My @disobeyfi.bsky.social talk is finally out! Link to video and slides available at aadinternals.com/talks
And yes, @notmynick.bsky.social used some weird filter, I'm not that fat nor old 😜
Very excited to be able to announce this.
And for the record: OrangeCon is a nonprofit, trainings are quite affordable. The money we make from those goes into keeping the conference cheap!
What I read from the post, implement MFA on remote access, look at your EDR alerts and consider network monitoring. And yes segmenting you cameras is also a good idea, but MFA and looking at your EDR alerts should be a higher priority.
The takeway from this news message should not be to focus on camera's or to be scared of new ransomware tacticts. The takeway should be to implement MFA, look at your EDR alerts and consider network monitoring.
www.bleepingcomputer.com/news/securit...
DFIR specialist Mthcht has released LOLC2, a collection of C2 frameworks that leverage legitimate services to evade detection
lolc2.github.io
🌟New report out today!🌟
Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware
Analysis & reporting completed by @r3nzsec, @MyDFIR & @MittenSec.
Audio: Available on Spotify, Apple, YouTube and more!
thedfirreport.com/2025/01/27/c...
psirt.global.sonicwall.com/vuln-detail/...
Security Advisory CVSS 9.8 Vulnerability
Doing external IR for hands-on-keyboard is crazy hard, it's not something I really do much but on occasion observe. The layers of people and systems and fog of war and butt covering and breadth of skills and investigative practice and tracking of threads of information and timeline mapping. Crazy.
New from 404 Media: Meta is laying the narrative groundwork for Trump's mass deportations. Meta now says users can call migrants pieces of trash, vomit, etc. Multiple experts drew parallels to when Facebook contributed to a genocide in Myanmar. Now U.S. www.404media.co/meta-is-layi...
Thanks. Had a talk with a Microsoft rep a couple of weeks ago and they didn’t know this.
a user reporting a phishing email to their IT team
the same user being assigned phish training for supposedly falling for a phish test.
This is why end-users hate IT/security teams.
I'm not aware you can deploy Defender for Endpoint rules? Sentinel, yes, but not MDE. Seriously mis this option as you can't do proper source control.
Congrats, well deserved!
Apple acknowledges that Siri unintentionally recorded private conversations
"The only clue that users seemingly had of Siri's alleged spying was eerily accurate targeted ads that appeared after they had just been talking about specific items"
arstechnica.com/tech-policy/...
Nieuws: de Nederlandse supermarktketen Spar in Iran werd stiekem gebruikt om de strenge Westerse sancties tegen het land te omzeilen.
Na vragen van de Volkskrant heeft Spar International de licentie voor Spa Iran ingetrokken:
www.volkskrant.nl/buitenland/h...
Interesting case I heard. Receiving 1500 - 5000 newsletters a week for certain employees. I was expecting a call from ' IT' and an RMM tool, but apparently this was a disgruntled employee using a bot to sign up for thousands of newsletters. No clue on how to fix this.
Microsoft also explains that it has received gag orders for 28% of all US government disclosure requests: “In the second half of 2022, Microsoft received secrecy orders attached to 28% percent of U.S. legal demands, including federal, state, and local law enforcement demands, totalling 1,465 secrecy orders. Of these, 1,184 were issued by federal law enforcement authorities.
Microsoft adherents will often state that Microsoft would "let you know" if the US government requested your (government) data. Turns out, there are lots of requests with secrecy orders attached, as uncovered by this (disastrous) privacy impact assessment […]
[Original post on fosstodon.org]
Het geweld tegen Israëliers in Amsterdam toonde volgens minister Van Weel de noodzaak aan om de politie ruimere bevoegdheden te geven om mee te kunnen kijken in online chatgroepen.
Maar wat blijkt nu: de politie zat voorafgaand aan de rellen al in appgroepen en keek mee
www.nrc.nl/nieuws/2024/...
Maar awareness is 1 van de vele maatregelen die je moet nemen en niet dé maatregel zoals velen het soms lijken te zien. NIST CSF heeft 108 controls waarvan er 1 over awareness gaat. Dat is wat mij betreft een aardig beeld over hoe de verhouding zou moeten zijn.
Ik denk dat de investeringen en effort in andere maatregelen prioriteit zouden moeten krijgen. Een goede vorm van awareness zorgt er wel voor dat security gaat leven bij medewerkers. En dat is nodig omdat niet alle maatregelen zonder impact zijn en een mate van adoptie nodig hebben.
