"Special Agents executed a search warrant at the Airbnb where the group
was staying. Investigators recovered evidence of a large-scale financial fraud operation, including:
β’ More than 150 skimming devices
β’ 237 re-encoded gift cards"
https://t.co/hdaJQimup1
For the IT admins & security folks who are unaware...
In Windows Server 2025, RPC over named pipes (via SMB) for the Print Spooler is disabled by default. I believe this started with Windows Server 2022 23H2 and up.
Also EFS is now similar to WebClient where it can be targeted but has to be activated first. There's a netexec module to perform this one for inquiring minds...
It's also common to see DFS on Domain Controllers but of course it's not enabled by default.
So tools like Coercer seem to not be too successful against Server 2025 in basic out of the box configurations.
"Hide your SSID" being a dumb early protocol hack rather than an engineered privacy feature is a great example of how you need to be familiar with implementation and not labelling.
hiding your wifi SSID but then leaving wifi on your phone all the time when away means that your phone is screaming the SSIDβs name constantly until it gets a response. wireless marco polo. hardly makes your SSID more private tbh, lmao
This is absolutely not arguing the quality of breeds, but a type. Broad experts that soak in information will continue. But there's just something possibly unreproducible for scattershot forcible manner of information ingestion subculture forum touchpoints engendered as a kind.
I feel people like Doug Demuro and ilk are possibly an ephemeral breed. The comprehensive ~breadth~ and centrality of forum culture to wade through from a young age in the 90's to advent of Discord is not something exactly replicable in another manner, especially now.
Happy 10 year anniversary to the Microsoft bae intern email. π₯³
HELL YES TO GETTING LIT ON A MONDAY NIGHT WITH HELLA NOMS AND YAMMER BEER PONG TABLES
Yes, I set a reminder for this.
The levels of sigma I imagine feeling as a young professional, debuting into post-Gulf post-Soviet pre-9/11 America. Why was I born so late as to only taste it, a helpless child teased by fate temporal. Bring back the Apaches. Bring them back so that I may know what it is to live
Bingo. Sadly most orgs are excited about adding layers that promise the world and help them sleep at night.
The basics you already own are the secure foundation for anything else but it requires planning and proper testing. People don't want to put in the effort, or are within a structure that has been built around reactionary break/fix instead of addressing root causes.
"Let's not fix DNS. Let's just run a startup script that registers DNS on each client."
Yes, I've seen it.