Da5h

hacking @microsoft

[Da5h @Da5h_Solo]

@unusual_whales Carrot man manipulating the market on repeat making billions, bear market incoming and he won’t stop it this time with more lies

[Da5h @Da5h_Solo]

@SpecterDev The output is actually not that great when you really want something more than simple code, I would not worry about my job. it hardly can author a simple codeql predicate lol

[Da5h @Da5h_Solo]

#midjourney is awesome! take a look at ManBearPig #SouthPark

[Da5h @Da5h_Solo]

@JLLeitschuh @caseyjohnellis Maybe setup on serverless infra? 0 cost until callback I guess

[Asimov Security @AsimovSecurity]

modern automation becomes a target for hackers.
while #robots are not necessarily the entry-point of the attacker - they are definitely a target for once the attacker is in your network.
https://t.co/vVV1mto5Yz
#ransomware #robotics #automation #Industry40

[Asimov Security @AsimovSecurity]

Security pitfalls in #ROS based robots - Asimov Security https://t.co/cNejz57AlQ

[Sam Stepanyan @securestep9]

Google launches #OSV Open Source #Vulnerabilities - a vulnerability database and triage infrastructure for open source projects aimed at helping both open source maintainers and consumers of open source:

#opensource
#cve

https://t.co/dWzUVN46he

[Da5h @Da5h_Solo]

@netresec @theparanoidnerd Seems like it works now, tested again with safari and chrome, download completed fine

[Da5h @Da5h_Solo]

@theparanoidnerd @netresec @securityonion @snort @Suricata_IDS @Zeekurity That’s right, with curl the connection is dropped also somewhere towards the end, resulting in missing files

[Da5h @Da5h_Solo]

@spottedmahn Hi Mike, since PANW acquisition of Twistlock, Twistlock labs are now publishing content under Unit42’s website and the twitter handle of the labs is gone

[InfoQ Developers @InfoQdev]

The Common Pitfalls of Cloud Native Software Supply Chains https://t.co/hOoNvaGddo by @Da5h_Solo

[QCon San Francisco Software Development Conference @QConSF]

.@Da5h_Solo explores some of the common #security vulnerabilities found in #cloudnative environments #QConSF

[Aysylu Greenberg @aysylu22]

Excellent overview of security aspects of software supply chains by @Da5h_Solo. Some Qs to ask when ensuring secure supply chains:
- can anyone access anything w/o authenticating?
- what permissions do auth’d users have?
- any sensitive info in commit/build history? #qconsf

[Da5h @Da5h_Solo]

Good morning! Are you at @QConSF ? Come by and hear how modern software supply chains are getting hacked at my talk: https://t.co/V7QKIp6p4t

[Aysylu Greenberg @aysylu22]

Really excited for the discussions and the cool talks by amazing speakers on the brand new track Software Supply Chain @qconsf https://t.co/36enunvwS8 Learn abt approaches and tools for tracking provenance, securing, & maintaining observability of the entire software supply chain

[Da5h @Da5h_Solo]

This November I'm speaking at QCon San Francisco. Join me and learn about the most widespread attacks & vulnerabilities and how to protect your software supply chain. Use the code SPEAK100Daniel for $100 off. Find out more about QCon San Francisco: https://t.co/JsnBGus6g7

[QCon Software Development Conferences @QCon]

The ecosystem is developing at a blazing fast pace, which in turn causes various little mistakes in the products that could leave the supply chain up for grabs for a motivated adversary. More in @Da5h_Solo @PaloAltoNtwks #QConSF talk.
https://t.co/GzdypCR8l9

[Da5h @Da5h_Solo]

how i found 4 #vulnerabilities in #Qemu :
https://t.co/R4QCo5Zcis

[Da5h @Da5h_Solo]

A new #vulnerability that i've discovered in the #linuxkernel
  #cybersecurity  https://t.co/4Q9hQuGkVI https://t.co/uK2haf4KIo