Tore Gu

Globetrotter & Security Specialist@ibmsecurity | Security is a must | Awareness is not a plus | Tweets are my own. #ibm #cybersecurity & #awareness

[SANS Workforce Security & Risk Training @SANSWorkforce]

RT @schneierblog: Machine Learning to Detect Software Vulnerabilities https://t.co/qfcjlT5Qlw

[John Lambert @JohnLaTwC]

Malware on Mac OS X can abuse daemons to achieve persistence. I contributed a Yara rule to @cyb3rops #Sigma repository to look for suspicious property lists.
🔍https://t.co/r2Vq3xw0VC
🔗https://t.co/5sPe20OiSc
cc/ @patrickwardle

[𝗛𝘂𝗺𝗮𝗻 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 @secguro]

How Amazon Web Services runs security at a global scale https://t.co/eRJVVZFqV0

[Troy Hunt @troyhunt]

Oh boy - data breach at @Quora affecting 100 million people: https://t.co/HfAX7MoCiK

[Guglielmo Scaiola @S0ftwarGs]

FLARE VM: The Windows Malware Analysis Distribution You’ve Always Needed! https://t.co/B34AAP2aGD

[Troy Hunt @troyhunt]

Some great @haveibeenpwned coverage from @BBCtrending re sextortion scams: https://t.co/TbZ8mRmWv3

[Florian Roth ⚡️ @cyb3rops]

Dear @Symantec - could we get an update of your great research paper from Dec 2016 by @mylaocoon regarding PowerShell attacks and especially the statistics on used command line parameters / parent processes / etc.

[Johnny Walker @iosonogio]

#Magecart are coming for you, are you ready? (by @Scott_Helme) - Use CSP and SRI to load 3rd parties JavaScript
https://t.co/lnOAaFXYJv

[Johnny Walker @iosonogio]

#Ursnif reloaded: tracing the latest trojan campaigns. #malware

https://t.co/qfnUKMNfxn

[Troy Hunt @troyhunt]

This piece on creating “master fingerprints” to defeat biometrics is pretty cool: https://t.co/wKLBBJOFUM

[Johnny Walker @iosonogio]

Big Game Hunting: The Evolution of #INDRIKSPIDER From Dridex Wire Fraud to BitPaymer Targeted #Ransomware
#malware
https://t.co/02nCSxWxod

[Troy Hunt @troyhunt]

Call comes in:

“Hi this is Telstra, we need to verify your identity”
“Sure, can you verify your identity first?”
“Uh, we’re Telstra”
“Ah, but that’s not how this is going to work, can you verify my account information”
“But we need to verify you first!”

Yeah, nah, bye!

[Eugene Kaspersky @e_kaspersky]

My 100% support for this initiative. Wish it never shares the destiny of other cybersecurity initiatives that were lost in void.

[Lance Spitzner @lspitzner]

Looking for numbers to justify your security awareness program? The FBI's IC3 media feed can be a great source, consider subscribing to it. Thanks to @kpalmgren for tip. https://t.co/KGev31oWWv

[Johnny Walker @iosonogio]

Babel-Shellfish deobfuscates and scans #Powershell scripts on real-time right before each line execution. #malware
https://t.co/tMzbDyKA05

[CERT SocieteGenerale @CertSG]

We've just released a new tool to improve users' awareness regarding phishing attacks. 🎣

https://t.co/QL9ZSUrBbG

[The Hacker News @TheHackersNews]

Facebook clarifies its new Portal video calling device doesn't spy on users

https://t.co/wuA77s5EH5

"While we don’t listen to, view/keep the contents of video calls, or use this info to target Ads, we do process some device usage info to understand how Portal is being used &.."

[Troy Hunt @troyhunt]

I get a lot of messages from people along the lines of "Hey, have you seen [insert thing here], it's totally gonna kill passwords!" No, it's not and here's why: https://t.co/qOsdENvVou

[Swati Khandelwal @Swati_THN]

*NEW* — iPhone Passcode Bypass Discovered Just Hours After Apple Releases the Latest iOS 12.1

https://t.co/xxtLAUivb1

This Unpatched Technique Exploits the New Group FaceTime Feature and Works Without Siri or VoiceOver.