🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦

I fix accepted risks. Previously @ANSSI_FR / @CERT_FR. Former @CertSG team leader. 🐘 @[email protected] 🦋

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

This is the end for me on this platform.

You can follow me on:
• Bluesky: https://t.co/ihyRswcaTp
• Mastodon: https://t.co/vqewprn17e

See you there! 👋🏻

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

Second call for action: follow me on Mastodon or send me your @ ☺️

To stay on X would mean to continue financing Elon’s mass hate / violence / disinformation program. That’s not an option for me.

Those ads…

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

I will leave this site on Jan 1. 2025. If you see this message please reply with your mastodon @ 🙏

[DG MEME 🇪🇺 @meme_ec]

It's easier to conquer the US than Ukraine...

[Roshan Rinaldi @Roshan_Rinaldi]

"I am American woman housewife in swing state. I voting for most excellent Donald Trump because he for the womens."

[Thomas Roccia 🤘 @fr0gger_]

New LOL project, LOLAD a collection of Active Directory techniques! 👇

https://t.co/TnF7QlZn2Q

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

New credential access technique unlocked: « Buy ntds.dit » on Amazon.

[Mandiant (part of Google Cloud) @Mandiant]

🚨 Breaking: A zero-day vulnerability (CVE-2024-47575) has been observed impacting Fortinet FortiManager devices, posing serious risks. Learn how the exploit works, and how to defend against the threat.

Read more -> https://t.co/tGag4Okvvd

#ThreatIntelligence

[Joe Stocker @ITguySoCal]

KQL to spot missing Microsoft logs
(excludes weekends since those are normally low)
SigninLogs
| where TimeGenerated >= ago(90d)
| summarize SignInCount = count() by bin(datetime_utc_to_local(TimeGenerated,"US/Pacific"), 1d)
| where dayofweek(Column1) !="6.00:00:00" and dayofweek(Column1) !="00:00:00"
| order by Column1

I have additional variations of this that I am working on such as only plotting when the variance is > 30% - input from community is welcome.

[rootsecdev @rootsecdev]

Also good evening folks especially @NathanMcNulty

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

@cbrocas @H_Miser Level 1: ✅
Level 2: avoir tous ses trimestres ET tous ses points Agirc-Arrco

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

I will leave this site on Jan 1. 2025. If you see this message please reply with your mastodon @ 🙏

[ANSSI @ANSSI_FR]

❓Selon vous, comment le marché du travail en cybersécurité a-t-il évolué au cours des dernières années ?

📢Professionnels de la cyber, vous avez jusqu'au 31/10 pour participer à l'enquête de l’Observatoire des Métiers et nous permettre de le savoir !

🔗https://t.co/WSVS7DEsJc

[JP Aumasson @veorq]

@thegrugq Nothing to really worry about, cryptanalysis-wise. Incrementing nonces is totally ok, and tbh forward secrecy isnt a big deal, for the reasons you point out.
(Unlike the report suggests, nothing wrong with deterministic IVs, as long as they're unique.)

[Feisty Duck @feistyduck]

In the EU, Hungary is now pushing a controversial law on chat control. The latest strategy is to make monitoring by “AI” optional, but the rest of the law (bulk monitoring of private conversations, including those with end-to-end encryption) remains. https://t.co/82obsbhHrM

[DirectoryRanger @DirectoryRanger]

Microsoft Incident Response lessons on preventing cloud identity compromise
https://t.co/kBtEiWsj2q

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

« France’s Radical-Looking New Frigate Has Gone To Sea »

The FDIs are also the first French warships of their kind to be protected against cyber threats from the outset. This includes a redundant IT architecture based around two data centers. https://t.co/W54wga15AQ

[FalconFeeds.io @FalconFeedsio]

🚨 DDoS Alert 🚨

DXPLOIT (OFFICIALS) claims to have targeted the website of Lille Airport.

NB: site is up and active

#France
#ddos #cyberattack #cti #threatintel

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

https://t.co/SOSHIaLnJl

[🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_]

Date importante pour le fascisme numérique made in Orbán.
La France ne s’oppose plus à la soumission à la surveillance, mais veut protéger la cryptographie (classique MinInt vs. Sgdsn). https://t.co/VRBIdtaKHY