DFIR and all things cybersecurity. Enthusiast, the general kind. Views my own.
Joined September 2009
- Tweets744
- Following590
- Followers703
- Likes314
Mika retweeted
The Furby source code is public and heavily commented. For example, it turns the microphone off when the motors are running.
archive.org/details/furby-so…
Mika retweeted
Just published a short (hopefully broadly accessible) writeup on the ongoing outages at Facebook, Instagram & WhatsApp. Includes perspective, graphic from @dougmadory and Kentik. Will update to add more info soon. krebsonsecurity.com/2021/10/…
Mika retweeted
A flaw in @coinbase’s account recovery process allowed hackers to break into the accounts of at least 6,000 customers and transfer funds out of them.
@Nate_DiCamillo reports
trib.al/6bogSR8
Mika retweeted
User Access Logging (UAL) Forensics is now publicly available. Check it out! #DFIR #forensics
It's time for a new 13Cubed episode! Check out User Access Logging (UAL) Forensics to learn about this important artifact. youtube.com/watch?v=rVHKXUXh… #DFIR #forensics
Mika retweeted
Content of my #RomHack2021 talk "Breaking Azure AD joined endpoints in Zero Trust environments" is up!
Video: youtube.com/watch?v=OigKnI68…
Slides (pdf): dirkjanm.io/assets/raw/romha…
As usual all the links to my talk materials are also on dirkjanm.io/talks
Mika retweeted
Introducing EventTranscriptParser - A tool to extract forensic information from the Windows Diagnostic DB - EventTranscript.db!
Author: @_abhiramkumar
GitHub: github.com/stuxnet999/EventT…
#DFIR #infosec #forensics
Mika retweeted
What could be safer than a PDF, right?
........Right?
threatpost.com/pdf-certified…
Mika retweeted
Black Hat EU 2021 @BlackHatEvents is now OPEN!!!
IMPORTANT DATES
Call for Papers Opens: May 10, 2021
Call for Papers Closes: June 28, 2021
Notification to Submitters: mid-August, 2021
Mika retweeted
The Hacker News | Hackers Now Hiding ObliqueRAT Payload in Images to Evade Detection stpmvt.com/3sQQDol
Mika retweeted
If you watched the Mars landing today, the voice you heard was @DrSwatiMohan. She immigrated to the US from India at age 1, was inspired by Star Trek at 9, then earned a B.S from Cornell in mechanical and aerospace engineering, and an M.S. and Ph.D from MIT in aeronautics.
Mika retweeted
#Backdoor account (zyfwp/PrOw!aN_fXp) was found in the binary of over 100k #Zyxel firewalls, VPN gateways. #Patch now!
#cyber #informationsecurity
zdnet.com/article/backdoor-a…
Mika retweeted
Black Hat Asia Locknote? Check! Thanks to @cyberMeeks, @AsuNa_jp, and @skim71 for a great conversation. Looking forward to being able to continue it in person in 2021. #BHASIA #blackhat @BlackHatEvents
Mika retweeted
When the boss denies your request for a SIEM with enough capacity so you end up stitching a bunch of smaller tools together with some scripting...
Mika retweeted
I think mask adoption is higher among the infosec crowd because we're used to imperfect security controls, but know that not getting to 100% coverage isn't the same as a control being worthless.
Mika retweeted
The recently reported breach of #SFO airport websites is in line with the TTPs of an APT group known as Dragonfly/Energetic Bear. The intent was to collect Windows credentials (username/NTLM hash) of visitors by exploiting an SMB feature and the file:// prefix #ESETresearch 1/2
Mika retweeted
Re: this Zoom UNC Path “ex-NSA Zero Day” (I love infosec fearmongering). If an attendee clicks on a UNC path in chat from a malicious user, you don’t have an 0day, you have:
* A malicious actor in your meeting
* Poor GPO Settings
* Employees blindly clicking malicious UNC paths
Mika retweeted
I always liked the idea of 'Inside The Commentary Box' where there's an accidental symmetry between what's happening inside to what's happening outside.
#LifeCommentary