Pinned Tweet
After 3,911 days, my time at Twitter is done. It’s been an absolute honor working with so many amazing people over the years. Best job I’ve ever had. So many stories and unforgettable moments.
But for now, some rest. 🙏🏻💙
Seth Wilson retweeted
################################
CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent
################################
now.. first questions...
how many devices in your enterprise do you have running a vulnerable version of SSH?
How many of these are internet facing?
are there in the wild exploitation?
Do you need to patch regardless? (think cyber essentials)
are there even patches available?
At what priority should you patch this vs other vulnerabilities?
#Vulnerability #Management
Awesome job @g3orgi0s!!
Replying to @g3orgi0s
@g3orgi0s provided a very insightful presentation with regards to DFIR and relevant several aspects of maturity. Nice work man!
#BSidesAth #DFIR
Seth Wilson retweeted
Earlier today @CrowdStrike reported a supply chain attack targeting the 3CX Voice Over Internet Protocol (VOIP) Windows desktop client.
- 600,000 companies use it
- 12,000,000 users
- @Sophos has identified a MacOS variant infected
- Currently attributed to Lazarus Group
Seth Wilson retweeted
This is important: if you're using a Samsung, Pixel or Vivo phone and don't want to dive into whether your phone is affected or not, disable "Wi-Fi Calling" and "VoLTE" and wait for the patch.
At least on some Samsung phones, both are enabled by default.
Pretty significant Project Zero findings 🩹
18 zero-days in Samsung Exynos chipsets, some nasty enough to cause "Internet-to-baseband remote code execution" with no user interaction.
Attacker only needs victim's phone number 👩
Quick story: securityweek.com/project-zer…
Seth Wilson retweeted
A quick summary of why all these UFOs are popping up now.
Call it Science Sunday… or Superbowl Science Sunday.
In spatial science (in this case radar/satellite data), we use techniques to filter out noise so we can identify objects in space (the abstract space, not outer space).
Think of it like trying to find a tennis ball on the beach using a 3d scan of the beach read as lines of text.
You know how big the tennis ball is, so you take all the data from the beach and tell the computer to find a round object that is the approximate size of a tennis ball.
It would take a lot longer to find the tennis ball if every small object on the beach had to be reviewed one-by-one. So we tell the computer to ignore everything that doesn’t look like a tennis ball.
Same goes with detecting aircraft.
We know the range of sizes aircraft typically are, and we know they move across space, so we filter out tiny objects that aren't large enough to be typical aircraft and/or are stationary so we can readily find objects that fit the parameters we set for things like war/spy planes/drones/etc.
When the balloon thing happened, NORAD reduced the filter sensitivity to allow smaller objects to pass through.
Now, we're picking up these small, slow-moving objects that had been filtered out before.
Back to the beach analogy: we essentially turned off the filter and now we’re picking up sea shells, coins and lost rings.
What the objects are and what nation/entity they're from has not been announced. They are simply unidentified flying objects (UFOs) at this point.
These weren’t necessarily launched or sent recently, we just never looked for them. Now we are.
And we’re finding there are quite a few of them there.
Seth Wilson retweeted
Hi! I'm Lea and I care about memory safety!
#enigma2023
(I'm livetooting over on mastadon in case you want context)
Like a circle in a spiral
Like a wheel within a wheel
Never ending or beginning
On an ever-spinning reel
As the images unwind
Like the circles that you find
In the windmills of your mind

















