wizzy

Proud husband & father.

[sneakerhax @sneakerhax]

Can AI Red Team? My current answer is no.

AI has proven useful for discovering vulnerabilities, penetration testing, and moving rapidly through a network. But stealth is a different problem. The Hugging Face intrusion required ~17,600 attacker actions to complete.

For AI to truly Red Team, it needs more than its primary training data. It needs the operational context experienced Red Teamers keep in mind while executing.

My latest brief shares my theory on how we get there.

https://t.co/WnWUX1jahF

[HaxRob @haxrob]

A recent discovery of a new variant of the DPRK 🇰🇵 attributed malware 'FASTCASH' that enables ATM jackpotting. 💵

Previously known variants ran on switches running IBM AIX and MS Windows - this one targets the Linux operating system.

Here is my writeup:
https://t.co/3GwU5rHNlS

[wizzy @the_wizzy_]

@fictillius The car or the garage, both are looking schmick!

[wizzy @the_wizzy_]

@crennsmind @deviantollam I haven't for a few years but I still try to keep my elevator knowledge fresh.

[wizzy @the_wizzy_]

@Lukeeeey1 @Frawzt This is controversial?

[wizzy @the_wizzy_]

@VolkisAU Curiosity.

[BSidesCanberra @BSidesCbr]

BSides Canberra 2023 will be held on the 28-30th September 2023! https://t.co/j3rmE0TzwP

[Florencio Cano @florenciocano]

Logging and monitoring are pretty different functions as I tried to explain here https://t.co/PztL2qs2u2. Logging is not for detection, monitoring is. Logging could be used for response. They have different missions. When we try to use logging to detect attacks, problems arise.

[SCV Security @SCVSecurity]

A validator have a few roles to support the network they operate on. Applying mandatory and critical upgrades is literally one of then and actually their job! Please, considering delegating to us.
https://t.co/0tnVRQGamH

[wizzy @the_wizzy_]

@CubicleApril @Synology Completely agree. I’m amazed they still support such old equipment. They also have reasonable security options! When my 8 year old device, which I bought second hand, dies I will 100% get another Synology.

[Red Hat Security @RedHatSecurity]

With the Pyxis API you can query Red Hat and partner container image data. Combine that with the Red Hat Security Data API and you can address a lot of your security concerns programmatically. #security #devsecops https://t.co/6qCcaR3TdG

[wizzy @the_wizzy_]

I’ve worked with this team many times, they are truely exceptional in their field!

[Volkis @VolkisAU]

We're a cybersecurity firm in Australia, trying to build our Twitter following. We'd rather give our money to people than big tech.

So instead of buying ads we are going to send a Nintendo Switch Lite + Pokémon Legends: Arceus to a random person who RTs this, and follows us! 🐺

[wizzy @the_wizzy_]

@voltagex Thank you!

[wizzy @the_wizzy_]

@alcastronic @nnwakelam Doesn't look opensource?

[wizzy @the_wizzy_]

@gordon_draper @nnwakelam 5 months though, paypal will just wipe their hands clean. Your cc issuer will be able to help and its pretty painless.

[wizzy @the_wizzy_]

@EcryptoLee What tech are you behind?

[wizzy @the_wizzy_]

@mubix Jocko Willink refers to this as “extreme ownership” and I think it’s a great way to think about leadership.

[Silvio Cesare @silviocesare]

.@infosectcbr is looking to recruit (including interns and grads). If you are located in Australia, like vuln research and low level security, msg me here or email [email protected]

[wizzy @the_wizzy_]

@infosec_au @NahamSec I was a 5 can a day drinker ~15 months ago. Went cold turkey. That plus a small eating window (similar to you) lead me to lose ~30kg! I have had a few diet cokes this year but I don't like them anymore!
Good luck Shubs! You can do it

[wizzy @the_wizzy_]

@skorov8 @vortexau I’ve also been through this. I provided them with a few days worth of trace routes showing periods of dropped packets every ~20-60mins. HFC here and they eventually replaced every connector from my house to the node and it resolved the issue.