Rob Gasior

Husband, Dad, geek, IT Security Researcher, Ethical Hacker, DFIR / Blue Team, Runner, Pessimistic Villa supporter. Trying to do the right thing

[Carl Bildt @carlbildt]

The voice and wisdom of Sir Alex Younger 🇬🇧 will most certainly be missed. RIP

[Moshe Siman Tov Bustan @MosheTov]

TeamPCP said they hacked(?) / will hack @Dynatrace 👀
And I wonder - is there anyone from the Dynatrace security team knowing about this and monitoring/ rotating keys?
Also, did anyone find clear indicators for this? My monitoring tools and research didn't come up with anything

[solst/ICE of Astarte @IceSolst]

Security budget unlocker service:

You Venmo me and give me credentials of a random employee, and I cause a relatively minor yet threatening incident that gets leadership to immediately approve the extra headcount you’ve been begging for

[box turtle @xploitrsturtle2]

international cyber digest yet again, asking for ins and then planning to post with 0 validation, thats not how journalism works. #Teampcp #teampcp credit: @intelkink we should work as a community to expose fraud in journalism >:(

[Rob Gasior @RobGasior]

@xploitrsturtle2 @intelkink 100% agree Cyber Digest is everything wrong with Cyber Journalism, someone should do a talk on all
They bad stuff they have done

[Rob Gasior @RobGasior]

@ExploitforgeLTD @cyber_rekk Do you still use capital one, Louis Vuitton, Christian Dior, and Marks & Spencer, reputational damage is a fallacy, people forget and move on fast and it has little impact on people’s buying decisions, also regulatory are yet to have any real impact - did JLR get a fine?

[Rob Gasior @RobGasior]

@cyber_rekk @ExploitforgeLTD Prevention is not always cheaper than recovery, It’s just not how the real world works sometimes it’s literally built into contracts, I know for a fact that a lot of Fortune 500 never go over there cyber insurance deductible during an incident and that’s by design

[𝕡𝕨𝕟𝕚𝕖 @0day_ninja]

Chompie of IBM X-Force Offensive Research (XOR) used a race condition to escalate privileges on Red Hat Enterprise Linux for Workstations, earning $20,000 and 2 Master of Pwn points. The 🐐

[spencer @techspence]

Boring IT/cybersecurity skills that give you a huge advantage…

Active Directory Administrstion

[Kyle 'esSOBi' Stone @essobi]

RTing for visibility...

[Rob Gasior @RobGasior]

So i think i just had the worst cyber sales call for a while, i wont name and shame, but the guy said he was from the only cyber security firm in the UK, and was trying to shill some SIEM validation too, really didn’t seam needed when you have a Threat Hunting Team,

[thaddeus e. grugq @thegrugq]

Some entity within the cyber world has the authority, access, or ability to perform any action an attacker desires to perform. The attacker’s goal is to assume the identity of that entity in some fashion.

Parks, Raymond C., David P. Duggan. “Principles of Cyberwarfare.”

[Rob Gasior @RobGasior]

@Cyberknow20 @UK_Daniel_Card 100% agree sad times, it’s really gone down hill

[CyberKnow @Cyberknow20]

"History made in the Dark".... This is absolute FUD farming and a stain on the cybersecurity community. I use to this this had value, but now its just clickbait slop.

[BuBBliK @k1rallik]

do you understand what just happened to your computer..

Google Chrome secretly downloaded a 4GB AI model onto your device. Without asking.. Without telling you..

It's called weights.bin. It lives deep in your system folders. It powers Gemini Nano - Google's on-device AI.

And if you delete it? Chrome re-downloads it automatically. Like nothing happened.

Just Google deciding your hard drive is their storage unit.

At 1 billion Chrome users - that's 4 BILLION gigabytes of data pushed silently across the internet.

The carbon footprint alone equals tens of thousands of cars running for a year.

Check your disk right now:
📁 %LOCALAPPDATA%\Google\Chrome\User Data\OptGuideOnDeviceModel

To stop it: chrome://flags → disable Optimization Guide On Device Model → restart Chrome → delete the folder.

Reshare so people know what's sitting on their computers.

[Discogs @discogs]

These IDM records pushed the limits of studio-based experimentation. https://t.co/zwRZhdNZ4g

[mRr3b00t @UK_Daniel_Card]

we live in a world of hype, grift, nonsense and insanity. I am a massive fan of technology. I am not a fan of overhyping things.

[EZ @IAMERICAbooted]

See my response. This is correct. It is 💯 a compliance issue.

Most orgs have a lot of incidents. Its not about detection only. You need to be able to respond and govern too.

There's a lot of people in infosec who need experience in business to better understand other reasons you need logs.

In business, you have contractual obligations, regulatory obligations for records keeping and digital ledgers, compliance policies from frameworks that govern the organanizatiin to make regulatory obligations easier, regulatory audits, compliance audits, other types of audit.

>99% percent of the logs are not used detection, they are used for response. If you cannot show your incident RESPONSE plan to auditors, you will not pass audits.

[Ryan Moran (remo) @rmoskovy]

I heard SH RRR unit is actively working on releasing a decryptor for ShitForce