Cyber Space

Cybersec | Infosec | OSINT | ThreatIntel | #unpatched log4j | retweet & fav != endorsement | CyberFlag{Y0uC4m3T0Th3R1ghtPl4c3} | advanced persistent stalkerr

[BleepingComputer @BleepinComputer]

Ransomware gang target Windows admins via PuTTy, WinSCP malvertising - @LawrenceAbrams
https://t.co/AkZZPiiDSo

https://t.co/AkZZPiiDSo

[Lorenzo Franceschi-Bicchierai @lorenzofb]

NEW: Cybercrime operation "Estate" has allowed members to carry out 1000s of automated calls to trick victims into turning over their one-time passcodes.

A bug in Estate's code exposed backend database, allowing us to take a peek behind the curtain.

https://t.co/UcRNEQ7Rdg

[vx-underground @vxunderground]

One thing we have learned over the years is nerds hate ads. Nerds will fight you to death over ads.

We say this because it's been announced EA games will soon begin putting ads inside of their video games.

More information: https://t.co/WRmuuCS84L

[Ethan Mollick @emollick]

Prompt engineering is going away for most people, and here is the latest of many signs: Anthropic, like some of the other AI companies, have released a tool that automatically generates good prompts for you based on intent. It works pretty well!

[CyberInsider @CyberInsidercom]

Proton Mail Discloses User Data Leading to Arrest in Spain

https://t.co/lPY0cGj7Qi

#protonmail #privacy #opsec

[nixCraft 🐧 @nixcraft]

this is funny #linux poster. https://t.co/Q4qZMts5ro

[Molly White @molly0xFFF]

fascinating review of studies on Internet use and cognition — including potentially negative effects on concentration and memory — found by way of an excellent article in @NautilusMag titled "Viva la library"

https://t.co/6cSEDJDV5u

[Slashdot @slashdot]

When a Politician Sues a Blog to Unmask Its Anonymous Commenter https://t.co/5sqi9Ky1Bo

[BleepingComputer @BleepinComputer]

Android bug can leak DNS traffic with VPN kill switch enabled - @serghei
https://t.co/bJkdvAGKIA

https://t.co/bJkdvAGKIA

[Red Canary, a Zscaler company @redcanary]

A long, long time ago, on an endpoint far, far away, we thwarted a ransomware attack by detecting an unusual file transfer utility. May the fourth be with you on this #StarWarsDay! https://t.co/porSNo94JJ

[Molly White @molly0xFFF]

Many yearn for the "good old days" of the web. We could have those good old days back — or something even better — and if anything, it would be easier now than it ever was.

https://t.co/A8nvb1HiAj

[FFmpeg @FFmpeg]

Show us interesting things you have done with FFmpeg and we'll share them with all our followers

[m4n0w4r @kienbigmummy]

✍️🇻🇳 My quick note how to decrypt strings and configuration of #Qakbot #Qbot version 5.0

https://t.co/riRe7OtQOA

[Will @BushidoToken]

I always recommend @ArkhamIntel for those starting out in cryptocurrency transaction analysis & OSINT research. A cool example I thought I'd share here for those unaware of its power are the addresses attributed to Bassterlord by OFAC. Looks like he's a user of KuCoin Exchange👀

[vx-underground @vxunderground]

Twitter AI is amazing. It took our satirical post about 'Stuxnet 2.0' and some mention of 'templates' into a serious trending post about cyberwarfare.

[vx-underground @vxunderground]

Yesterday The New York Times unveiled that General Motor's had accidentally enrolled millions of people into its "OnStar Smart Driver+" program. If consumers chose to not enroll through the phone app – it would do it anyways.

Unenrolling requires consumers to contact OnStar customer support line. However, some people do not trust them and have turned to stripping the electronic devices from their car.

The OnStar Smart Driver+ data was being sold to LexisNexis, and insurance companies, to modify insurance rates. The data sold was invasive and logged:

- Number of trips
- Miles driven
- Minutes driven
- Hard-brake vents
- Rapid accelerates
- Speeding events

The reporter from the New York Times requested a copy of their data and received it. See attached image.

[cts🌸 @gf_256]

Life pro tip: You can find what process is locking your file in Windows using SystemInformer

SystemInformer also lets you kill the process or close(!) the file handle

[Edward Snowden @Snowden]

Don't ever use Reddit again.

[cts🌸 @gf_256]

im pirating Ableton Live suite 12

the .NFO has an interesting tidbit:

"does not modify any original binaries".

How does it work? lets find out. live reversing thread lets go

[Ed Zitron @edzitron]

Today's newsletter is the story of how Prabhakar Raghavan, Google's former head of ads - led a coup so that he could run Google Search, and how an email chain from 2019 began a cascade of events that would lead to him running it into the ground.

https://t.co/BlUwkcW1ex