daevlin

Mr Malware, meet Mr Poke and Mr Stick

[daevlin @daevlin]

Reposting this blogpost since I have a lot of use for it myself in x64dbg. Good tip for those who prefer working at the commandline instead of clicking on stuff (like me).

https://t.co/mcX9uyYulv

[Dodge This Security @shotgunner101]

Same government that demands acceww to your unencrypted private messages, photos, videos and demands identity verification for everything you do online.

But remember guys were "safer" if they have all our info 🙃

[International Cyber Digest @IntCyberDigest]

🚨‼️ BREAKING: Crunchyroll breached through outsourcing partner in India.

A threat actor exfiltrated data from Crunchyroll's ticketing system and also managed to pull 100 GB of personally identifiable customer analytics data.

We've analyzed sample data and it includes IP addresses, email addresses, credit card details, and more.

An employee of their outsourcing partner Telus had executed malware on his system, which gave a threat actor access to Crunchyroll's environment.

[Politie Landelijke Opsporing en Interventies @Pol_Ops_Int]

In Operatie Endgame zijn belangrijke spelers uitgeschakeld die een sleutelrol hadden in de internationale cybercriminaliteit. Door het neerhalen van de infrastructuur is het hele businessmodel van veel cybercriminelen tegelijkertijd verstoord. Lees meer: https://t.co/waz8LcS3Uv

[Europol @Europol]

Operation Endgame’s latest phase targeted the infostealer Rhadamanthys, Remote Access Trojan VenomRAT, and the botnet Elysium.

Read more in our press release: https://t.co/IHnIahrWo0

[@levelsio @levelsio]

Just a month later and...

🇪🇺 ChatControl is back!

Now they're trying to pass an even more far reaching ChatControl law through the back door, in a form even more intrusive than the originally rejected plan, without needing any of the EU countries votes

The new proposal:
- total mandatory surveillance of ALL text chats, emails and social media in the EU
- obligatory registration of your ID/passport to your chat, email or social media account
- minimum age requirement for chat, email and social media apps of 16 (!)

The only way to stop this law is if EU countries veto it

Read more here by @echo_pbreyer:

https://t.co/Yg2iXX9uWs

[daevlin @daevlin]

@_JohnHammond @vxunderground

[Florian Roth ⚡️ @cyb3rops]

Interesting
https://t.co/ry11IckSDa

[SEKTOR7 Institute @SEKTOR7net]

Do you happen to use x64dbg in your gigs?

It's worth to consider supporting the author, Duncan Ogilvie (@mrexodia) in further development (and his other incredible projects).

We've just subscribed to co-sponsor x64dbg development in the future.

Here's the link: https://t.co/olwZ7cqC8P

[SkelSec @SkelSec]

Well, it happened. The company I worked at for 6 years will be closing and thus I got laid off. This doesn't affect @octopwn operations in any negative ways, but I'm actively looking for a new day job. If someone has something please DM me.
Retweets are appreciated.

[EFF @EFF]

Online advertising fuels widespread privacy and security violations, EFF’s Bill Budington told @Verge. Meta “is putting WhatsApp’s 3 billion users at unnecessary risk, all for the sake of a monetization strategy no one asked for and no one wanted.” https://t.co/f3GzzzGLB1

[Huntress @HuntressLabs]

defendnot disables Windows Defender by creating a fake AV product using undocumented WSC APIs—no reg tweaks, no policies.

We break down how to detect it from a blue team perspective + share Sigma rules to catch it in action.
https://t.co/1GFgjYBGie

[Florian Roth ⚡️ @cyb3rops]

Another blog on CVE-2025-33073 - The Reflective Kerberos Relay Attack

https://t.co/6PerQCAdtB

[Florian Roth ⚡️ @cyb3rops]

Windows SMB Client Elevation of Privilege Vulnerability

CVSS Score: 8.8

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: None

Do I have to say more?

https://t.co/SbFqsTWTSN

[KoifSec @KoifSec]

Pretty cool technique I didn't see before, command execution via Excel IQY files
https://t.co/wB8GOYyxBn

[daevlin @daevlin]

Anybody who knows any good technical articles/videos about this malware family?

https://t.co/GnwPCNPvV5

https://t.co/Q3O5ktlCJT

[vx-underground @vxunderground]

It's a shame too.

Blue Team is infinitely more interesting. I have deep respect and admiration for people who do DFIR, SOC, and DEVSECOPS, etc.

I've learned more from defensive approaches than I have offensive.

Blue Team just isn't as "flashy".

[RussianPanda 🐼 🇺🇦 @RussianPanda9xx]

People often wonder why we bother reporting certificates that are being abused to sign malware. Again, by doing so, you are not only disrupting threat actors' operations but also costing them money. $3500 per certificate is not cheap ...

[Florian Roth ⚡️ @cyb3rops]

I’ve seen the NG craze, the UTM wave, the Zero Trust gold rush, and DLP appliances that did nothing but log printer jobs.
But this AI cyber defense circus?
Pioneers at the forefront of weaponized nonsense.

[Squiblydoo @SquiblydooBlog]

#Signed "It Go Pro SP Z O O"
-Captcha to prevent automated sandbox execution
-PowerShell to add Windows Defender exclusion for C
-PowerShell to execute additional payload.

NexVoo.dll
51b3a64c741e2cfc698923809ce737de

BraveSoftware.dll
525a7f90145ede3dd07570d2b1d218f8

[daevlin @daevlin]

@hasherezade Thank you for this awesome tool. 🫡