phragma

GeekGirl.CybersecurityNerd.TravelAddict.ArtLover.MovieFan

[Pizu, Emilio Saldaña @Pizu]

Ni hackeo
Ni Inteligencia Artificial
Ni ciberataque
Ni bots malosos

La actualización de un archivo defectuoso de 40 kb fue lo que rompió el planeta.
#CrowdStrike #Microsoft #windowsrecovery
#CafeínaNecesaria

[Linux Handbook @LinuxHandbook]

|￣￣￣￣￣￣￣￣￣￣￣￣￣￣￣￣￣|
| Don't Push To Production On Friday |
|＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿|
\ (•◡•) /
\ /
——
| |
|_ |_

[SwiftOnSecurity @SwiftOnSecurity]

IT teams waking up this morning

[phragma @phragma]

恭喜發財 / Kung Hei Fat Choi 🧧
#LunarNewYear2024 #YearOfTheDragon 🐉

[phragma @phragma]

@soyelmago Ya vi! 💔🥲 pero que bonito sería 🥺

[phragma @phragma]

O.M.G!

[Dios @Dios_0ficial]

Pues no quiero emocionarlos, pero…

[Matt Johansen @mattjay]

The head of security at Canva shared this on LinkedIn.

I don't see him on Twitter to tag for credit, but I needed to share as it's pure gold.

[The Hacker News @TheHackersNews]

🚨 Critical Security Alert: Threat actors, including LockBit #ransomware affiliates, exploit the Citrix NetScaler flaw ("Citrix Bleed") to hijack user sessions and gain unauthorized access.

Learn more in this article: https://t.co/VcGKWXm4e2

#cybersecurity #informationsecurity

[CISA Cyber @CISACyber]

🚨 @CISAgov is responding to active, targeted exploitation of #CitrixBleed (CVE-2023-4966) affecting unpatched #Citrix Netscaler ADC and Gateway systems. See our guidance for addressing this vulnerability at https://t.co/SqmoHtCNT1

[Jack Rhysider 🏴‍☠️ @JackRhysider]

People I'm most attracted to:
- those who have a self-examined life
- people who communicate complex thoughts with clarity
- people taking advantage of this precious short life
- quirky/creative people or those who can think and act independently without conforming to norms

[León Krauze @LeonKrauze]

Lo que vi y escuché en Acapulco.

La ciudad está devastada.
Las imágenes no hacen justicia al drama.
El reto de limpieza y reconstrucción será enorme.
Para una ciudad que vive del turismo, el panorama es desolador.
Hay una sensación de desamparo evidente.
Todo el día de ayer vi saqueos.
Algunos se aprovechan de la impunidad asombrosa que deja el vacío de autoridad.
Gente sacando motocicletas de una tienda en la costera, por ejemplo.
Pero la mayoría es gente desesperada que saquea productos de primera necesidad porque “no tiene de otra”.
Vi cientos y cientos de personas acarreando, papel de baño, huevo, harina. Esto ocurrió hasta pasada la medianoche,cuando vi gente caminando, empujando carritos de supermercados, muchas veces descalzos y acompañados de niños.
La situación en las comunidades cercanas es todavía más desesperada.
Están incomunicados y aislados … y desesperados.
La realidad es que si no se consigue restaurar el orden, los servicios básicos y se provee de víveres, lámina y apoyo sustancial en las próximas horas, la situación puede volverse una crisis humanitaria, como se ha visto pocas veces en nuestro país .

Que el gobierno de México, especialmente su presidente, hable de cualquier otra cosa, y se encargue de cualquier otra cosa que no sea atender. Esta crisis brutal es absolutamente incomprensible y, con toda franqueza, moralmente aberrante.

[Ed Krassenstein @EdKrassen]

We don’t need to label this kid as being a Palestinian or an Israeli.

It shouldn’t matter what nationality, religion, ethnicity or name this child has. It shouldn’t matter if it’s a boy or a girl, a child of a peasant or a child of a king.

All that matters is that this is a child, and all children should be treated as the innocent beings that they are.

If you are putting more weight on the life of a child of one ethnicity, one religion, or one ancestral line other than those of your own family or friends, then your moral compass is out of wack.

All children’s lives matter!

[Not Elon Musk @ElonMuskAOC]

A picture is worth a thousand words.

Praying for peace.

❤️

[KringleCon @KringleCon]

Aloha! 🙌 The most wonderful time of the year is almost here! Get ready for #HolidayHack 2023 by practicing your #Cybersecurity skills with games from the last few years.

