BugBot @BugBot4

CyberSecurity 0g.vc The Netherlands Joined November 2017

Tweets

201
Followers

442
Following

255
Likes

1K

celeste @vmfunc

5 months ago

the watchers: how openai, the US government, and persona have been secretly running an identity surveillance system since nov 2023. vmfunc.re/blog/persona researched by @vmfunc, @MDLcsgo, @DziurwaF

126 854 4K 497K 2K

View Details

BugBot @BugBot4

7 months ago

@IceSolst You forgot the third alert being their custom logic triggering on the same thing ;)

0 0 1 17 0

View Details

BugBot @BugBot4

10 months ago

@wbmmfq Nooo don't do something new, think of the poor detection engineers!

0 0 0 25 0

View Details

@snehalantani When SOC analysts detect a breached device in their environment, they may very well choose to observe a threat before isolating a device, or otherwise taking action. Given that Huntress is a managed EDR solution, you could very well compare all on-boarded clients as "their env"

0 0 1 196 0

View Details

BugBot @BugBot4

11 months ago

@vxunderground @RiderHomie I wonder how long fdupes will take across all those cats

0 0 0 120 0

View Details

BugBot @BugBot4

2 years ago

@apiratemoo He deserved what he had coming to him, smh

0 0 0 13 0

View Details

BugBot @BugBot4

2 years ago

@SwiftOnSecurity You're right.

0 0 0 72 0

View Details

BugBot @BugBot4

2 years ago

@vxunderground When you accidentally press the termite-disk-wiping button

0 0 0 57 0

View Details

Ambionics Security @ambionics

2 years ago

Iconv, set the charset to RCE: in the first blog post of this series, @cfreal_ will show a new exploitation vector to get RCE in PHP from a file read primitive, using a bug in iconv() (CVE-2024-2961) ambionics.io/blog/iconv-cve…

3 121 298 55K 97

View Details

Merill Fernando @merill

2 years ago

Is your concern about groups vs users accounts for break glass accounts in CA policies? Here are more things to be concerned about (read to the end, I have an answer). 👉 Someone forgets to exclude the BG user/group from a CA policy 👉 Someone is doing a clean-up and accidentally deletes the BG user/group 👉 Someone removes the GA role from the BG user/group 👉 Someone removes the auth method of the BG account 👉 Your BG uses FIDO2 and someone sets up an auth method policy that blocks the FIDO2 AAGUID (ps. this happened to me) Anything else you can think of or comment below? The solution, set up maester.dev to monitor your tenant for these critical config items. Even if something gets changed years later it will get picked up. @fabian_bader wrote a bunch of tests for CA including one to check for BG exclusion on each policy. The best part is you can write your own tenant specific test and have them monitored daily and alert you. It costs $0 and less than half an hour to set up the automation.

Nathan McNulty @NathanMcNulty

2 years ago

Do you explicitly exclude emergency access accounts from CA policies, or do you put them in a group and exclude the group? I've always been worried about what happens when CA can't retrieve group membership from Entra due to service issues, but maybe that's not how it works?

35 4 104 129K 56

12 24 131 37K 167

View Details

cts🌸 @gf_256

2 years ago

im pirating Ableton Live suite 12 the .NFO has an interesting tidbit: "does not modify any original binaries". How does it work? lets find out. live reversing thread lets go

111 895 13K 1.8M 8K

View Details

BugBot @BugBot4

2 years ago

This is a blessing words can't describe.

Dirk-jan @_dirkjan

2 years ago

👀 looks like Microsoft started with rolling out the Conditional Access features for controlling device code flow auth that I mentioned in my last blog dirkjanm.io/phishing-for-m…. Seems to be in preview, not in all tenants yet.

5 73 222 61K 101

0 0 0 111 0

View Details

BugBot @BugBot4

3 years ago

@SwiftOnSecurity always deletes their hardest tweets :(

0 0 0 25 0

View Details

perfect blue @pb_ctf

3 years ago

It's finally happening! pbctf 2023 is here 🗓️ Feb 18th, 14:00 UTC to Feb 20th 02:00 UTC (36 hours) 🎁 A $10,000 prize pool Proudly sponsored by @Zellic_io ctftime.org/event/1763

0 9 77 27K 3

View Details

Sam Curry @samwcyo

4 years ago

More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works:

197 4K 13K 0 3K

View Details

Read Raising Expectations (and Raising Hell) @JPHilllllll

4 years ago

Since Elon Musk refuses to stop talking about free speech, let’s look at his actual record on the topic. Thread 🧵

722 11K 61K 0 5K

View Details

Joseph Cox @josephfcox

4 years ago

New: here is the user manual for a mass surveillance tool that U.S. local cops are actively using. Based on location data harvested from ordinary apps installed on peoples' phones. No warrant needed, just login and search vice.com/en/article/v7v…