Rymx

WEB3 Opsec

[Conor @jconorgrogan]

I dumped a live Ethereum contract into GPT-4.

In an instant, it highlighted a number of security vulnerabilities and pointed out surface areas where the contract could be exploited. It then verified a specific way I could exploit the contract

[Autism Capital 🧩 @AutismCapital]

The general consensus is that Caroline Ellison is likely in NY cutting a deal and cooperating with SDNY prosecutors to roll on Sam.

[LilMoonLambo @LilMoonLambo]

These two are going to make the greatest finance movie ever made

[Chris Bakke @ChrisJBakke]

This guy wins at Linkedin

[Rymx @RymxSecurity]

https://t.co/VIGdZEA4M5

[Ramin Nafisi @MalwareRE]

https://t.co/ab6fy4FikP
We are releasing an in-depth analysis of a targeted post-compromise capability we’re calling #MagicWeb, used by #NOBELIUM to bypass all standard Active Directory Federated Services (AD FS) processes (including checks for MFA) & sign in as any user.
🧵⬇️

[Rymx @RymxSecurity]

https://t.co/tob7o9ap7I

[Rachel Tobac @RachelTobac]

🚨ATTENTION🚨
Apple found two 0-days actively in use that could effectively give attackers full access to device.
For most folks: update software by end of day
If threat model is elevated (journalist, activist, targeted by nation states, etc): update now https://t.co/BUEn08260X

[Rymx @RymxSecurity]

https://t.co/nZyG96Bxm1

[Bankless @Bankless]

BREAKING:

The Ethereum Merge has been scheduled for TTD 58750000000000000000000

This is approximately Sept 15-16th

The Merge is officially scheduled 📆

[Mr.programmer @freeprogrammers]

Good Search Engines for Pentesters

#Pentesting #CyberSec #cyberawarness #cybersecuritytips #informationsecurity #infosec #ethicalhacking #bugbounty #bugbountytips #aws

[samczsun @samczsun]

1/ Nomad just got drained for over $150M in one of the most chaotic hacks that Web3 has ever seen. How exactly did this happen, and what was the root cause? Allow me to take you behind the scenes 👇

[Rob Fuller @mubix]

For those that are dealing with ISO based malware downloads, might I suggest the following solution: https://t.co/2SHxqQFCTG

Basically add "ProgrammaticAccessOnly" to HKEY_CLASSES_ROOT\Windows.IsoFile\shell\mount as a REG_SZ

This can be done at a GPO level :)

[Florian Roth ⚡️ @cyb3rops]

Ransomware Resistance

- Talk that I gave today with a rather narrow focus on low complexity measures with a big effect

https://t.co/oYprs3ts9F

[Wallet Guard @wallet_guard]

1/ ⚠️ New Open-Source Malware⚠️
🎯 Targeting Web3 🧵
Code Named: Luca Stealer 🥷

🔍 High Level:
- Primarily an info stealer
- Targets cold/hot wallets
- Steals discord tokens
- Steals from over 17 different extensions 👇

[U.S. Securities and Exchange Commission @SECGov]

Today we charged former U.S. Congressman Stephen Buyer with insider trading related with his alleged use of nonpublic information to buy $1.5 million in stocks.

Read more: https://t.co/Re0213Zj5y

[ZachXBT @zachxbt]

Here’s a running list of Twitter accounts that’ve all been compromised recently: Beeple, DeekayMotion, Zeneca, Nouns DAO, Keyboard Monkey, FranklinIsBored, British Army, Jenkins Valet, Duppies, DegenTown,

[Consensys.eth @Consensys]

If you’ve kept up to date with our various Twitter handles, you’ll know we can’t talk enough about token approval scams – a new format, observed by @sniko_ and others on our team, involves sites offering ‘mining’ rewards ⛏

1/6

https://t.co/jYLvXqKo8u

[⟠ @ryanberckmans]

1/ Bitcoin's cost problem

Yesterday, it cost BTC holders an annualized run rate of $17B to run the bitcoin blockchain. Ethereum costs a lot, too, but the cost goes away by switching to proof of stake this year.

imo, bitcoin's cost problem is big for BTC holders.
Here's why👇