🅵🅴🅻🅸🆇

Security Analyst | Blue Team

[🅵🅴🅻🅸🆇 @mirwanda443]

I had the chance to write some words about how to use the new @MITREattack #ics matrix. Thanks to all people who contribute. Special thanks also to @ojalexander and @Austin_M_Scott who made a great job on explaining the use and meaning of this extension to ATT&CK!

[Airbus Defence and Space Cyber @AirbusCyber]

Filling the gap with MITRE ATT&CK for #ICS by @mirwanda443, Security Analyst: https://t.co/toEenkur2d

#OTSecurity #Industry40
#Mitre #Att&ck

[Tom Quinn @TomQuinn8]

CVE-2024-37085

#VMWare

[🅵🅴🅻🅸🆇 @mirwanda443]

#crowdstrike #bsod

[memenetes @memenetes]

kubectl apply & kubectl delete is all you need to know

[𝔅͛𝔯͛𝔦͛𝔞͛𝔫͛ ͛𝔚͛𝔥͛𝔢͛𝔩͛𝔱͛𝔬͛𝔫͛ @brianwhelton]

A text book example of RFC 1149 compliant network communication.

[Arian van Putten @ProgrammerDude]

cat is the most misused thing by programmers new to linux. I cringe every time someone uses it wrong in a bash script. Thread below with proper uses of cat only

[iSecNG @iSecNG]

Sind deine Daten betroffen? 👥
Ein weiterer Databreach, welcher die Notwendigkeit von Cybersecurity im digitalen Zeitalter aufzeigt. 💻
Daher bieten wir explizite Services für Incidents an, um deinen Schutz im Netz zu garantieren. 🔐
https://t.co/gTOXKLXB7N

[iSecNG @iSecNG]

Unser Geschäftsführer Stephan Gerhager hat die Ehre auf der @building_iot Conf '24 Im Februar eine Keynote beitragen zu dürfen.
Wir freuen uns sehr! Es wird um Angriffsflächen auf Fahrzeuge gehen 🚗. #biot24

https://t.co/b5kIWk4vX3

[iSecNG @iSecNG]

Das #Neuland CTF fand am 9. Dezember in #Ingolstadt statt. iSecNG durfte als Partner bei diesem spannenden Event unterstützen und mitfiebern.
Vielen Dank für das Event und an die Studierenden die dabei waren.
Mehr zum #Neuland Verein findet ihr hier: https://t.co/HxCzxLFtTQ

[Jesse D'Aguanno @0x30n]

Boom!
Windows Hello fingerprint authentication bypassed on top three devices:
- Dell Inspiron
- Lenovo ThinkPad
- Microsoft Surface Pro
Still waiting for recordings from our BlueHat talk to drop, but here's our writeup: https://t.co/GzqqadMdeg
#infosec #security #vulnresearch @blackwinghq

[BSides Munich @BSidesMunich]

#BSidesMunich23, #7SYNs

https://t.co/cWyS66or5i

[🅵🅴🅻🅸🆇 @mirwanda443]

@FrameworkPuter In our new company people can decide which laptop they want. Dell, HP, Mac, etc.

80% went for framework so far!

[Kath Korevec @simpsoka]

Great marketing

[Kube Architect @K8sArchitect]

Helmify is a command line tool that converts Kubernetes YAML files to Helm charts. It is designed for operator charts but can also be used for other purposes

➜ https://t.co/FXFRxbcoYL

[Joseph Thacker @rez0__]

So @OpenAI's new "Code Interpreter" gives every user a sandboxed k8s container which analyzes and executes arbitrary python code.

Including os.system(command), etc.

It's hardened though. Excited to see if researchers can escape it. Here's hostname, pwd, ls, and env for it:

[Scott Stanton @Scott_Stanton]

@k8em0 The network was scanned
Thousands of findings were shared
No fixes were made

A vuln management haiku

[Mariusz Michalowski @MariuszMichaow3]

SRE Checklist by @abregman2

https://t.co/lfYVV0MAdZ

#devops #devsecops #kubernetes #cicd #k8s #linux #docker #sysadmin #automation #Azure #infrastructureascode #cloudcomputing #serverless #terraform #ansible #yaml #sre

[Kubesploit @kubesploit]

KICS stands for Keeping Infrastructure as Code Secure, and it is a tool designed to find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code

➜ https://t.co/lwY1AE6Wh2

[Alice Climent @AliceCliment]

And now the ChatGPT diss track on Red Teamer :

1/6

Verse 1:
Red teamer, always causing a scene
But your tactics are just a routine
You think you're so sly, always playing the villain
But we see right through, your tricks are minimal