sigh

Well if it's going to be that kind of party...

[sigh @atwistedsystem]

figured out the issue, UX related. Advising my team to find a better platform.

[sigh @atwistedsystem]

@hamstudy your broken OCR is preventing me from uploading my official license. Your UX is a nightmare

[sigh @atwistedsystem]

@_whatshisface @shmoocon How do you look for VEs? I remembered to throw my credentials in my bag last night if you need another extra.

[GitHub Projects Community @GithubProjects]

|￣￣￣￣￣￣￣￣￣￣￣￣￣￣￣￣￣|
| Don't Push To Production On Friday |
|＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿|
\ (•◡•) /
\ /
——
| |
|_ |_

[sigh @atwistedsystem]

spoken from a world where, apparently, availability is not a part of the CIA triad

[George Kurtz @George_Kurtz]

Today was not a security or cyber incident. Our customers remain fully protected.

We understand the gravity of the situation and are deeply sorry for the inconvenience and disruption. We are working with all impacted customers to ensure that systems are back up and they can deliver the services their customers are counting on.

As noted earlier, the issue has been identified and a fix has been deployed. There was an issue with a Falcon content update for Windows Hosts.

For the latest information that we will continuously update, please refer to the CrowdStrike website (https://t.co/oTrsi3fNPb), my posts on LinkedIn, and my posts on X.  I will continue to provide updates to our community and the industry as they become available.

[sigh @atwistedsystem]

amd64 has an interesting choice for a hard-coded path name

[Raghav Rastogi @raghav127001]

hxxp://108.174.58.28/ contains #exploit for #regreSSHion CVE-2024-6387 and seems to be actively exploiting it with a list of IP's mentioned in the text file along with a cleanup routine

Would love some input from the community if this can be verified in some way?

[sigh @atwistedsystem]

@tazwake @Support https://t.co/XuifW5vhm5

[sigh @atwistedsystem]

@tazwake @Support I just locked my account and uninstalled the app. They can have fun counting rocks.

[sigh @atwistedsystem]

#phishing bkengineersindia[.]com

[sigh @atwistedsystem]

It looks like @twitter has removed any posts with malicious links from their search results, which is much more than I can say for @facebook or @Google.

My post was flagged for failing to censor the explicit imagery, but that's something I am okay with if it reduces user risk.

[sigh @atwistedsystem]

seeing a lot of 500 results for @urlscanio searches and no screenshots for many of the results that are returned

[Matthew Green @matthew_d_green]

Telegram has launched a pretty intense campaign to malign Signal as insecure, with assistance from Elon Musk. The goal seems to be to get activists to switch away from encrypted Signal to mostly-unencrypted Telegram. I want to talk about this a bit. 1/

[sigh @atwistedsystem]

@yonidoee @DominionEnergy

[sigh @atwistedsystem]

@SLEUTHCON @fletchpictures Cyber squirrel attack?

[sigh @atwistedsystem]

total coincidence, r-right?

[Josh Reynolds (jmag) @JershMagersh]

Power just went out @SLEUTHCON 🤔

[SLEUTHCON @SLEUTHCON]

Power outage. We will update shortly.

[BreakPoint Labs @0xcc_labs]

BreakPoint Labs had an exciting weekend at @BSidesCharm!

Our CTO, Andrew McNicol, introduced AD-RECON during his talk, an Active Directory reconnaissance tool designed to quickly triage Bloodhound data via Neo4j queries.
Check it out! https://t.co/Kt83GX3Pl1

[sigh @atwistedsystem]

#phishing nico[.]sa
is now hosting the kit that was previously at ajstelecom[.]com[.]mx
https://t.co/u7xe5TU5pV
https://t.co/BJsE0tQyd3

https://t.co/IwoCD1zV0j

cc @malwrhunterteam @1ZRR4H

[sigh @atwistedsystem]

also, acknowledging that this platform actually made some attempt to warn users, which is a lot more than can be said about @facebook, who seem to be more interested in protecting their platform from researchers than malicious content