I had the chance to write some words about how to use the new @MITREattack#ics matrix. Thanks to all people who contribute. Special thanks also to @ojalexander and @Austin_M_Scott who made a great job on explaining the use and meaning of this extension to ATT&CK!
cat is the most misused thing by programmers new to linux. I cringe every time someone uses it wrong in a bash script. Thread below with proper uses of cat only
Sind deine Daten betroffen? 👥
Ein weiterer Databreach, welcher die Notwendigkeit von Cybersecurity im digitalen Zeitalter aufzeigt. 💻
Daher bieten wir explizite Services für Incidents an, um deinen Schutz im Netz zu garantieren. 🔐
https://t.co/gTOXKLXB7N
Unser Geschäftsführer Stephan Gerhager hat die Ehre auf der @building_iot Conf '24 Im Februar eine Keynote beitragen zu dürfen.
Wir freuen uns sehr! Es wird um Angriffsflächen auf Fahrzeuge gehen 🚗. #biot24
https://t.co/b5kIWk4vX3
Das #Neuland CTF fand am 9. Dezember in #Ingolstadt statt. iSecNG durfte als Partner bei diesem spannenden Event unterstützen und mitfiebern.
Vielen Dank für das Event und an die Studierenden die dabei waren.
Mehr zum #Neuland Verein findet ihr hier: https://t.co/HxCzxLFtTQ
Boom!
Windows Hello fingerprint authentication bypassed on top three devices:
- Dell Inspiron
- Lenovo ThinkPad
- Microsoft Surface Pro
Still waiting for recordings from our BlueHat talk to drop, but here's our writeup: https://t.co/GzqqadMdeg
#infosec#security#vulnresearch@blackwinghq
Helmify is a command line tool that converts Kubernetes YAML files to Helm charts. It is designed for operator charts but can also be used for other purposes
➜ https://t.co/FXFRxbcoYL
So @OpenAI's new "Code Interpreter" gives every user a sandboxed k8s container which analyzes and executes arbitrary python code.
Including os.system(command), etc.
It's hardened though. Excited to see if researchers can escape it. Here's hostname, pwd, ls, and env for it:
KICS stands for Keeping Infrastructure as Code Secure, and it is a tool designed to find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code
➜ https://t.co/lwY1AE6Wh2
And now the ChatGPT diss track on Red Teamer :
1/6
Verse 1:
Red teamer, always causing a scene
But your tactics are just a routine
You think you're so sly, always playing the villain
But we see right through, your tricks are minimal