Founder, Researcher, Red Teamer, History Nerd
Joined August 2018
- Tweets93
- Following88
- Followers155
- Likes363
If you know me, you know I'm a huge fan of Cyber Deception! But what about deception as it relates to AI? Check out my new article on ways to utilize deception to potentially strengthen AI defenses and frustrate attacks, hope you find it interesting! medium.com/@marcusthebrody/i…
93
LinkedIn is automatically collecting data from you for its Generative AI models. You can turn this off by going to settings -> Data Privacy -> Data for Generative AI Improvement
1
96
No company should be able to automatically collect user data for AI training until they opt out; it should always be an opt in. @LinkedIn
63
Gordon Long retweeted
RE: Exploding Electronics ...at @defcon 22 (2014) there was a talk/demo of a (subverted) security camera that leveraged facial recognition to trigger a self-destruction/explosion when a target was detected in close proximity ☠️
Have a watch! 🫣📸💥
youtu.be/8PXHhGa5k8g?si=NoEg…
Gordon Long retweeted
New blog from me on manually manipulating Vectored Exception Handlers to evade some EDRs and perform threadless process injection.
securityintelligence.com/x-f…
Accompanying code: github.com/xforcered/Vectore…
Happy to announce I’ve been accepted to speak at @BSides_NoVA 🥳. Come check out my talk on some MacOS bugs: bsidesnova2024.sessionize.co…
4
99
Check out my new blog post on silently installing Web Store extensions on Chrome: medium.com/@marcusthebrody/s… @googlechrome @GoogleChromeMac
1
2
110
Gordon Long retweeted
I was rather skeptical that this wasn't an elaborate joke, but yes, @CrowdStrike has apparently emailed its customers & offered a ~$10 UberEats gift card/coupon for any "inconvenience"
...and yes, it errors out when one goes to redeem it, saying it has been cancelled 🫠
Per @TechCrunch / @lorenzofb – CrowdStrike is offering a $10 Uber Eats giftcard to individuals impacted by the recent CrowdStrike outage.
$10 USD is €9.21 EURO or £7.75.
There is no indication if this is per customer, per company, or per computer.
techcrunch.com/2024/07/24/cr…
Nobody I’ve seen has yet asked whether it is necessary to have third party security products in the Windows Kernel. I mean specifically why do ETW-ti events require kernel level access to read? Perhaps if the information was available to userland…
1
59
Security products wouldn’t need Elam drivers (which can be gate-keeping), and wouldn’t be required to operate in the kernel. Yes attackers could view which functions are being monitored, but I think there might be some benefit to trying to move security products
1
42
Gordon Long retweeted
This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n
I had such a great time presenting @x33fcon last month! Great to meet so many new folks and make some friends. I am releasing my PoCs for the two techniques I spoke about at x33fcon, Guard Comms and Guard Stomping. Check out github.com/asaurusrex/Guard_…, presentation slides included!
Gordon Long retweeted
#x33fcon 2024 interviews are ready. Shorter ones will be published on X. All on YT and linkedin. We are starting from @ethicalhax
Gordon Long retweeted
We just learned how to hide #C2 in plain sight, Who Guards the Guards? talk by @ethicalhax at #x33fcon #EDR #redteam
Gordon Long retweeted
🆕🍎In the heat of WWDC week, I'm releasing a writeup about a new persistence method I was investigating on macOS.
Widgets.
I also wrote a few tools which can be used for widget forensics and also some limited offensive tooling. Links in the blog post.
theevilbit.github.io/beyond/…
Gordon Long retweeted
So Apple has introduced a new system called “Private Cloud Compute” that allows your phone to offload complex (typically AI) tasks to specialized secure devices in the cloud. I’m still trying to work out what I think about this. So here’s a thread. 1/
Gordon Long retweeted
Unlock the secrets of hiding C2 communications in plain sight on Windows! Join @ethicalhax's talk at #x33fcon where he'll delve into new research and techniques for stealthy C2 design. Don't miss out!
More info: x33fcon.com/#!s/GordonLong.m…
