0xgr00t

cybersecurity enthusiast

[David Kasabji @roo7cause]

Hot take: AI-driven adversaries operating inside your network in 2026 would be EASIER to catch than humans.

LLMs hallucinate, can't distinguish honeypots from production assets, and lack adversarial intuition.

Deploy deception. This is the one phase where the tech works in your favor.

Wrote about it here: https://t.co/wv5oLNFtKr

[vx-underground @vxunderground]

Modern day cyber security explained featuring:

- Reddit
- Microsoft (Bing)
- Rockstar Games
- NVIDIA
- Okta
- Uber
- Ubisoft
- Samsung
- Riot Games

[vx-underground @vxunderground]

Exploit dev's be like

[vx-underground @vxunderground]

Insert commas into your password so when your credentials are dumped into a CSV it breaks it

[4n6lady @4n6lady]

Just goes to show that treating your employees with respect and dignity goes a long way, no matter the business.
https://t.co/ixFkoQeoBs

[Kyla Scanlon @kylascan]

Do we need a recession?

The metrics are getting better, but for a lot of people things aren’t great - with some cheering for a downturn so they can buy a home or assets on sale.

But it doesn’t really work this way.

https://t.co/mnkD94hbLb

[Wes Kao 🏛 @wes_kao]

Most companies suck at on-boarding new team members.

Here's how to on-board yourself when starting a new job:

[U.S. Air Force Academy @af_academy]

Now that’s an academy welcome!

[Microsoft Security @msftsecurity]

Microsoft Security has been tracking criminal actor DEV-0537 (LAPSUS$) targeting organizations with data exfiltration and destructive attacks - including Microsoft. Analysis and guidance in our latest blog: https://t.co/gTMXJCoPY5

[sshell @sshell_]

Trying to write a thing a week.
First up, some basics! Covering domains, subdomains, nameservers, IPs/ASNs, how they all relate to each other, and how to use them to find additional attack surface!

https://t.co/eQc9HXuAv8

[mr.d0x @mrd0x]

Bypass Defender AV static detection:

If you name a malicious file DumpStack.log Defender doesn't scan it.

[YesWeHack ⠵ @yeswehack]

👀 A guide to learning blockchain/smart contract hacking, turn a LFI into an RCE and how to setup your own burp collaborator... and much more!

Here's our #HACKPACK12, perfect to start this new year! #BugBounty #YesWeRHackers 👇

https://t.co/cKyuvHeNmE

[Tim Urban @waitbutwhy]

21 thoughts from 2021 I'd like to take into 2022:

[Rob Fuller @mubix]

10 #Log4Shell Facts vs Fiction: a 🧵
1. 1.x is NOT vuln to this RCE. While it doesn't have another RCE, it requires access to send serialized data to a listener ON the log server. This is much MUCH harder to exploit and kind of rare for a Log4j server to be running.

[Samir @SBousseaden]

Some Detections for this IR report
https://t.co/hGZLzekBCl:

https://t.co/Y3BvgeInbG

https://t.co/9BUpvMjSKE

https://t.co/wRfQ8jxzQu

https://t.co/KryLkzNEaO

https://t.co/DrfDvWTkiy

https://t.co/bGZXazMFJQ

[Omri Segev Moyal @GelosSnake]

The only thing we have in abundance during this world supply shortage is cyber attacks.

[Troy Hunt @troyhunt]

It’s always DNS…

“Understanding How Facebook Disappeared from the Internet” https://t.co/noie82nKC3

[Mehmet Ergene @Cyb3rMonk]

Awesome talk and hypotheses for detection!
Threat Hunting in Active Directory Environment https://t.co/Have4Nreum
#ThreatHunting #DFIR

[Microsoft Threat Intelligence @MsftSecIntel]

New blog: We're sharing technical information about CVE-2021-35211 that we shared with SolarWinds via coordinated vulnerability disclosure. Learn how we found the issue and how we worked with SolarWinds to fix the vulnerability and mitigate the attacks. https://t.co/XIZHYP0Upv

[0xgr00t @groot0x12]

@spaceraccoonsec @GovTechSG @Hacker0x01 Awesome, thanks!