR and Sentinel schema coverage
โฝ๏ธDocumentation of XDRInternal modules by @NathanMcNulty and me
โฝ๏ธTable column relations (partly)
xdrinternals.com
โฝ๏ธFull XDR and Sentinel schema coverage
โฝ๏ธDocumentation of XDRInternal modules by @NathanMcNulty and me
โฝ๏ธTable column relations (partly)
xdrinternals.com
5
58
167
10,199
statictear โ ๐บ๐ฆ retweeted
๐จ Threat Alert: A newly registered domain, ๐๐ฒ๐ฎ๐บ๐-๐ผ๐ป๐น๐ถ๐ป๐ฒ[.]๐ฐ๐ผ๐บ, created just ๐ฐ ๐ฑ๐ฎ๐๐ ๐ฎ๐ด๐ผ, is actively mimicking the full Microsoft Teams login and user interface.
โ
At the time of analysis, ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐๐ฒ๐ณ๐ฒ๐ป๐ฑ๐ฒ๐ฟ ๐ฟ๐ฒ๐ฝ๐ผ๐ฟ๐๐ฒ๐ฑ ๐๐ฒ๐ฟ๐ผ ly solely on endpoint protection. Consider proactively adding this domain to your tenant's block list and web filtering policies immediately.
โ
#threathunting #threatdetection ๐ซก
โ
At the time of analysis, ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐๐ฒ๐ณ๐ฒ๐ป๐ฑ๐ฒ๐ฟ ๐ฟ๐ฒ๐ฝ๐ผ๐ฟ๐๐ฒ๐ฑ ๐๐ฒ๐ฟ๐ผ ly solely on endpoint protection. Consider proactively adding this domain to your tenant's block list and web filtering policies immediately.
โ
#threathunting #threatdetection ๐ซก
12
153
556
43,726
statictear โ ๐บ๐ฆ retweeted
I've spent over 20 years in cybersecurity, now at Persona, I'm helping strengthen identity verification. This article goes over help desk attacks from the research to ATO, with practical recovery defenses and a lesson from a $6 pack of playing cards x.com/i/article/2107โฆ
8
14
74
6,973
statictear โ ๐บ๐ฆ retweeted
Cybersecurity Unawareness Month
Lesson #3: Thicc Thighs Buys Compromise
Lesson #3: Thicc Thighs Buys Compromise
6
17
149
2,749
statictear โ ๐บ๐ฆ retweeted
Rogue agents have done more for cybersecurity awareness than training and phishing sims ever could
40
44
282
11,534
