This is the end for me on this platform.
You can follow me on:
• Bluesky: bsky.app/profile/cyberjipe.b…
• Mastodon: infosec.exchange/@jipe
See you there! 👋🏻
Second call for action: follow me on Mastodon or send me your @ ☺️
To stay on X would mean to continue financing Elon’s mass hate / violence / disinformation program. That’s not an option for me.
Those ads…
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
I will leave this site on Jan 1. 2025. If you see this message please reply with your mastodon @ 🙏
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
"I am American woman housewife in swing state. I voting for most excellent Donald Trump because he for the womens."
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
New LOL project, LOLAD a collection of Active Directory techniques! 👇
lolad-project.github.io/
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
🚨 Breaking: A zero-day vulnerability (CVE-2024-47575) has been observed impacting Fortinet FortiManager devices, posing serious risks. Learn how the exploit works, and how to defend against the threat.
Read more -> bit.ly/4hbqmuR
#ThreatIntelligence
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
KQL to spot missing Microsoft logs
(excludes weekends since those are normally low)
SigninLogs
| where TimeGenerated >= ago(90d)
| summarize SignInCount = count() by bin(datetime_utc_to_local(TimeGenerated,"US/Pacific"), 1d)
| where dayofweek(Column1) !="6.00:00:00" and dayofweek(Column1) !="00:00:00"
| order by Column1
I have additional variations of this that I am working on such as only plotting when the variance is > 30% - input from community is welcome.
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
❓Selon vous, comment le marché du travail en cybersécurité a-t-il évolué au cours des dernières années ?
📢Professionnels de la cyber, vous avez jusqu'au 31/10 pour participer à l'enquête de l’Observatoire des Métiers et nous permettre de le savoir !
🔗s1.sphinxonline.net/surveyse…
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Nothing to really worry about, cryptanalysis-wise. Incrementing nonces is totally ok, and tbh forward secrecy isnt a big deal, for the reasons you point out.
(Unlike the report suggests, nothing wrong with deterministic IVs, as long as they're unique.)
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
In the EU, Hungary is now pushing a controversial law on chat control. The latest strategy is to make monitoring by “AI” optional, but the rest of the law (bulk monitoring of private conversations, including those with end-to-end encryption) remains. buff.ly/3Ym3BN7
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Microsoft Incident Response lessons on preventing cloud identity compromise
microsoft.com/en-us/security…
« France’s Radical-Looking New Frigate Has Gone To Sea »
The FDIs are also the first French warships of their kind to be protected against cyber threats from the outset. This includes a redundant IT architecture based around two data centers. twz.com/sea/frances-radical-…
🚨 DDoS Alert 🚨
DXPLOIT (OFFICIALS) claims to have targeted the website of Lille Airport.
NB: site is up and active
#France
#ddos #cyberattack #cti #threatintel
Date importante pour le fascisme numérique made in Orbán.
La France ne s’oppose plus à la soumission à la surveillance, mais veut protéger la cryptographie (classique MinInt vs. Sgdsn). patrick-breyer.de/en/posts/c…
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Major Russian state media are down following to a cyberattack. "Online broadcasting and internal services are not working, there is no Internet or telephony". Reports of data destruction (including backups) and expectation of long down-time. Rossia 1 and Rossia 24 (TV), in addition to more than 80 regional television and radio stations gazeta.ru/tech/news/2024/10/…
