linkcabin

Works in Security. Social Democracy. Change the World or Nothing. Personal Account not my employers, my own views!

[linkcabin @LinkCabin]

I'm on bsky with the same name.

[linkcabin @LinkCabin]

Indicators: https://t.co/U3fcyaPS6t

[linkcabin @LinkCabin]

Today I have posted over 500+ additional domain indicators on a phishing cluster which has targeted organisations across the world utilising CloudFront, Amazon S3, CloudFlare and gCaptcha. The targeting is wide and I recommend all defenders to query their org.

[linkcabin @LinkCabin]

The cluster is related to this activity - https://t.co/MJlYYMVSRo

[linkcabin @LinkCabin]

Analysis coming soon

[linkcabin @LinkCabin]

High signal phishing cluster IoCs released - https://t.co/CYfJAkqiKQ

[linkcabin @LinkCabin]

@struppigel @gynvael The problem is none of them compare to the breadth of VirusTotals sample size

[Thijs Alkemade @xnyhps]

We had a short look at the buffer overflow found by fuzzing `process_browse_data` to determine its exploitability. Conclusion: this bug alone won't give you RCE, or even an info leak.

[linkcabin @LinkCabin]

This is actively harmful for defenders and gives attackers an advantage. Why put indicators like this into an image?

[Will @BushidoToken]

Seriously @Cloudflare? IOCs in a image 🤦🏻‍♂️

[linkcabin @LinkCabin]

I did some new research. Enjoy! Detecting a business email compromise (BEC) threat actor - https://t.co/S0InxpF0qA

[Jaron Bradley @jbradley89]

The FBI recently sent a warning out regarding DPRK activity against the crypto industry. Today, we documented attacks we've seen on macOS. Attacks start with social engineering and deliver a piece of malware that we call ThiefBucket.
https://t.co/9QbC9OoCXn
#malware

[linkcabin @LinkCabin]

Or alternatively give me this sample https://t.co/iMysGK8bHE

[linkcabin @LinkCabin]

Can anyone share the Amadey v4.03 panel leak with me 🤞 I missed it

[linkcabin @LinkCabin]

@Andrew___Morris @jfslowik 😭😭😭😭

[0xor0ne @0xor0ne]

Exploiting an object corruption bug in v8 Javascript engine (CVE-2024-3833)

https://t.co/wyJGIFK3Tp

Credits @mmolgtm

#chrome #cybersecurity

[L0Psec @L0Psec]

New macOS malware. :)
DPRK. Spent some time reversing the dropper written in Swift/SwiftUI.

Here’s the deep dive:

https://t.co/97Re0MY7VO

[linkcabin @LinkCabin]

Happy birthday to me I guess as citizenlab reference my Blue Callisto research from my PwC days

[The Citizen Lab @citizenlab]

🚨 NEW REPORT by @citizenlab in collaboration with @accessnow, @DeptFirst, Arjuna Team and https://t.co/JjT4QPjgGi uncovers a sophisticated and highly-personalized #phishing campaign targeting civil society members in the US and Europe, including Russian opposition in exile, NGOs, and media outlets.

Report led by @jsrailton & @PDXbek with @edok_lotosov and @RonDeibert:

https://t.co/D2W8g2Qz3y

[linkcabin @LinkCabin]

@HelgeSverre Helge we should meet in London or Norway!

[linkcabin @LinkCabin]

Reverse engineering a ESP32 file system structure - https://t.co/J1ip2UVHyv