warex

[warex @warex]

@MertSARICA 15:30’a geliyor, Wing Haven mi burasi

[Mert SARICA @MertSARICA]

Veeee @GuvenlikTV 'nin yıl sonu özel bölümünde @halilozturkci @warex ile birlikte tekrar karşınızdayız! Keyifli seyirler dileriz.

https://t.co/gYku8zM4xB

[Güvenlik TV @GuvenlikTV]

Özledik, özlettik ve nihayet 2 yıl aranın ardından “@GuvenlikTV ’den Herkese Merhaba!” diyerek tekrar karşınıza gelmeyi başardık! Siber güvenlik dünyasını ve yeni gelişmeleri konuştuk. Bu keyifli sohbete sizleri de davet ediyoruz. 👇

https://t.co/bNxFwrKVdg

[Mysk 🇨🇦🇩🇪 @mysk_co]

🚨 New Findings:
🧵 1/6
Apple’s analytics data include an ID called “dsId”. We were able to verify that “dsId” is the “Directory Services Identifier”, an ID that uniquely identifies an iCloud account. Meaning, Apple’s analytics can personally identify you 👇

[Dirk-jan @_dirkjan]

Fox-IT just open sourced their enterprise forensics tooling dissect. This is a big project that some of the smartest people I know have worked on. It supports many filesystems and file formats, all as Python libraries. Docs: https://t.co/M6YAygmW3E / code: https://t.co/HKT4eYIm1a

[Inti De Ceukelaire @intidc]

🔥PRIVACY SCOOP: How ANYONE can track your car using only your license plate: a thread! 🧵👇
#osint #privacy (1/X)

[Matthew @embee_research]

A quick demo of how to identify "real" exported functions from a #obfuscated #IcedID dll file.

I'll also briefly touch on some #Ghidra tips, and how to extract #shellcode using a debugger.

A moderate sized thread😃
[1/13]

[warex @warex]

@MertSARICA @gitaristan @halilozturkci @GuvenlikTV 6 ay olmadan yeni bölümü çekelim dostlar :) ama arada Twitter Spaces bölümleri oldu, lütfen

[mr.d0x @mrd0x]

LOLBIN to dump LSASS:

Path: C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\TestPlatform\Extensions

Binary: DumpMinitool.exe

The params are case sensitive.

[Bill Demirkapi @BillDemirkapi]

New documents for the Okta breach: I have obtained copies of the Mandiant report detailing the embarrassing Sitel/SYKES breach timeline and the methodology of the LAPSUS$ group. 1/N https://t.co/z05uQYclg9

[Joe Tidy BBC News @joetidy]

Cyber-attack strikes German fuel supplies. Oiltanking Deutschland GmbH & Co. KG says it is operating at a 'limited capacity' and has declared "force majeure" for the majority of its inland supply activities in Germany. https://t.co/O4vNLYGo8j

[Stefan Soesanto @iiyonite]

Didn't see this yesterday night.
Ukraine's Derzhspetszviazok published a statement on their preliminary investigation into #Whispergate.
- 22 gov websites were affected
- 6 sites were 'severely damaged'
- 70 sites were shut down at the request of the Derzhspetszviazok & SBU

[Güvenlik TV @GuvenlikTV]

Set a reminder for my upcoming Space! https://t.co/uBAOAC9GJ4

[warex @warex]

@MertSARICA @GuvenlikTV @halilozturkci 😂 sen de söylüyordun, yapalım tabi

[Chris Sanders 🔎 🧠 @chrissanders88]

When analysts examine evidence, they are looking for cues that have implications for action. Cues lead to decisions about what leads to pursue or how to respond.

There are several types of cues, but I think novelty cues are one of the most critical. Let's talk about why... 1/

[warex @warex]

@GossiTheDog Indeed, it would have multiple components - but it will also depend on where the vulnerability is, and how it is exploited. Outbound connection/attempt is the key

[warex @warex]

@GossiTheDog Exception logs and failed outbound connections are useful to identify vulnerable systems, but the JDNI string is not being logged when the exploitation is successful

[Florian Roth ⚡️ @cyb3rops]

How to test your apps for #log4shell vulnerability

1. Generate a DNS token https://t.co/vCzVG0O03i
2. Wrap that token in
Prefix: ${jndi:ldap://
Suffix: /a}
3. Use that value in search forms, profile data, settings etc. of your apps
4. Get notified when you triggered a reaction

[Güvenlik TV @GuvenlikTV]

Çok keyifli bir yayın oldu. Katılım gösteren herkese çok teşekkür. Yayına katılamayanlar aşağıdaki linkten dinleyebilirler.

https://t.co/ZYMxkjYBXj

[Güvenlik TV @GuvenlikTV]

Bu akşam canlı yayında karşınızda olacağız arkadaşlar. Sorularınızı hazırlayıp gelin☺️

Spaces üzerinden yapacağımız yayına katılmak için link aşağıda.

Güvenlik TV’de Siber Güvenlik Sohbetleri

https://t.co/ZYMxkjYBXj