
Cyber defender with an offensive name. Managing your attack surface CTO @onyphe Opinions : all mine Special skill : machine empathy Gone from here
92
Joined May 2010
- Tweets2.2K
- Following896
- Followers449
- Likes4.1K
James Atack | @jamesatack.com retweeted
Hello @ovh_support_fr, vous pouvez intervenir rapidement ? Sinon c'est demande d'application des SLA.
Les problèmes de connectique physique sur GRA sont un peu trop fréquents.
Merci.
Cc @olesovhcom
James Atack | @jamesatack.com retweeted
Replying to @Queenfries4me
Bonsoir, le trafic va être interrompu entre Gare du Nord et Châtelet-les-Halles en raison d'un incident affectant la voie à Gare du Nord. L'heure de reprise est estimée à 20h actuellement.
Wait till the guy with the rocket-pack tries to land it
The difficulty of firing staff—a reality of corporate life—steers Europe’s biggest firms away from making risky bets in innovative fields. This is catastrophic for the continent’s economy economist.com/europe/2025/10…
Some of these organisations are sitting on a /8 and don't have a single service exposed on the Internet
en.wikipedia.org/wiki/List_o…
📣 NEW FEATURE
We now allow searches for /8 CIDRs. Here is an example query:
category:datascan protocol:http ip:81.0.0.0/8
#ASM #AttackSurfaceManagement #CyberMonth2024 #CyberMonth #CyberMois
James Atack | @jamesatack.com retweeted
WRITE-UP: detecting #cups #vulnerability while staying ethical #EvilPrinter
"Triggering an outgoing connection from someone else’s server to a third-party service is not defined in any RFC", we won't do it.
Full text:
onyphe.io/docs/write-ups/det…
#asm #attacksurfacemanagement
James Atack | @jamesatack.com retweeted
Hack.lu 2024: A Can’t-Miss Cybersecurity Event in the Heart of Europe.
The conference agenda is live! Explore the latest sessions and workshops.
#conference #hacklu #luxembourg #europe #infosec #cybersecurity #workshop #training
🔗 2024.hack.lu/blog/hack.lu-ag…
James Atack | @jamesatack.com retweeted
🚨🚨🚨
Additional info on the operation:
Sky News Arabic quotes an Israeli military source:
- The Mossad placed explosives inside the batteries of the communication devices and detonated them by remotely increasing the battery temperature.
- They used PETN, a stable explosive, instead of other types of explosives for this operation.
- PETN is one of the most powerful explosives known in the world. It is sensitive to heat and friction, which may explain the explosion mechanism.
- The explosive material was inserted before the devices reached Hezbollah.
- Hezbollah’s supply chain was infiltrated.
- Al Jazeera adds further details: 20 grams of explosives were placed in each device, and Hezbollah began using them 5 months ago.
Obviously, we don’t really know what went down, but here is the first reporting.
IMPORTANT 🚨
This is a developing story, and all information is preliminary, with numbers and info subject to change.
Roughly an hour ago, Hezbollah’s encrypted pager devices began simultaneously, exploding across Lebanon, including in Damascus.
Initial reports from Lebanon estimate around 1,000+ casualties so far.
Hezbollah has instructed all its militants to immediately discard their pagers, calling this the most significant security breach they’ve ever encountered.
Iran's Mehr news agency reports that Mojtaba Amani, Iran's ambassador to Lebanon, was injured when a pager exploded.
James Atack | @jamesatack.com retweeted
Why numbers are sometimes better than words.
What people think you say when you say “little chance,” “probably not,” or “highly likely.”
Once upon a time @apple was an innovative company. Now just following the herd.
bbc.com/news/articles/c8erzx…
James Atack | @jamesatack.com retweeted
Transport for London discloses ongoing “cyber security incident” - @serghei
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
James Atack | @jamesatack.com retweeted
Oh geeze that is smart as hell I didn't realize that could work
Replying to @SwiftOnSecurity
What we did was use the advanced restart options to launch the command prompt, skip the bitlocker key ask which then brought us to drive X and ran "bcdedit /set {default} safeboot minimal"which let us boot into safemode and delete the sys file causing the bsod.
James Atack | @jamesatack.com retweeted
Note this will not work if your machine is bitlocker encrypted without getting the recovery key for each machine...
Congratulations @microsoft @Outlook what is this new hell you’ve created? 😱
It took one thread on one cpu core about a minute to render this plain text email 😵💫
Also it assumes it’s Filipino 🫠
Also did you just enable this by default for everyone? 😭 you never learn
James Atack | @jamesatack.com retweeted
Now on stage at @_leHACK_ #OsintVillage, @JamesAtack from @onyphe to talk about investigations on routers cyberattacks.
Thanks @Ligne9_RATP for the invitation to get closer to your agents.
What do you suggest practically?
A dinner out?
Beers and a barbecue?
What level of intimacy would be inappropriate from your perspective?
James Atack | @jamesatack.com retweeted
Replying to @woueb
On vient juste de voir la même chose avec @OpenPrunus pour notre infra.
On vient de lire ça : support.opendns.com/hc/en-us…
James Atack | @jamesatack.com retweeted
I was wondering why I wasn't resolving DNS anymore. A quick dig, and what do I see? 🙄 "Due to a court order in France issued under Article L.333-10 of the French Sport code the #OpenDNS service is not currently available to users in France and certain French territories." WTF
James Atack | @jamesatack.com retweeted
Replying to @hanxhx_
C'est sérieux ?
Toute mon infra est sur OpenDNS à la maison en FR :D
C'est quoi l'alternative ?
James Atack | @jamesatack.com retweeted
Russian satellite breaks up in space, forces ISS astronauts to shelter reut.rs/4cEQcUG




























