Ronan

Founder and Chief Product & Engineering Officer @Xrator42| #Cyberdefense Lecturer | #ThreatIntel and #NaturalLanguageProcessing enthusiast

[Thomas Roccia 🤘 @fr0gger_]

💻Last week I presented at @ComfyConAU about code graphology and how it can be used for exploit hunting! Here is a thread on what was discussed and how you can apply code graphology in your research! #infosec #threatintel #exploit #yara🧵👇

[Tohtori Ei @DoctorNoFI]

Suspected Chinese hackers tampered with widely used Canadian chat program -researchers https://t.co/P4TeAOfxtT

[Nicolas Krassas @Dinosn]

FBI Arrests Former NSA Employee For Trying To Sell Top Secret Documents https://t.co/Yx1kgoswwJ

[Jānis Lācis @Lidotajs]

😬 #DontLookUp in real life. 🥵

[Koen Van Impe ☕ @cudeso]

Why the Equation Group (EQGRP) is NOT the NSA by ⁦@xorlgr⁩ #cti https://t.co/nqKFwC5OHH

[CIRCL - @[email protected] @circl_lu]

We (@Iglocska) with @CERT_Polska_en / @NASK_pl are presenting the MeliCERTes project and how the toolset supporting the cooperation of EU CSIRTS have been developed at #FIRSTCON22 .

The project is funded by @EU_Commission (under Connecting Europe Facility (CEF)-telecoms).

[ESET Research @ESETresearch]

Leaked in 2016, #Mirai source code still powers most of the IoT botnets tracked by #ESETresearch. Although a living corpse, #Mozi was the biggest of them, attacking 5.6 million times and compromising 500,000 unique IPs in T1 2022. 1/4

[ThreatRecon @nshcthreatrecon]

North Korea government sponsored hacking group SectorA05 targeted Spear Phishing attack against NGO activists for assisted North Korean defectors, they also disguise as NGO activists for attack #APT #Phishing #threatintel #threathunting #threatintelligence

[Will @BushidoToken]

Ukraine 🇺🇦 is still battling the Sandworm Team's attacks. The APT group is now using an edited version of an ESET executable to launch its CaddyWiper

[@frederike.bsky.social @F_Kaltheuner]

Fantastic news - Germany is getting a Sovereign Tech Fund. Think DARPA minus military, plus open source.

[Ronan @ShramanACK]

@KorbenD_Intel @_CERT_UA Hypothesis: CERT_UA fight for their country when intel vendors fight to look more impressive that their competitors ? Remind me this @mljanderson's tweet :)
https://t.co/yqrxtRjNKc

[Michael Anderson @mljanderson]

Remind you of anyone?

[Keith KorbenD Wingo @KorbenD_Intel]

Tell me how @_CERT_UA can say more in one short google-translated paragraph than most intel vendors do in five? They are under fire and still exemplifying excellence!

[Alexandre Dulaunoy @[email protected] @adulau]

There is a little secret about a three letter company selling a SIEM for a significant pricing and then you have many customers asking for integration with a well-known open source TIP. And obviously to who they ask to do it for free? the open source volunteers…

[Will @BushidoToken]

⚠ Cybercrime Counterintelligence

Threat actor claims to have accessed the Mandiant Advantage Threat Intelligence Portal (TIP)

[The Citizen Lab @citizenlab]

Our #CatalanGate report reveals the largest number of confirmed spyware victims and targets in a single case, including *every Catalan president since 2010*
https://t.co/yuyxVpvx5w

[Ronan @ShramanACK]

#ResourcesRot : What would happen if the www[.]google-analytics[.]com domain present on billions of sites expired and was not renewed? Two #OffensiveSecurity Specialists explore the exploitation opportunity brought by Broken Hypertext Link. #vulnerability

https://t.co/QgBvWEWBqA

[InQuest @InQuest]

As a follow up to the previous graphic outlining threats affecting #Ukraine, here is a high level blog on observed threats. Big thanks to the #infosec community for making this possible, #SlavaUkraini

@Anti_Expl0it
@Autow00t
@juanandres_gs
@flakpaket

https://t.co/n9IKK9KXNj

[Jornt v.d. Wiel @jorntvdw]

How are there 2 winners? Mitre: "MITRE Engenuity does not assign scores, rankings, or ratings. The evaluation results are available to the public, so other organizations may provide their own analysis and interpretation - these are not endorsed or validated by MITRE Engenuity."