Cybergeist

Trying hard to generate Cyber Threat Intelligence aimed at emerging teams starting a maturity journey. This bear loves hugs and NOP sleds. In Beta.

[Cory House @housecor]

This.

Years ago I thought barrels were useful. They’re not.

🚩It’s more code.
🚩It masks unused code.
🚩It bloats the bundle by inhibiting bundle splitting and tree shaking.
🚩It slows developer navigation by creating an extra layer of abstraction.

[Matt Pocock @mattpocockuk]

Node's 'inspect' function is super underused.

Insanely configurable, gives you so many options for making beautiful logs.

[Cybergeist @cybergeist_cti]

“Chrome is moving towards an experience that lets people make an informed choice with respect to third party cookies”… get off the fence, just fucking kill them - oh wait… doesn’t that kill your business?

[Cybergeist @cybergeist_cti]

I’m spending a few weeks working on some ideas to help those that are trying to enter the #CyberSecurity #job market and fighting to show evidence of experience.

The real fight is the lack of budget, Orgs are demanding roles that are too wide.

[Cybergeist @cybergeist_cti]

A year since its first reporting, #valleyrat #malware is still being used against APAC targets. https://t.co/tMMBnagHWX

[Cybergeist @cybergeist_cti]

We've just released our first iteration of our visual #STIX #CTI package builder to make it crazy easy for people to build packages for sharing.

Always seeking feedback on where we can improve.

Yes, as always, it's free for use and doesn't https://t.co/sYSDTeCBW4

[Justin Elze @HackingLZ]

New @TheDFIRReport - Threat Actors’ Toolkit: Leveraging Sliver, PoshC2 & Batch Scripts

https://t.co/gbPZJQtWXB

[Max Rogers @MaxRogers5]

Someone applied to one of our SOC Analyst roles and uploaded the DEFAULT BOOT SEQUENCE OF A CISCO ROUTER.docx as their resume.

[Cybergeist @cybergeist_cti]

| sed -En "s/vaccinated//g"
FTFY, you're welcome.

[Tate News @TateNews_]

We dont sleep with vaccinated women

[Cybergeist @cybergeist_cti]

The shower in my room feels seen.

[Supabase @supabase]

debugging is futile

[NCSC UK @NCSC]

We’ll be taking part in @DEFCONPolicy’s ‘What’s next for the commercial CNE marketplace?’ panel at @defcon this weekend. #DEFCON32

https://t.co/dV40sTuwBq

[Cybergeist @cybergeist_cti]

Working on a simplified STIX threat Intel package builder while at #defcon. Its Super early, but the first little increment is now public. Much more is already in staging to go live next week. #threatintel #cti #cybersecurity #stix
https://t.co/sYSDTeC46w

[Dan Perez @MrDanPerez]

@TaylorLongg Great work @TaylorLongg!

[MalwareHunterTeam @malwrhunterteam]

😂
🤷‍♂️

[Cybergeist @cybergeist_cti]

Now this is a thread!

[Hillai Ben-Sasson @hillai]

I hacked the @SAP AI platform by changing my UID to 1337.

…Yeah, really.

This led to admin permissions on several SAP systems, but also access to customers’ secrets and private AI files 👀

This is the story of #SAPwned 🧵⬇️

[Andrew @4ndr3w6S]

OMFG! Kerberos Request/Response ticket hashes are being included in EIDs 4768/4769 🤩

Thank you x1000000 Paul Michaud (burning_pm) for the screenshots 💜

[Cybergeist @cybergeist_cti]

@PolitlcsUK @mikeysmith Totally irrelevant. Because she has no relevance.

[Aric Toler @AricToler]

Click through the link below and see what happens

[Cybergeist @cybergeist_cti]

Libwhisker - remembered it as I hit post.

[Cybergeist @cybergeist_cti]

Raises a drink to those times, also to his http / unicode evasion stuff that I’m not too old to remember the details of - although I used it a lot.

[Daniel Cuthbert @dcuthbert]

and yet, even with all this VC cash thrown at people wearing Patagonia vests and wearing apple watches, I still see most SaaS solutions doing stuff we did when Rain Forest Puppy was hurting SQL