KitKat

Senior Cybersecurity Consultant | Former Protector of Magic 🏰✨| #DFIR 💙 #InfoSec #CURIOSITY & #COFFEE~!
☕☕💕 @DeadPixelSec

[KitKat @K4tTr33]

In response to the many questions regarding CompTIA Security+ 501 in general, I have written an article on my methods, resources, and techniques used to prepare for the exam-- hope it's helpful! 🤓✨
#sharetheknowledge #infosec #certification

https://t.co/syaCPKgm8S

[illegalFawn @illegalFawn]

5yrs later, an open redirect vulnerability on @cartoonnetwork allows dangerous #phishing and #scam spreads

/cartoonnetwork.co.uk//cwe.mitre.org/data/definitions/601.html/

@MITREcorp @malwrhunterteam @JAMESWT_MHT @dubstard @YourAnonRiots @andsyn1 @UK_Daniel_Card @BeeHiveCyberSec

[Matthew @embee_research]

Adding a bunch more suspicious #crowdstrike domains registered in the last 7 days.

crowdstrike-bsod[.]co
crowdstrike-bsod[.]com
crowdstrike-fix[.]zip
crowdstrike-helpdesk[.]com
crowdstrike-out[.]com
crowdstrike[.]blue
crowdstrike[.]bot
crowdstrike[.]cam
crowdstrike[.]ee
crowdstrike[.]es
crowdstrike[.]fail
crowdstrike0day[.]com
crowdstrikebluescreen[.]com
crowdstrikebsod[.]co
crowdstrikebsod[.]com
crowdstrikebug[.]com
crowdstrikeclaim[.]com
crowdstrikeclaims[.]com
crowdstrikeclassaction[.]com
crowdstrikecure[.]com
crowdstrikedoomsday[.]com
crowdstrikedown[.]com
crowdstrikedown[.]site
crowdstrikefail[.]com
crowdstrikefix[.]co
crowdstrikefix[.]com
crowdstrikefix[.]in
crowdstrikefix[.]zip
crowdstrikeglitch[.]com
crowdstrikehelp[.]com
crowdstrikelawsuit[.]com
crowdstrikemedaddy[.]com
crowdstrikeold[.]com
crowdstrikeoops[.]com
crowdstrikeoopsie[.]com
crowdstrikeoopsies[.]com
crowdstrikeout[.]com
crowdstrikeoutage[.]com
crowdstrikeoutage[.]info
crowdstrikepatch[.]com
crowdstrikeplatform[.]com
crowdstrikeplatform[.]info
crowdstrikerecovery[.]com
crowdstrikereport[.]com
crowdstrikesettlement[.]com
crowdstrikesuporte[.]com
crowdstrikesupport[.]info
crowdstriketoken[.]com
crowdstrikeupdate[.]com
crowdstrikeyou[.]xyz
crowdstrikezeroday[.]com
fix-crowdstrike-apocalypse[.]com
fix-crowdstrike-bsod[.]com
fix-crowdstrike[.]com
fixcrowdstrike[.]com
fixmycrowdstrike[.]com
fuckcrowdstrike[.]com
howtofixcrowdstrikeissue[.]com
iscrowdstrikedown[.]com
iscrowdstrikefixed[.]com
iscrowdstrikestilldown[.]com
isitcrowdstrike[.]com
microsoftcrowdstrike[.]com
microsoftoutagescrowdstrike[.]com
secure-crowdstrike[.]com
suportecrowdstrike[.]com
whatiscrowdstrike[.]com

(Found using this query in @silentpush)

[Rachel Tobac @RachelTobac]

We are currently in one of the largest global IT outages in history.
Remember: verify people are who they say they are before taking sensitive actions.
Criminals will attempt to use this IT outage to pretend to be IT to you or you to IT to steal access, passwords, codes, etc.

[dw1 @dwisiswant0]

it's official #microsoft #crowdstrike #falcon

[KitKat @K4tTr33]

@silentpush @netflix https://t.co/ChYRLIeGS0

[DCNextGen @DEFCONNextGen]

The Red Team Village has a hands-on web application hacking workshop! Bring your laptops, this is not to be missed!

@RedTeamVillage_ @defcon

[Tay 💖 @tayvano_]

Crypto folks (hopefully) already know that Lazarus is one of the most prevalent threat actors targeting this industry.

