Stefan Schwoegler

just this guy, ya know? | | [email protected] | PGP: | signal: enkaskal.42 |

[Stefan Schwoegler @enkaskal]

@bkonowitz they’re all good but the one by @dotMudge is the must see i was talking about.

https://t.co/VGQ7reG2p8

[Mudge @dotMudge]

What 3 hackers learned in Gov:

@EdFelten https://t.co/jGpQGcLOls

@SteveBellovin https://t.co/cxNXGvRsFB

@dotMudge https://t.co/oCbgsyrzou

[Stefan Schwoegler @enkaskal]

@google captcha...is it just me or do y'all not know the difference between a scooter and a motorcycle?

[Graham Helton (too much for zblock) @GrahamHelton3]

Excited to disclose my research allowing RCE in Kubernetes

It allows running arbitrary commands in EVERY pod in a cluster using a commonly granted "read only" RBAC permission. This is not logged and and allows for trivial Pod breakout.

Unfortunately, this will NOT be patched.

[Stefan Schwoegler @enkaskal]

@CarterCruise hey, you still DJ'ing? Was listening to twitch's new DJ streams and went looking for your old Cruise Control vols 1 & 2, but can't find them online anywhere :(

[Stefan Schwoegler @enkaskal]

@infralovers thank you for this 😃👍

https://t.co/LfHigDIHct

[Schneier Blog @schneierblog]

Zero-Click Exploit in iPhones https://t.co/xtbnFsKh2E

[vx-underground @vxunderground]

All ALPHV ransomware group did to compromise MGM Resorts was hop on LinkedIn, find an employee, then call the Help Desk.

A company valued at $33,900,000,000 was defeated by a 10-minute conversation.

[SwiftOnSecurity @SwiftOnSecurity]

Holy shit Microsoft figured out how their signing key was leaked
https://t.co/bJuY0tDFzn

[Paul Graham @paulg]

If you go to chrome://settings/adPrivacy you can turn off the spyware that got inserted into the latest version of Chrome.

[vx-underground @vxunderground]

Some dork on Telegram is selling vx-underground samples for $300. He even takes a screenshot of our website, proclaiming it to be his (???), and says he got the malware from a seizure (???)

👏DON'T 👏PAY 👏FOR 👏 MALWARE 👏

[Schneier Blog @schneierblog]

When Apps Go Rogue https://t.co/tOgfxjojaD

[0xor0ne @0xor0ne]

Short introduction to Linux user space rootkits
Credits Avigayil Mechtinger (@AbbyMCH)

https://t.co/2VPaFD3HqD

#linux #rootkit #infosec

[Lorenzo Franceschi-Bicchierai @lorenzofb]

NEW: This is the device that confused and concerned attendees at @defcon by triggering pop ups on their iPhones.

The researcher who created it explained how it works, and what are the risks iPhone users face when these spoofed messages pop up.

https://t.co/J19L9p0DeR

[Ben Hawkes @benhawkes]

How can you show that a bug is exploitable without actually writing an exploit? Exploit equivalence classes. https://t.co/IvzRTkUBm8

[Patrick Wardle @patrickwardle]

Talk 3️⃣: "Demystifying macOS's Background Task Management"

BTM seeks to centralize (& govern) persistent tasks. This talk dove into internals, demo'd new tools to detect persistent malware, & used 0days to bypass both BTM's alerts & ES messages.

Slides: https://t.co/jdbXPmh8sW

[Patrick Wardle @patrickwardle]

Talk 2️⃣: "Mac-ing Sense of the 3CX Supply Chain Attack: Analysis of the macOS Payloads"

News of attack broke w/ the statement: "we cannot confirm the Mac installer is trojanized" This talk confirmed it was, detailed impact, & methods of detection

Slides: https://t.co/EYsa9wcpcK

[Patrick Wardle @patrickwardle]

Talk 1️⃣: "Nothing but Net: Leveraging macOS's Networking Frameworks to Detect Malware"

Most malware (ab)uses the network thus detecting unauthorized access is a must! But there is (was) scant info on building network monitoring tools for macOS

Slides: https://t.co/76bzsWqpAv

[Stefan Schwoegler @enkaskal]

“The NSA discovered the intrusion in 2020—we don’t know how—and alerted the Japanese.”

[Schneier Blog @schneierblog]

China Hacked Japan’s Military Networks https://t.co/pmSP9wLULx

[Schneier Blog @schneierblog]

Zoom Can Spy on Your Calls and Use the Conversation to Train AI, But Says That It Won’t https://t.co/G1nRi7Hwna

[Michael Maltsev @m417z]

It's common knowledge that the best source for Windows native API definitions is the collection of System Informer (formerly Process Hacker) phnt headers. Surprisingly, there were no online docs for them, so I created a simple website:
https://t.co/WHU55QVZQl

[Veilid 🅅 @VeilidNetwork]

Veilid is ready for you!

Instructions for apt/yum install are live on https://t.co/AQMJKe9Zwj

The Python library is Veilid on Pypi

The Gitlab will be open within the hour.