James Atack | @jamesatack.com

Cyber defender with an offensive name.
Managing your attack surface
CTO @onyphe

Opinions : all mine
Special skill : machine empathy

Gone from here

[RER B @RERB]

@Queenfries4me Bonsoir, le trafic va être interrompu entre Gare du Nord et Châtelet-les-Halles en raison d'un incident affectant la voie à Gare du Nord. L'heure de reprise est estimée à 20h actuellement.

[James Atack | @jamesatack.com @JamesAtack]

@ASDGovAu Thanks for bringing badcandy back into the spotlight

Maybe you've cleaned up the data to remove your own honeypots ;) but the numbers look a little on the low side

[James Atack | @jamesatack.com @JamesAtack]

Wait till the guy with the rocket-pack tries to land it

[The Economist @TheEconomist]

The difficulty of firing staff—a reality of corporate life—steers Europe’s biggest firms away from making risky bets in innovative fields. This is catastrophic for the continent’s economy https://t.co/uygZrmWt1r

[James Atack | @jamesatack.com @JamesAtack]

@ssharwood hi regarding the compromised telcos in the US, I did a talk about compromised Cisco IOS XE devices here https://t.co/ScbZ43JcQk

Hypothesised that it was a luxury ORB network but had some feedback saying people hadn’t seen ORB-like traffic.

Anyway, I have numbers

[James Atack | @jamesatack.com @JamesAtack]

@Jipe_ @[email protected]

[James Atack | @jamesatack.com @JamesAtack]

This. If you breath and drink, then you also contain this stuff.

[Dr Charlie Gardner (also on the blue place) @CharlieJGardner]

The world we were born into no longer exists

[James Atack | @jamesatack.com @JamesAtack]

@Cisco @TalosSecurity presumably you've got the guys who wrote BadCandy at this conf?

11 months on and they're still doing a remarkable job automating Cisco IOS XE

https://t.co/IcmVmYtbvf

[James Atack | @jamesatack.com @JamesAtack]

Some of these organisations are sitting on a /8 and don't have a single service exposed on the Internet

https://t.co/qouSnCTfwO

[@onyphe.io @onyphe]

📣 NEW FEATURE

We now allow searches for /8 CIDRs. Here is an example query:

category:datascan protocol:http ip:81.0.0.0/8

#ASM #AttackSurfaceManagement #CyberMonth2024 #CyberMonth #CyberMois

[@onyphe.io @onyphe]

WRITE-UP: detecting #cups #vulnerability while staying ethical #EvilPrinter

"Triggering an outgoing connection from someone else’s server to a third-party service is not defined in any RFC", we won't do it.

Full text:

https://t.co/2BOyBjWFBC

#asm #attacksurfacemanagement

[hack_lu @hack_lu]

https://t.co/reuUA39Vtf 2024: A Can’t-Miss Cybersecurity Event in the Heart of Europe.

The conference agenda is live! Explore the latest sessions and workshops.

#conference #hacklu #luxembourg #europe #infosec #cybersecurity #workshop #training

🔗 https://t.co/IZup0WvdRk

[Open Source Intel @Osint613]

🚨🚨🚨

Additional info on the operation:

Sky News Arabic quotes an Israeli military source:

- The Mossad placed explosives inside the batteries of the communication devices and detonated them by remotely increasing the battery temperature.

- They used PETN, a stable explosive, instead of other types of explosives for this operation.

- PETN is one of the most powerful explosives known in the world. It is sensitive to heat and friction, which may explain the explosion mechanism.

- The explosive material was inserted before the devices reached Hezbollah.

- Hezbollah’s supply chain was infiltrated.

- Al Jazeera adds further details: 20 grams of explosives were placed in each device, and Hezbollah began using them 5 months ago.

Obviously, we don’t really know what went down, but here is the first reporting.

[James Atack | @jamesatack.com @JamesAtack]

@TooWoke2Joke @MaxRLinder @esjesjesj Possibly but everyone else is buying $100 Android phones

[Max Roser @MaxCRoser]

Why numbers are sometimes better than words.

What people think you say when you say “little chance,” “probably not,” or “highly likely.”

[James Atack | @jamesatack.com @JamesAtack]

Once upon a time @apple was an innovative company. Now just following the herd.

https://t.co/RGwDwBL3l9

[BleepingComputer @BleepinComputer]

Transport for London discloses ongoing “cyber security incident” - @serghei
https://t.co/ZsJVHFH4BR

https://t.co/ZsJVHFH4BR

[SwiftOnSecurity @SwiftOnSecurity]

Oh geeze that is smart as hell I didn't realize that could work

[SwiftOnSecurity @SwiftOnSecurity]

Note this will not work if your machine is bitlocker encrypted without getting the recovery key for each machine...

[James Atack | @jamesatack.com @JamesAtack]

Congratulations @microsoft @Outlook what is this new hell you’ve created? 😱

It took one thread on one cpu core about a minute to render this plain text email 😵‍💫

Also it assumes it’s Filipino 🫠

Also did you just enable this by default for everyone? 😭 you never learn

[James Atack | @jamesatack.com @JamesAtack]

@navlys__ @_leHACK_ @onyphe Thanks @navlys__ for the welcome and the opportunity to speak. Thanks @onyphe for letting me take time out of my day-job to do it

[Sylvain HAJRI @navlys__]

Now on stage at @_leHACK_ #OsintVillage, @JamesAtack from @onyphe to talk about investigations on routers cyberattacks.