They rekt more people, companies, protocols than anyone else.

But it's good to know exactly how they get in. Bc another smart contract audit won't save you.

[Sansec @sansecio]

ICYMI: the formerly legit https://t.co/l2BKOFSfYn is now in Chinese hands and serving malware. eComscan will alert you to any Magento modules that embed https://t.co/l2BKOFSfYn. Some 110K+ sites are affected 😱

https://t.co/bOPfuV1WRz

[KitKat @K4tTr33]

@TheBlindHacker

[Oleh H. | AI Vizioner @aivizioner]

This video isn't real.

100% AI-generated. #Sora #SoraAI

Storing this note as a time capsule to reminisce about

Sora’s initial quirks in the days to come. @OpenAI

Prompt: Green grass, a small squirrel eats nuts while looking at the camera lens.

[Joe B. - BlindHacker  @TheBlindHacker]

JOB ALERT🔔 USA-ONLY! 🇺🇸
Remote - ALWAYS APPLY IF INTERESTED
Program Director (1X)
Red Team - Security Consultants (8+)
Application Security Testing and Source Code Review - Security Consultants (15+)
Project Manager/Coordinator(5+)
System Engineer Manager (1x)
System Support Engineers (3x)

Please DM @TheBlindHacker with any quesrionsQ

[KitKat @K4tTr33]

@DoomsdayGoth DFIR generalist (mostly)~! I find IoT forensics fascinating and performed Smartphone Forensics. I've worked with IR teams to extinguish high severity incidents (dumpster fires). Currently a CTI analyst and it's awesome gathering threat intel on various threat actors + campaigns.

[DFIR Diva @DfirDiva]

Today's Training Tuesday Highlight is @TheOSINTion. The first OSINT course I took was The OSINTion's live OSINT Investigations: People course. I learned a lot. I have since taken all of the on-demand courses offered. @C_3PJoe is a great instructor!

There is free OSINT content on The OSINTion's YouTube Channel: https://t.co/5dudDwi22O

Joe Gray also did a free People OSINT Workshop for conINT: https://t.co/61nb3MBOUe

On Demand Courses Include:
- Accelerated Introduction to Intelligence
- Alternative & Advanced Search Engine Intelligence
- OSINT Username Tools
- OSINT using Recon-ng
- Introduction to Intelligence Report Writing

On Demand - ($10 - $59): https://t.co/pxTCwPgm5P (affiliate link)

Live Courses are 24% off until February 1st using code: 2024

They include:
- Image Intelligence (IMINT), Optical Character Recognition (OCR), and Video Analysis
- Introduction to Blockchain and Cryptocurrency Investigations
- Intelligence Investigations: People
- Intelligence Investigations: Business
- Practical OPSEC for Intelligence & Privacy
- Live Versions of most of the On-Demand Courses Listed Above

Live Courses: https://t.co/zuw6Ae1GTn

#OSINT #DFIRDivaTTH

[Ray [REDACTED] @RayRedacted]

I have had a lot of people asking me if they should go to shmoocon even though they do not have a ticket to the event itself. Let me be clear: Yes. You absolutely should go.

Just show up. Trust me.

Hack the planet.

[Sean Metcalf @PyroTek3]

If you show up at ShmooCon to LobbyCon & it’s your first conference I will borrow a badge for you and walk you around so you can see what it’s about!

Message @TrimarcSecurity to coordinate 😃

[Malware Unicorn @malwareunicorn]

What is the equivalent of "hold my beer/hold my cosmo" for tech? Maybe "hold my mouse"?

[KitKat @K4tTr33]

@PhillipWylie Likewise, @PhillipWylie~! It was great chatting and I hope you enjoyed #HackSpaceCon! 🛸

Flew out to Japan right after, currently on an adventure to snag cute photos with the cherry blossoms! 🌸

[HackSpaceCon @HackSpaceCon]

Do you have what it takes to join the @darkwolfsolves pack? Prove it at #hackspacecon!
https://t.co/EQZUVCxmAs

[HackGit @hack_git]

Awesome #OSINT

A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence collected from publicly available sources. In the intelligence community (IC), the term "open" refers to … https://t.co/KqkQaiFwdn