FAMASoon

Security research
blog:

[FAMASoon @FAMASoon]

書きました

[エヌ・エフ・ラボラトリーズ @NFLaboratories]

NFLabs.エンジニアブログを更新しました。
「GOADの紹介とその攻略」https://t.co/nsS4oL0Wf8
＃Security #セキュリティ

[淚笑 @le1xia0]

I'm the author of Cairn.
Recent reports say ARTEX was used in attacks on South Korean banks, and some people have started linking us.
ARTEX officially listed Cairn as an Architecture Reference in its README:
https://t.co/uPMoIhsYBE
Cairn was never a “hacking tool.”
#Cairn #ARTEX

[Mehmet INCE @mdisec]

just had a flashback to 12 years ago.

anyone remember the first ever wormable tweet ? due to Unicode rendering logic at tweetdeck frontend.

[PHASEONE［rowan］ in sf 1st-10th @rogesterone]

CHINESE AGENT FLEET OF AGENTS FOUND ON URLQUERY, SCANNING AMAP AND DOING A WHOLE BUNCHA SHENANIGANS
FULL REPORT COMING SOON
https://t.co/SToZUiFw3E

[FAMASoon @FAMASoon]

@rogesterone Great article!
I have one question.
Can you guess why the agent uses amap?
I think of it as just a map service, so I find it quite puzzling.
(I thought it might be less likely for the server to go down if we cached traffic with Cloudflare rather than upgrading the server.)

[JPCERTコーディネーションセンター @jpcert]

直近で相次いでいる不正アクセス事案に関する注意喚起を公開。個人情報の漏えいにつながるケースなど、増加している恐れのある攻撃を取り上げ、攻撃全体の流れなどを解説し、対策を整理しています。技術的な情報共有が不十分であり、新たな情報を逐次更新していきます。＾MH https://t.co/YV6x5K2X7V

[FAMASoon @FAMASoon]

あの…昨今の情報セキュリティの情勢でパニックになるのは仕方ないですが、事実と推測はわけて考えて発信してください

[Cheena @cheenanet]

流出しても保持してるデータが少なすぎるので安全なサイト

第1位

[Numb3rs @numbrs]

I've never worked on WhatsApp before, so I thought it'd be interesting to poke it with a stick!

I wrote an article about my attempt to uncover WhatsApp's CVE-2026-23866:
https://t.co/56bQA9fuHZ

This is my first article on mobile VR, let me know what you think!

[𝙁 𝙀 𝙇 𝙄 𝙓 𝙈 @felixm_pw]

Module stomping is a popular choice for modern C2 implants and stagers, but why?

In our latest blog post we break down how the technique works, why commercial C2 frameworks use it and how defenders can detect it!

https://t.co/KVhntNjwWn

[FAMASoon @FAMASoon]

@iss4c_f0ng Kawaii

[Rad @rad9800]

Many folks don't know how to get their hands on firmware for various firewall vendors or what not.

I use this for various automated workflows - though I'm sure folks will lively have many of their own (e.g automating patch diffing).

I put together and share a small toolkit you can point your agent at that will dump the image to S3.

For example, say I wanted to dump PANOS:
1. Accept the BYOL agreement on AWS Marketplace
2. You now have the AWS AMI ID
3. Use this and dump it to S3
4. ???

https://t.co/zRVdvhFYHA

[FAMASoon @FAMASoon]

@Lakr233 綺麗ですね！

[SinSinology @SinSinology]

The day P2O contestants stop flexing details of their upcoming entries before they've even stepped on stage will be a great day.
not only you poke the vendor to start panicking and hammer down on the product attack surface but you also provoke other contestants to start burning bugs

[clibm079 @clibm079]

Analyzing Recent Evolutions in Malware Loaders
https://t.co/wOijZJHdyF

https://t.co/wc8c6seNV1

#Talos #2020

THANK YOU!

[棒 @SttyK]

✅

[FAMASoon @FAMASoon]

セキュリティエンジニアになる近道は知らないけど、Twitterで威張り散らかしてあーだこーだ言ってくる外野に振り回されるのは確実にやめたほうがいいですよ、とだけ言える

[FAMASoon @FAMASoon]

Interesting👀

[samvartaka @s4mvartaka]

If you're interested in SDR / RF security and looking to attend @BlackHatEvents EU, make sure to get your early bird tickets with discount pricing before September 25th!

👉 Black Hat EU (London), December 7-8 2026: https://t.co/cdgjqjktAV

#SIGINT #RFsecurity #SDR

[samvartaka @s4mvartaka]

If you're interested in SDR / RF security and looking to attend @BlackHatEvents EU, make sure to get your early bird tickets with discount pricing before September 25th!

👉 Black Hat EU (London), December 7-8 2026: https://t.co/cdgjqjktAV

#SIGINT #RFsecurity #SDR

[ほよたか @takahoyo]

こちらまだ定員に余裕があります！（抽選ですが、この感じだと全員参加できるかなぁと⋯）
ペンテストに興味ある学生の皆様、ぜひご参加ください

[Adam 'pi3' Zabrocki @Adam_pi3]

I'm hiring an exceptional Offensive Security Researcher for my team at NVIDIA (Offensive Security Research - OSR).

Firmware, microcode, RISC-V, hypervisors, and shipping mitigations like HW CFI, Memory Tagging, and Pointer Masking from the ground up.

https://t.co/vvPTRnwSKE