Roberto

Security and IT Risk Engineer | DIY Audio enthusiast | Cellphone Photographer

[isabel @artficialisabel]

the openai huggingface incident, from an agents pov.

(part 1)

[Microsoft Security @msftsecurity]

Phishing triage in minutes, not hours. St. Luke’s uses Security Copilot to unify security ops and protect patient care. Read on: https://t.co/4J5jeTUO2C

#BeCyberSmart

[Clint Gibler @clintgibler]

Reading 'tl;dr sec' is the best way to keep up with cybersecurity research.

Join over 30k security professionals getting the best tools, talks, and resources right in their inbox for free 👇

[Roberto @RobDoxPower]

@sensea__ One of my best Christmas gifts. Sonic 2 and SOR2 made Xmas 92’ super memorable..

[Roberto @RobDoxPower]

@sensea__ C'mon man, you've got more than a few brain cells left 😂

[Roberto @RobDoxPower]

@sensea__ Legendary times sir!

[Roberto @RobDoxPower]

@sensea__ Could have been either one! Can't remember. Do you remember Battle Arena Toshinden? I played all three A LOT back in the day...

[Roberto @RobDoxPower]

@sensea__ Definitely not cool 🤣.

[Roberto @RobDoxPower]

@sensea__ Yeah, I laugh because I've seen how it all works from their side. Discord rooms, emails with links to add the item to your cart.

[Roberto @RobDoxPower]

Not a bad idea.

[briankrebs @briankrebs]

In 2021, the IRS will let all taxpayers apply for an IP PIN, a single-use code designed to block ID thieves from claiming a refund in your name. Currently, PINs are given only to those who fill out an ID theft affidavit, or to previous tax ID theft victims https://t.co/V3hcG8jCaM

[Jonas L @jonasLyk]

CVE-2020-16938 WRITEUP- aka how I installed an UEFI bootkit from edge sandbox.
So- the UEFI partition runs FAT32( No ACL or owner concepts)- so instead access is controlled virtually.
Thing is though- by just requesting MAX for permissions everything is bypassed and you get write

[Pierluigi Paganini - Security Affairs @securityaffairs]

#DLink addressed 5 flaws on some router models, some of them reached EoL
https://t.co/RiTqgfJj4p
#securityaffairs #hacking from @Loginsoft_Inc

[Roberto @RobDoxPower]

@okta @ScaleFT Huge fan of both tools!

[VectorSEC @Real__Vector]

I just released AutoSploit on #Github. #Python based mass #exploit #tool. Gathers targets via #Shodan and automatically invokes selected #Metasploit modules to facilitate #RCE.

https://t.co/BNw6JvTVH9

#OffSec #InfoSec #Programming #Security

[Jeremiah Grossman @jeremiahg]

Are we secure yet?

[Shyam Prakash Jha @ShyamPrakashJha]

Outbreak Hits Europe's Industrial Sector, Thousands More https://t.co/XRVeN3McnU

[briankrebs @briankrebs]

eBay asks those using its keyfob for two-factor authentication to switch to SMS, a less secure alternative https://t.co/ipndQ18rNv

[briankrebs @briankrebs]

Fun fact: CIA unit exposed by Wikileaks was tasked w/ crafting cyber response to Russia's alleged election meddling https://t.co/3RbYtz2M9M