Kernel on Acid

Security Research x AI
ex @msftsecresponse
GCFA
Opinions are my own.

[Kernel on Acid @4c1dk3rn3l]

@championswimmer @threadreaderapp unroll

[Justin Campbell @metr0]

Really proud of the MORSE Green Team for getting this one done.

[vx-underground @vxunderground]

Our deepest condolences to the friends, family, and colleagues of Mr. Kevin Mitnick.

https://t.co/UPeddvYNyw

[Justin Campbell @metr0]

Sorry not sorry to all the exploit authors that are going to have to find info leaks.

[Kernel on Acid @4c1dk3rn3l]

@samx_gg @TikiorTaka Forever in sleep debt ☠️

[Microsoft Security @msftsecurity]

Microsoft Security has been tracking criminal actor DEV-0537 (LAPSUS$) targeting organizations with data exfiltration and destructive attacks - including Microsoft. Analysis and guidance in our latest blog: https://t.co/gTMXJCoPY5

[Microsoft Security Response Center @msftsecresponse]

Microsoft is monitoring escalating cyber activity in Ukraine & published analysis to give organizations the latest intelligence to guide investigations into potential attacks & info to implement proactive protections against future attempts. Read more at https://t.co/aIpMhoyHz9.

[Microsoft Security @msftsecurity]

Twenty years ago this week, Bill Gates sent a now-famous email to Microsoft employees announcing the creation of the Trustworthy Computing (TwC) initiative. Here's how the TwC is going today: https://t.co/SRkoD6q5cy https://t.co/0rKBUYcWcd

[Microsoft Security Response Center @msftsecresponse]

This week marks 20 yrs since @BillGates Trustworthy Computing memo. To celebrate, @nchlgpt, VP of MSRC, reflects on the significance of this milestone w/ thoughts from @dwizzzleMSFT, @JohnLaTwC, @Lee_Holmes, @markrussinovich, @michael_howard, & @tiraniddo https://t.co/lzW9rwHWSP

[Microsoft Threat Intelligence @MsftSecIntel]

We have observed a China-based ransomware operator that we’re tracking as DEV-0401 exploiting the CVE-2021-44228 vulnerability in Log4j 2 (aka #log4shell) targeting internet-facing systems running VMWare Horizon. https://t.co/6GOdRwRTjk

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft is tracking threats taking advantage of the CVE-2021-44228 remote code execution (RCE) vulnerability in Apache Log4j 2 ("Log4Shell"). Get technical info and guidance for preventing, detecting, and hunting for related attacks: https://t.co/vOB7R1LXlj

[Microsoft Security Response Center @msftsecresponse]

MSRC has just published a blog post for Microsoft's response to CVE-2021-44228 Apache Log4j 2
https://t.co/e0fucAyhzj

[Adv Ritu Rajkumari @ritu_rajkumari]

Here I am waiting to argue for my virtual court hearing(s) and then the electricity gets cut off.

NDMC this has been happening on almost daily basis.

Why is this happening on Daily basis?
@tweetndmc

#NoElectricity #virtualhearing

[inversecos @inversecos]

Backdoor #Office365 and #Azure AD by stealing AD FS certificate/key pair. Golden SAML attack will allow an attacker to:

> Bypass MFA to Azure / Office365
> Logon as any AD user regardless of password resets
> Method is usually valid for a year

https://t.co/16L9k10tB7

[Joshua Stephens @joshuacstephens]

This is why Signal. https://t.co/01FgYmWcBf

[Moxie Marlinspike @moxie]

A few months ago Cellebrite announced that they would begin parsing data from Signal in their extraction tools. It seems they're not doing that very carefully.

Exploiting vulnerabilities in Cellebrite's software, from an app's perspective: https://t.co/9ar6ypnPe2

[Dave Aitel @daveaitel]

The advice after you read something like this should be....uninstall this thing. :)

[Greg K-H @gregkh]

Linux kernel developers do not like being experimented on, we have enough real work to do: https://t.co/vWvtxjt7A5

[vx-underground @vxunderground]

Throwback to these golden memes made by @cyb3rops

[Kernel on Acid @4c1dk3rn3l]

@patrickwardle @objective_see @redcanary you the mvp!!