😎 https://t.co/ZqVeme8xJO

[The Hacker News @TheHackersNews]

🔥 Data Leak Alert!

#Microsoft accidentally exposed 38TB of private data, including secrets, keys, passwords, and 30K+ internal Teams messages, on AI #GitHub repository due to a security glitch.

Read more in this article: https://t.co/e96ASvxD9x

#ArtificialIntelligence #Tech

[phragma @phragma]

@nitr0usmx 🐶🐻 x 1000

[Jack Rhysider 🏴‍☠️ @JackRhysider]

When I first started podcasting I made the show because I couldn't find any podcast making stories like this. 4 episodes in I found Reply All, and was like, oh, that's it. That's what I wish existed. I don't need to make mine. And I quit.

But then, as I listened, I realized...

I have different opinions, and ideas of how to tell the same story. And even though I thought their show was a million times better than mine, I picked the mic back up and kept going.

Don't doubt yourself. You look at the world different than everyone else. You're special. And your craft is unique to you. It's important to express yourself in the world. And it's magical when others appreciate the craft that comes from your heart.

I believe in you. I just hope you believe in you. Go make a ruckus.

[Jon Hencinski @jhencinski]

20 tips for aspiring #SOC analysts.

TL;DR - Candor, curiosity, passion for learning, humility, leading with empathy and being a good teammate can take you very far.

1. Candor is a strength, not a weakness. It’s OK to admit you don’t know. Learning what you don’t know is a gift, it’s an opportunity to get better.

2. Before you solve a problem, own the problem.

3. Passion for learning will get you very far. Learning begets learning and an increased capacity for knowledge often follows.

4. Learn how the internet works. You open Chrome and type “https://t.co/hPD46O7x0a” and hit “enter”. What happens next? What do you see in the pcap? Through this, you’ll begin to truly understand protocol.

5. Lead with empathy. For the orgs you protect, for the employees you defend, and for your team mates.

6. Learn the basics of file systems. You open a file on Windows computer. What happens next? What about on Linux or macOS?

7. Learn how to think like an attacker. Learn the basics of pen-testing and red teaming. CCDC, CTFs, YouTube are all ways to start to learn the basics.

8. When you encounter something you don’t know (this will happen often), it will bother you that you don’t know. Convert that energy into action.

9. Lateral movement is when an attacker moves to other systems. Steal this mental model: Access. Elevate. Movement. Storage. An attacker will gain access, find privileges that enable them to move to other systems and then repeat until they find the data (Storage) or path to complete their objective.

10. The quality of your investigations will be linked to the quality of the asks you ask. Ask: what is it? (backdoor, utility, API key), what does it do? (allow remote access by communicating to c2?), when did it get there?, how did it get there? where else is the activity? what do you need to do?

11. Speaking of investigations, great ones are stories (based on evidence). Learn how to tell great stories via verbal and written communication. Keep a copy of “Elements of Style” within reach. Practice writing. “The Windows Security Event log recorded a type 3 network login using the “admin” account originating from the IP address 10.10.10.1.”

12. I don’t know every Windows event log type. I don’t need to (neither do you). But, I do know how to establish a timeline of activity. Windows event log recorded event blah blah during known periods of attacker activity? Look it up. Interpret what happened. Establish new leads. Pursue them.

13. Speaking of event logs, /var/log on a Linux-based system can get you really far in terms of live response analysis.

14. Read open source reporting. Understand what’s happening and then ask, “how would we detect this?” And, “how would we investigate and respond?”

15. Networked apps are cool and all, but building your professional network is just as important. Don't overlook this.

16. CTFs are a great way to up-level your knowledge and experience. Set a goal to participate in one per quarter.

17. You won’t always have direct evidence. Sometimes you’ll need to infer what happened to find the next investigative lead.

18. Be a great teammate. Share knowledge. Build shared experiences. Help the new person.

19. Engage with the #security community (however much you feel comfortable with). There are so many talented folks that are willing to share what they know and help others.

20. Don’t stop learning. You’ll make mistakes. It’s fine. Learn from them.

In closing: stay curious, stay humble, never stop learning and be a good person and teammate. This will get you *really* far.

Feel free to drop a comment below with guidance, tips, or tricks to help others.

[Chris Kirsch @chris_kirsch]

A lot of my friends 🤦‍♂️ when hacking is depicted in movies. Here is a great YouTube video with @k3r3n3 that rates how realistic various movies are: https://t.co/nLu5wNBxDv

[Alejandro Jodorowsky @alejodorowsky]

No vivimos en un país, vivimos en un planeta. ¡Patriota, no dividas: une! Las fronteras son líneas imaginarias.