Petr Medonos

(double)Father, Husband, Hacker, Snooker & pool player, @ACSparta_CZ / @HCSpartaPraha fan, @owasp member, Security Engineer @etn_core
@[email protected]

[Joseph Cox @josephfcox]

T-Mobile to pay $500 million in response to a massive data breach. $350m to customers/lawyers, $150m to improving T-Mobile security

We first verified and broke news of this breach in August 2021 (here: https://t.co/F4hYbiucNR)

https://t.co/VsIo5GgKJq

[Cilium @ciliumproject]

Using XDP to accelerate load balancing 🚀

@seznam_cz breaks how they used Cilium Layer 4 Load Balancer to reduce CPU consumption 72x

https://t.co/xmbrCRaCys

[Gareth Heyes \u2028 @garethheyes]

Next time someone says CSS is not a programming language, tell them to disable JavaScript and visit https://t.co/03sD9qnYz0 then explain that 😀

[The Zeek Network Security Monitor @Zeekurity]

More on what's new in Zeek 5.0: https://t.co/Qw88KJStlE

[Cutter @cutter_re]

Cutter v2.1.0 has been released! 🚀
Introducing exciting new features including auto-detection of common library functions, a YARA plugin to quickly create and test signatures, and many more.

Make sure to try it @ https://t.co/ip8bQmHDkp

More info in the thread >>

[Velociraptor @velocidex]

In case you missed it, @eric_capuano of @Recon_InfoSec performs a hands-on demonstration of a live incident response against a compromised environment using nothing but the Velociraptor agent. This is a must see!

https://t.co/G5W1iHv7mu

[Romain THOMAS @rh0main]

The slides and the whitepaper about SafetyNet/DroidGuard are available here:

https://t.co/MP6ZhEO3u4

[mRr3b00t @UK_Daniel_Card]

Wget the poc.html and it executes! #follina #poc #MSDT

[predseda_UOOU @predseda_uoou]

soukromí jednotlivce zdánlivě nezajímavá. Ukazuje se, že je stále důležitější propojení ochrany osobních údajů a kybernetické bezpečnosti. Teď máme novou šanci věnovat ochraně osobních údajů pozornost a brát ji vážně, protože účinně chrání naše základní hodnoty.

[NCC Group Research & Technology @NCCGroupInfosec]

Tool Release: Ghostrings - a collection of Ghidra scripts for recovering string definitions in Go binaries with P-Code analysis - by James Chambers - https://t.co/OFTAxr4JDf - Code - https://t.co/FNicjLx23G

[Thomas H. Ptacek @tqbf]

Your periodic reminder that DNSSEC is bad, and should feel bad. Almost nobody in the industry — especially companies with big security teams — uses it, because it doesn’t do anything, but is routinely responsible for horrible outages. https://t.co/BQ5w2Si8oW

[Christophe Tafani-Dereeper @christophetd]

Wondering how to exploit this?

We just released a purposely vulnerable sample Java application, with a walk-through of how to craft a malicious JWT signature to bypass the verification process

https://t.co/kyxAOCQOBr

[_leon_jacobs(💥) @leonjza]

jadx 1.3.5 got this cool split view now so you can view multiple decompilations at once!

https://t.co/0bMF7y6CXX

[Florian Roth ⚡️ @cyb3rops]

Apply this to cyber security

[Fran Donoso (@[email protected]) @Francisckrs]

The team at https://t.co/scF3fqu3Fv now clearing up some misunderstanding about #Spring4Shell https://t.co/qxVefaOJtl

[Grant H @Digital_Cold]

Our baseband analysis platform FirmWire is FINALLY open sourced! Happy bug hunting🪲https://t.co/OS9oap6UWS

[VUSec @vu5ec]

Spectre-v2 is back! Disclosing Branch History Injection (#BHI/#Spectre-BHB), bypassing Spectre-v2 hw defenses to leak arbitrary kernel/host memory (e.g., root password hash below). Joint work by @enrico_barberis @pit_frg @nSinusR @herbertbos @c_giuffrida: https://t.co/qFmF4QxkAh

[Mandiant (part of Google Cloud) @Mandiant]

We are excited to announce that we've signed an agreement to join the @GoogleCloud family — bringing together some of the best minds in security! Read more here: https://t.co/SaDIwDUOM5