Announcing JA4+ Network Fingerprinting!
JA4+ is a suite of new fingerprinting methods for multiple protocols, detecting everything from entire c2 frameworks, to session hijacking, to reverse SSH shells.
blog.foxio.io/ja4-network-fi…
Goodnight room
Goodnight moon
Goodnight cow jumping over the moon
Goodnight light
And the high altitude Chinese spy balloon
My fool godson, William, went down to the basement to get a snack four days ago
I told him--every time I tell him--to COUNT the stairs as he goes down. There's only 12. If it goes to 13, come back up and try again. And don't follow the thing singing down there
But does he listen?
the most consequential figures in the tech world are half guys like steve jobs and bill gates and half some guy named ronald who maintains a unix tool called 'runk' which stands for Ronald's Universal Number Kounter and handles all math for every machine on earth
When we say Kyiv is winning the information war, far too often we only mean information spaces we inhabit.
Pulling apart the most obvious RU info op to date (as we did using semantic modelling), very clear it is targeting BRICS, Africa, Asia. Not the West really at all.
The rage & fear you feel after the Russian invasion are ancient parts of your mind preparing - like clockwork - for a world of conflict.
After 10 years of research in the lab & field, it is surreal to feel it unfold in my own mind
A 🧵 on what happens & with what effects (1/16)
🕸️Inside the Ransomware Economy🕸️
Ryuk is the biggest Saas unicorn u've never heard of.
$150M ARR.
3 yrs old.
Maybe it’s taboo to learn business strategy from a cybergang. But the ransomware industry-- from supply chain operations to market microstructures-- is truly genius.
👇
I've been away from the internet this week, but this opinion piece is so bad it's worth saying what's already been said by hundreds of others. Security's job is to reduce risk, and elimination is usually impractical, incredibly expensive, or impossible. (1/n)
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Punishing the *victims* of breaches (who are often randomly targeted) will push defenders to hide flaws and breaches, instead of sharing learning opportunities that would lead to the "renaissance" the author is calling for. (3/n)
@[email protected] retweeted
Since Cisco PSIRT became unresponsive and the published release 4.22 still doesn't mention any of the vulnerabilities, here are 12 PoCs in 1 gist:
gist.github.com/Frycos/8bf5c…
I was a very early Facebook user, long before they opened for public registration. Boy, at the time I never would have guessed that they might be the specific tool used to decimate Democracy, local news, and free reporting around the world.
I’ve commented before that Star Trek’s most prescient prediction was communication via memes in ‘Darmok’. So it was only a matter of time before someone started making these:
Can we put this guy on the 2020 ballot? Is it too late?
Finally a platform to unite us all. Dude wore a tie to make this statement so the city council would know he means business, too. #saucynugs #trash 🤣
URGENT: Patching CVE-2020-5902 and 5903 should not be postponed over the weekend. Remediate immediately.
The BIG-IP Traffic Management User Interface (TMUI) has a Remote Code Execution vulnerability (CVE-2020-5902) in undisclosed pages. F5 recommends upgrading to a fixed software version to fully mitigate this vulnerability, more details here: go.f5.net/dk3nl #BIGIP #AskF5
So I was talking with my mom about #DefundThePolice. And she asked me a question: how could what happened to Rayshard Brooks happen, at this moment, in this uprising? How could police keep...doing this?
So this is what I said.

























