Tue Mar 2 23:33:27 2021 (*7d115397*):: +public! — Researcher hacks over 35 tech firms in novel supply chain attack — A researcher managed to hack systems of over 35 major tech companies including Microsoft, Apple, PayPal, Shopify, Netflix, Tesla, Yelp, Tesla, and Uber in a novel software supply chain attack. For his ethical hacking research […]
Thu Jan 28 21:33:06 2021 (*7d115397*):: lol damn. Did you get it working ? +public! — Decade-old bug in Linux world’s sudo can be abused by any logged-in user to gain root privileges — Sudo, make me a heap overflow! Done, this system is now yours
Wed Jan 27 03:21:24 2021 (*7d115397*):: Lots of attack surface in China +public! — Adobe Flash Shutdown Halts Chinese Railroad for Over 16 Hours Before Pirated Copy Restores Ops — This is what happens when you RUN A RAILROAD NETWORK ON FLASH.
Thu Jan 14 05:20:23 2021 (*14bf16fe*):: +public!
Wed Dec 23 16:19:00 2020 (*7eabfff5*):: Smart’ doorbells for sale on Amazon and eBay came stocked with security flaws Cyberscoop: NCC Group and U.K. consumer group Which? found vulnerabilities in 11 smart doorbells for sale on Amazon and eBay, one of which could’ve allowed a remote attacker to break into a victim’s wireless network. Neither […]
Wed Dec 23 12:47:56 2020 (*7eabfff5*):: +public!
Wed Dec 23 12:13:13 2020 (*7eabfff5*):: +public! PreOp — On Pre Op Hackers — Proper Planning and Preparation Prevents Piss Poor Penetrations I was asked for good references on pre-operation phases of hacking. I recommended Matt Monte’s “network attacks and exploitatio…
Fri Dec 18 17:54:31 2020 (*7eabfff5*):: +public! Russia or whoever has access to the Solar info is in America’s infrastructure sooo deep. I bet they are giddy like schoolchildren — Hackers Tied to Russia Hit Nuclear Agency; Microsoft Is Exposed — The U.S. nuclear weapons agency and at least three states were hacked as part […]
Thu Dec 17 19:21:45 2020 (*67e9b79f*):: +public! — Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations | CISA — This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 8 framework. See the ATT&CK for Enterprise version 8 for all referenced threat actor tactics and techniques.
Sat Dec 5 01:23:35 2020 +public!
Mon Nov 16 23:14:11 2020 <81df86d1> +public! CHAOS (Cyber, Hype, and Associated OperationS)
Mon Nov 16 22:53:07 2020 <81df86d1> Two more healthcare networks caught up in outbreak of hospital ransomware | Ars Technica <https://arstechnica.com/information-technology/2016/03/two-more-healthcare-networks-caught-up-in-outbreak-of-hospital-ransomware/> +public! — Two more healthcare networks caught up in outbreak of hospital ransomware — New server-targeting malware hitting healthcare targets with unpatched websites.
Mon Nov 16 11:34:34 2020 <81df86d1> Within the space of just three short weeks, Google has patched no less than five potentially dangerous vulnerabilities in Chrome. +public!
Mon Nov 16 07:33:26 2020 <81df86d1> A Treatise on Voting Machines — Security Embedded <https://www.security-embedded.com/blog/2018/8/12/a-treatise-on-voting-machines> +public! — A Treatise on Voting Machines — Security Embedded — he Voting Machine Village, round two, took place at DEFCON this past weekend.
Sun Nov 15 18:32:02 2020 <81df86d1> +public!
Fri Nov 13 15:49:10 2020 <81df86d1> Terrorism Risk Insurance Program: Updated Regulations in Light of the Terrorism Risk Insurance Program Reauthorization Act, and Other Purposes Posted by the Department of the Treasury on *Nov 9, 2020* <https://beta.regulations.gov/document/TREAS-TRIP-2020-0022-0001|https://beta.regulations.gov/document/TREAS-TRIP-2020-0022-0001> +public! <5547a085> Mobile OS alternatives: <https://privacytools.io/operating-systems/#mobile_os|https://privacytools.io/operating-systems/#mobile_os> — Operating Systems | PrivacyTools — Even your own computer could be […]
Fri Nov 13 14:03:33 2020 <81df86d1> <https://www.federalregister.gov/d/2020-25130|https://www.federalregister.gov/d/2020-25130> Nowhere, however, is consumer privacy even mentioned in these provisions. Zoom Video Communications, Inc., July 2020 Quarterly Report (Form 10-Q) (Sep. 3, 2020), <https://www.sec.gov/ix?doc=/Archives/edgar/data/1585521/000158552120000238/zm-20200731.htm|https://www.sec.gov/ix?doc=/Archives/edgar/data/1585521/000158552120000238/zm-20200731.htm>. When publicly traded firms do not disclose to their investors that they are facing a federal law enforcement inquiry, this suggests that they do […]
Sat Nov 7 21:12:01 2020 <81df86d1> Two iPhone jailbreaks can be used to hack the T2 security chip on newer Macs <https://www.techspot.com/news/87009-two-iphone-jailbreaks-can-used-hack-t2-security.html> +public! While this may not sound as frightening, be aware that this is a perfectly possible attack scenario for state actors. I have sources that say more news is on the way in […]
Tue Nov 3 21:02:08 2020 <d33d49bc> <https://youtu.be/mmNjzSBL3rE|https://youtu.be/mmNjzSBL3rE> +public! — JUST IN: DHS, CISA chiefs give Election Day update on voting security
Wed Oct 21 18:26:10 2020 <9e126bf3> Amazing how much nat sec is depending on Amazon now <https://www.nextgov.com/it-modernization/2020/10/pentagon-will-move-primary-biometrics-systems-amazon-cloud/169392/> — Pentagon Will Move Primary Biometrics Systems to Amazon Cloud — The move means at least two of the government’s biggest biometrics databases will live in AWS clouds. <9e126bf3> +public! <8f79fcda> <!here> anyone seen updates on the Jedi […]