karl (sometimes also known as bob)

security curious entrepreneur, speaker about stuff and things who likes to lurk on twitter, rt and not write any posts. totally not a poorly coded tracking bot.

[Halvar Flake @halvarflake]

With the proliferation of encrypted messengers fragmenting the IM landscape, why is there no "Trillian for mobile"? One client for N chat networks?

I would pay a couple dollars per months for having a single place to deal with.

[Chris @cmwdotme]

Linux is now completely usable on the Mac mini M1. Booting from USB a full Ubuntu desktop (rpi). Network works via a USB c dongle. Update includes support for USB, I2C, DART. We will push changes to our GitHub and a tutorial later today. Thanks to the @CorelliumHQ team ❤️🙏

[Ray [REDACTED] @RayRedacted]

@IanColdwater I absolutely love the Shinkansen, Japans high speed rail. The reason they can go so fast is not because of huge technological advances in engines, it’s because of huge technological advances in braking.

Security can be a business enabler. Better brakes allow for faster trains.

[Nic Finn @NeodymiumPhish]

I'm usually uncomfortable asking for help like this, but my family matters more than my ego, so here goes:

I'm trading in my weapon for a webcam; I'm leaving active duty. If anyone knows of any positions that might fit me, or can help me clean up my resume, please let me know.

[Signal @signalapp]

We just raised the group call limit from 5 to 8, so now you can call it even.

[Noga Tarnopolsky נגה טרנופולסקי نوغا ترنوبولسكي @NTarnopolsky]

Not something I thought I'd say, but stop whatever you are doing and watch Arnold Swarzenegger's astonishing & deeply personal statement.

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Take a step back for a second and consider what America's adversaries must think of this.

[Joe Słowik 🌻 @jfslowik]

So MSFT learned that the SunBurst actors managed to do quite a bit more than originally believed - how soon until other orgs that have posted "the intrusion failed" or "this was only confined to a test network" revise those positions too?

[Jack Rhysider 🏴‍☠️ @JackRhysider]

The best is yet to come. 🎉🥳

[Netflix & Enchiladas @contodomiamor]

@r0wdy_ @ItsOhWell N0000000000000
https://t.co/eFRwTqSJFy

[NSA Cyber @NSACyber]

Malicious cyber actors are using two sets of #TTPs to access protected data in the #cloud. Detect and mitigate against this activity by reviewing our latest #cybersecurity advisory: https://t.co/scmnGlM7cP

[karl (sometimes also known as bob) @Lastwall_Karl]

Remember when people said 2020 wouldn't get worse? Yeah... About that

https://t.co/AnurKDlx8I

[Jake Williams @MalwareJake]

Okay folks, let’s talk about SolarWinds.

For those not familiar with it, SolarWinds is a network management system (NMS). It’s probably the most ubiquitous NMS out there, so we shouldn’t jump to conclusions that FireEye and Treasury were both breached by an SolarWinds vuln. 1/

[Joe Słowik 🌻 @jfslowik]

CNAME records associated with the #SUNBURST malware C2 beacon via @DomainTools Iris:

[Dave Kennedy @HackingDave]

If you are running Solarwinds Orion, things you can do:

Determine patch levels and ensure you are running the latest.

Isolate / contain all Solarwinds servers at this time until all full details come out.

Begin analysis from those servers dating back from at least March.

[CISA Cyber @CISACyber]

.@CISAgov encourages organizations that use SolarWinds Orion Platform software to review the following advisories for information on publicly identified nation state backed threat actor activity:

https://t.co/zcAREzsbAX

https://t.co/EvIwOsUusV

https://t.co/fs5Cn40WAI

[karl (sometimes also known as bob) @Lastwall_Karl]

This.

[Joe Słowik 🌻 @jfslowik]

@Viss It makes me sad. Defender advantage SHOULD BE in knowing the environment, yet this is rarely the case and we cede significant advantage to adversaries through an inability to bridge this gap

[Kim Zetter @KimZetter]

I have report from Microsoft about SolarWinds hack, including IoCs. Excerpts in this thread: "Microsoft security researchers recently discovered a sophisticated attack where an adversary inserted malicious code into a supply chain development process.... 1/