jass

[s1r1us @S1r1u5_]

On July 25, we hacked OpenAI.

Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.

We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵

[CTI Traffic @CTITraffic]

Kaspersky: NightEagle, an APT that spent years working against Asian targets, is now hitting Russian companies. In most incidents it used valid stolen credentials to corporate VPNs. https://t.co/2dzyzICnbc

[Megatron @TheM3gatr0n]

Sharing query I used to find these domains on @urlscanio

(page.domain:*-report.com OR page.domain:report-*.com OR page.domain:*.report) AND date:>now-20d

I know this is not the smartest way to do these, but it saves money by avoiding premium tools and builds long-term skills.
#cybersecurity #learning #Osint

[Chris Duggan @TLP_R3D]

🔎 UNC6671 infra: Google tracks separately from ShinyHunters, but links to multiple extortion groups.

Currently Targeting:
Gap,
Cadence,
CGI,
Halliburton,
Broadridge,
TJX,
MasTec
Oxy

#UNC6671 #ShinyHunters #BlackFile #Redact #Pink #Helix #Falcon 👀

[BlackRoomSec @blackroomsec]

NOW: CISA releases guidance on "Using Cyber Decoys to Strengthen Detection and Response"

Keywords: Tripwires, honeytokens, MITRE Engage, ATT&CK, detect adversaries using LOTL (Living off the Land) techniques and more.

22 pages.

Tonight's homework! :)

https://t.co/Frho7dmylk

[David Sacks @DavidSacks]

Dario has written that we need to “pace the frontier,” and Sam has agreed. People may be surprised by my response: go ahead.

You guys are the frontier. By any reasonable metric — market share, revenue growth, model capability — the two of you have a duopoly on frontier intelligence. You’ve also claimed the lead is widening because of recursive self-improvement.

I don’t see what you see in the lab. If the unreleased models are scary enough that you think you should slow down, I support your decision to be responsible.

But stop pretending you need anyone else’s permission. Stop pretending antitrust law has to be suspended so you can form a cartel. Stop pretending you need a regulatory approval process that supersedes product liability. Stop pretending METR is independent when it is intertwined with Anthropic’s investors and staff. Stop pretending you need those same evaluators to police competitors who aren’t even at the frontier.

Most of all, stop pretending the motivation to slow down is purely altruistic. You face massive product-liability exposure if your products enable a truly damaging cyberattack. The market already punishes models that behave in unpredictable or unauthorized ways. After the Hugging Face episode, it is simply good business for OpenAI and Anthropic to trade some raw power for reliability and predictability. Call it alignment if you want. It is also just giving customers what they want.

Pacing the frontier would also create breathing room for a more intelligent conversation about regulation than Bernie Sanders’ “shut it all down.” China is very unlikely to join a global agreement, as you know, and that has to be taken into account as well.

So go ahead and pace the frontier. You are the ones setting it. The easiest way not to build superintelligence is for you to agree not to build it. Demanding your preferred regulatory framework as the price of that will look like blackmail of the public and the political system. So just do it.

If you do, you’ll buy goodwill for the next conversation. If you don’t, we’ll know this was just another bid for regulatory capture — or an election-season psyop.

[The Mossad: Satirical and Awesome @TheMossadIL]

We go all the time.

[Elon Musk @elonmusk]

If you’re bored and want to find something to be upset about, this app will take care of that need!

[KTLA @KTLA]

The man was seen “hunkered down” in the aisles of a Glendale business and appeared to be “sniffing someone out,” according to police. https://t.co/U8THexnQbJ

[jass @BabbosKitchen]

@xploitrsturtle2 For now

[SGM Mike Vining @ Blasting Through Official @BlastingThrough]

Look for my article about this statement tomorrow:

Bravery is controlled risk through knowledge.

[jass @BabbosKitchen]

@0xcharlie The one that exposes you enough for law enforcement and investigators to be able to identify you, cause you left enough of a footprint

[Rewards for Justice @RFJ_USA]

These men conduct hacking and data theft against the United States and its allies on behalf of the Iranian government. Help us stop them. Submit a tip.

https://t.co/eaaU1sbfrE

[jass @BabbosKitchen]

@ImposeCost Plausible Deniability

[Secretary Marco Rubio @SecRubio]

For more than six decades, the Cuban regime has been the leading sponsor of radical leftism and Third Worldism in the United States.

The State Department is exposing the full history of Cuban espionage and subversion in our country.

The American people deserve to know. https://t.co/ulHF9qiDTY

[National Security Division, U.S. Dept of Justice @DOJNatSec]

The Justice Department announced today that Catherine Beth Washburn, 37, of Irondequoit, New York, was ARRESTED AND CHARGED by criminal complaint with attempting to provide material support and resources, namely currency, to designated Foreign Terrorist Organization (FTO) the Palestine Islamic Jihad (PIJ) also known as Al-Quds Brigades.

“As alleged, Washburn repeatedly voiced support for violence against Israeli civilians and attempted to provide material support to the Palestine Islamic Jihad by sending cryptocurrency to an individual who claimed to participate in its attacks,” said Assistant Attorney General John A. Eisenberg. “Those who aid foreign terrorist groups will be prosecuted to the fullest extent of the law.”

Read more: https://t.co/RymkXZZ5GS

[FBI Cyber Division @FBICyberDiv]

On June 9, the FBI kicked off Operation Riptide, our ongoing, coordinated campaign targeting the criminal actors, infrastructure, and financial networks behind cybercrime, cyber-enabled crime, and fraud against the American people. During the last two weeks, the FBI, working alongside domestic and international partners, executed multiple disruptive actions in support of Operation Riptide.

➡️@FBICleveland, in coordination with private sector partners, conducted a technical takedown operation against Outsider, a Chinese phishing-as-a-service platform.

➡️As the result of an investigation by @FBI_Nashville, @FBISanDiego, and @FBIElPaso, a Conti ransomware actor pleaded guilty to wire fraud conspiracy in connection with a scheme that infected more than 1,000 computers and networks worldwide.

➡️@FBIBoston announced their support of the international takedown of the First VPN service, used to compromise businesses in the U.S. and around the world.

➡️We joined international law enforcement partners in announcing the disruption of SocGholish malware.

This is only the beginning—we will continue identifying, disrupting, and dismantling the networks that support cybercrime and victimize Americans.

[House Republicans @HouseGOP]

Tren de Aragua has been DECAPITATED.

[CIA @CIA]

Havana, Cuba