
Cyber defender with an offensive name. Managing your attack surface CTO @onyphe Opinions : all mine Special skill : machine empathy Gone from here
92
Joined May 2010
- Tweets2.2K
- Following896
- Followers448
- Likes4.1K
James Atack | @jamesatack.com retweeted
Hello @ovh_support_fr, vous pouvez intervenir rapidement ? Sinon c'est demande d'application des SLA.
Les problèmes de connectique physique sur GRA sont un peu trop fréquents.
Merci.
Cc @olesovhcom
James Atack | @jamesatack.com retweeted
Replying to @Queenfries4me
Bonsoir, le trafic va être interrompu entre Gare du Nord et Châtelet-les-Halles en raison d'un incident affectant la voie à Gare du Nord. L'heure de reprise est estimée à 20h actuellement.
James Atack | @jamesatack.com retweeted
WRITE-UP: detecting #cups #vulnerability while staying ethical #EvilPrinter
"Triggering an outgoing connection from someone else’s server to a third-party service is not defined in any RFC", we won't do it.
Full text:
onyphe.io/docs/write-ups/det…
#asm #attacksurfacemanagement
James Atack | @jamesatack.com retweeted
Hack.lu 2024: A Can’t-Miss Cybersecurity Event in the Heart of Europe.
The conference agenda is live! Explore the latest sessions and workshops.
#conference #hacklu #luxembourg #europe #infosec #cybersecurity #workshop #training
🔗 2024.hack.lu/blog/hack.lu-ag…
James Atack | @jamesatack.com retweeted

Open Source Intel@Osint61317 Sep 2024
🇮🇱!
IsraelConnected via United States App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
🚨🚨🚨
Additional info on the operation:
Sky News Arabic quotes an Israeli military source:
- The Mossad placed explosives inside the batteries of the communication devices and detonated them by remotely increasing the battery temperature.
- They used PETN, a stable explosive, instead of other types of explosives for this operation.
- PETN is one of the most powerful explosives known in the world. It is sensitive to heat and friction, which may explain the explosion mechanism.
- The explosive material was inserted before the devices reached Hezbollah.
- Hezbollah’s supply chain was infiltrated.
- Al Jazeera adds further details: 20 grams of explosives were placed in each device, and Hezbollah began using them 5 months ago.
Obviously, we don’t really know what went down, but here is the first reporting.
Open Source Intel@Osint61317 Sep 2024🇮🇱!
IsraelConnected via United States App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
IMPORTANT 🚨
This is a developing story, and all information is preliminary, with numbers and info subject to change.
Roughly an hour ago, Hezbollah’s encrypted pager devices began simultaneously, exploding across Lebanon, including in Damascus.
Initial reports from Lebanon estimate around 1,000+ casualties so far.
Hezbollah has instructed all its militants to immediately discard their pagers, calling this the most significant security breach they’ve ever encountered.
Iran's Mehr news agency reports that Mojtaba Amani, Iran's ambassador to Lebanon, was injured when a pager exploded.
James Atack | @jamesatack.com retweeted
Why numbers are sometimes better than words.
What people think you say when you say “little chance,” “probably not,” or “highly likely.”
James Atack | @jamesatack.com retweeted
Transport for London discloses ongoing “cyber security incident” - @serghei
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
James Atack | @jamesatack.com retweeted
Oh geeze that is smart as hell I didn't realize that could work
Replying to @SwiftOnSecurity
What we did was use the advanced restart options to launch the command prompt, skip the bitlocker key ask which then brought us to drive X and ran "bcdedit /set {default} safeboot minimal"which let us boot into safemode and delete the sys file causing the bsod.
James Atack | @jamesatack.com retweeted
Note this will not work if your machine is bitlocker encrypted without getting the recovery key for each machine...
James Atack | @jamesatack.com retweeted
Now on stage at @_leHACK_ #OsintVillage, @JamesAtack from @onyphe to talk about investigations on routers cyberattacks.
James Atack | @jamesatack.com retweeted
Replying to @woueb
On vient juste de voir la même chose avec @OpenPrunus pour notre infra.
On vient de lire ça : support.opendns.com/hc/en-us…
James Atack | @jamesatack.com retweeted
I was wondering why I wasn't resolving DNS anymore. A quick dig, and what do I see? 🙄 "Due to a court order in France issued under Article L.333-10 of the French Sport code the #OpenDNS service is not currently available to users in France and certain French territories." WTF
James Atack | @jamesatack.com retweeted
Replying to @hanxhx_
C'est sérieux ?
Toute mon infra est sur OpenDNS à la maison en FR :D
C'est quoi l'alternative ?
James Atack | @jamesatack.com retweeted
Russian satellite breaks up in space, forces ISS astronauts to shelter reut.rs/4cEQcUG
James Atack | @jamesatack.com retweeted
🤯@_leHACK_ #OsintVillage programme is online!
This 2-day event will bring together a number of international #OSINT experts on July 5 and 6 in Paris for exclusive conferences in English only!
We'll be welcoming:
- @Viginum_Gouv
- @PeurAvion
- @SmallArmsSurvey
- @pirhoo from @ICIJorg
- @JamesAtack from @onyphe
- @scrapoxy_io
- @heinenbros from @GeospyAI
- @billmarczak from @citizenlab
- @Glacius_ from @teamcymru
- @dutch_osintguy
- @Amaury from @CheckFirstHQ
- @SchiphorstSkip
Thanks to them and to the sponsors of the #OsintVillage @ShadowDragonIO and @epieos.
The full program can be found here : lehack.org/tracks/osint/
You can also get your tickets here (some talks will not be published online): helloasso.com/associations/h…
I look forward to welcoming you and having a drink with you.
I hope you will enjoy the program and the event.
The @asso_hzv team and I have put all our love into organizing this event, and we'll do our utmost not to disappoint you.
#HackThePlanet / #OsintThePlanet
James Atack | @jamesatack.com retweeted
I just cancelled my Adobe licence after many years as a customer.
The new terms give Adobe "worldwide royalty-free licence to reproduce, display, distribute" or do whatever they want with any content I produce using their software.
This is beyond insane. No creator in their right mind can accept this .
You pay a huge monthly subscription and they want to own your content and your entire business as well.
Going to have to learn some new tools.
James Atack | @jamesatack.com retweeted
This latest #CheckPoint #cve #cve_2024_24919 is something.
Many banks, governments, public institutions are found vulnerable... many high profile companies too.
Numbers are coming.
#ASM #EASM #infosecurity
James Atack | @jamesatack.com retweeted
Announcement: We're currently experiencing an issue with DuckDuckGo Search that might prevent you from getting results. Thanks for your patience while we get our ducks in a row…
James Atack | @jamesatack.com retweeted
What do we do tomorrow?
Patching my Ivanti VPN like every other days of the week
ivanti.com/blog/security-upd…
James Atack | @jamesatack.com retweeted
A new year, a new Dissect release! Dissect v3.12 📷
Highlights (1/2):
- FortiOS platform is now supported as a Linux sub-OS
- Improved parsing of complex ACLs in NTFS
- Sparse indirect blocks in ExtFS now work properly
- Windows and Linux PuTTY artefact parsing plugin added




























