Cyber defender with an offensive name. Managing your attack surface CTO @onyphe Opinions : all mine Special skill : machine empathy Gone from here

92
Joined May 2010
James Atack | @jamesatack.com retweeted
Hello @ovh_support_fr, vous pouvez intervenir rapidement ? Sinon c'est demande d'application des SLA. Les problèmes de connectique physique sur GRA sont un peu trop fréquents. Merci. Cc @olesovhcom
3
2
1
313
James Atack | @jamesatack.com retweeted
Replying to @Queenfries4me
Bonsoir, le trafic va être interrompu entre Gare du Nord et Châtelet-les-Halles en raison d'un incident affectant la voie à Gare du Nord. L'heure de reprise est estimée à 20h actuellement.
3
1
1
2,885
Wait till the guy with the rocket-pack tries to land it
The difficulty of firing staff—a reality of corporate life—steers Europe’s biggest firms away from making risky bets in innovative fields. This is catastrophic for the continent’s economy economist.com/europe/2025/10…
63
This. If you breath and drink, then you also contain this stuff.
133
Some of these organisations are sitting on a /8 and don't have a single service exposed on the Internet en.wikipedia.org/wiki/List_o…
📣 NEW FEATURE We now allow searches for /8 CIDRs. Here is an example query: category:datascan protocol:http ip:81.0.0.0/8 #ASM #AttackSurfaceManagement #CyberMonth2024 #CyberMonth #CyberMois
1
133
James Atack | @jamesatack.com retweeted
WRITE-UP: detecting #cups #vulnerability while staying ethical #EvilPrinter "Triggering an outgoing connection from someone else’s server to a third-party service is not defined in any RFC", we won't do it. Full text: onyphe.io/docs/write-ups/det… #asm #attacksurfacemanagement
5
6
754
James Atack | @jamesatack.com retweeted
🚨🚨🚨 Additional info on the operation: Sky News Arabic quotes an Israeli military source: - The Mossad placed explosives inside the batteries of the communication devices and detonated them by remotely increasing the battery temperature. - They used PETN, a stable explosive, instead of other types of explosives for this operation. - PETN is one of the most powerful explosives known in the world. It is sensitive to heat and friction, which may explain the explosion mechanism. - The explosive material was inserted before the devices reached Hezbollah. - Hezbollah’s supply chain was infiltrated. - Al Jazeera adds further details: 20 grams of explosives were placed in each device, and Hezbollah began using them 5 months ago. Obviously, we don’t really know what went down, but here is the first reporting.
IMPORTANT 🚨 This is a developing story, and all information is preliminary, with numbers and info subject to change. Roughly an hour ago, Hezbollah’s encrypted pager devices began simultaneously, exploding across Lebanon, including in Damascus. Initial reports from Lebanon estimate around 1,000+ casualties so far. Hezbollah has instructed all its militants to immediately discard their pagers, calling this the most significant security breach they’ve ever encountered. Iran's Mehr news agency reports that Mojtaba Amani, Iran's ambassador to Lebanon, was injured when a pager exploded.
138
479
160
1,963
569,876
James Atack | @jamesatack.com retweeted
Why numbers are sometimes better than words. What people think you say when you say “little chance,” “probably not,” or “highly likely.”
86
781
124
4,848
614,935
James Atack | @jamesatack.com retweeted
Oh geeze that is smart as hell I didn't realize that could work
Replying to @SwiftOnSecurity
What we did was use the advanced restart options to launch the command prompt, skip the bitlocker key ask which then brought us to drive X and ran "bcdedit /set {default} safeboot minimal"which let us boot into safemode and delete the sys file causing the bsod.
5
48
1
437
57,780
James Atack | @jamesatack.com retweeted
Note this will not work if your machine is bitlocker encrypted without getting the recovery key for each machine...
Crowdstrike fix. May the force be with you. Always.
78
804
101
5,744
963,741
Congratulations @microsoft @Outlook what is this new hell you’ve created? 😱 It took one thread on one cpu core about a minute to render this plain text email 😵‍💫 Also it assumes it’s Filipino 🫠 Also did you just enable this by default for everyone? 😭 you never learn
1
221
James Atack | @jamesatack.com retweeted
Now on stage at @_leHACK_ #OsintVillage, @JamesAtack from @onyphe to talk about investigations on routers cyberattacks.
1
3
12
1,020
Thanks @Ligne9_RATP for the invitation to get closer to your agents. What do you suggest practically? A dinner out? Beers and a barbecue? What level of intimacy would be inappropriate from your perspective?
5
205
James Atack | @jamesatack.com retweeted
Replying to @woueb
On vient juste de voir la même chose avec @OpenPrunus pour notre infra. On vient de lire ça : support.opendns.com/hc/en-us…
1
2
1
556
James Atack | @jamesatack.com retweeted
I was wondering why I wasn't resolving DNS anymore. A quick dig, and what do I see? 🙄 "Due to a court order in France issued under Article L.333-10 of the French Sport code the #OpenDNS service is not currently available to users in France and certain French territories." WTF
8
15
4
22
7,119
James Atack | @jamesatack.com retweeted
Replying to @hanxhx_
C'est sérieux ? Toute mon infra est sur OpenDNS à la maison en FR :D C'est quoi l'alternative ?
7
1
8
7,013
James Atack | @jamesatack.com retweeted
Russian satellite breaks up in space, forces ISS astronauts to shelter reut.rs/4cEQcUG
1
15
1
20
41,674