Nart Villeneuve retweeted
NEW @citizenlab report -- extensive analysis of censored search results in 8 #China accessible search platforms.
#MicrosoftBing's "political censorship rules" found to be "broader and affected more search results than Baidu."
Authors: Jeffrey Knockel, Ken Kato & @emiledirks
🚨NEW REPORT: MISSING LINKS ⛓️. Are you unable to get answers to your online searches? Multiple levels of #censorship affects eight #China accessible search platforms including #MicrosoftBing blocking all or some results. citizenlab.ca/2023/04/a-comp…
Nart Villeneuve retweeted
Over 1 million people have joined Mastodon since October 27. Between that and those who returned to their old accounts, the number of active users has risen to over 1.6 million today, which, for context, is over 3 times what it was just about two weeks ago!
Nart Villeneuve retweeted
It must've seemed like a clever PR idea. But Loblaws' "price freeze" on no-name products has turned out to be an own goal. My take for @TorontoStar @StarBusiness today: thestar.com/business/opinion…. Plus: the surge in corporate profits amidst inflation is a an economy-wide problem. /2
Two interesting tweets in my feed that intersect today: teapawt.org/xme/status/15826623772… and teapawt.org/bmcder02/status/158248….
My first blog with @MicrosoftDART!
This is a post incident report, talking about some of the TTPs we saw in a recent ransomware incident. This really emphasizes the importance of doing a post ransomware IR.
microsoft.com/security/blog/…
In this excellent #CTIS2022 presentation @xme quoted youtube.com/watch?v=c3Ydb-xk… , ~50% of ransomware cases they analyzed began with use of valid RDP/VPN creds, but ~27% came from maldocs (#QAKBOT etc.). They also had one case of #RACCOON. The valid credentials come from somewhere!
But IR teams often run into issues trying to determine the initial access vector as @bmcder02 noted -- data retention limits and re-imaging compromised hosts etc. (microsoft.com/security/blog/…).
Nart Villeneuve retweeted
I'm incredibly proud of @selenalarson and @dansomware's report on COVID social engineering. Telling threat stories over long periods of time is not our strength, they tackled this with grace and integrity. proofpoint.com/us/blog/threa…
Nart Villeneuve retweeted
They forgot "Ghostnet" -- the OG threat actor name, and conceived by a non-industry group :)
Nart Villeneuve retweeted
As we begin the new legislative session at Queen’s Park, I have one question for Doug Ford: What does ‘getting it done’ mean to you?
This was your commitment to Ontarians during the spring campaign. But if this summer is an example, ppl are in for a hard 4 years. 1/ #onpoli
Nart Villeneuve retweeted
Great to see @ShaneHuntley testify before @HouseIntel today. I'm really proud of the work @Google TAG has been doing to combat spyware & speak out against the industry.
Adaptation of Shane's remarks here:blog.google/threat-analysis-…
Nart Villeneuve retweeted
Are you an expert in cyber crime? Do you enjoy hunting international criminal syndicates? Can you spot a FIN?
Apply here! jobs.smartrecruiters.com/Man…
Nart Villeneuve retweeted
NEW REPORT: Discovery of an extensive espionage campaign in Thailand 🇹🇭 involving the abuse of NSO Group’s #Pegasus spyware
In collaboration with @iLawFX and @DigitalReachSEA
citizenlab.ca/2022/07/geckos…
Nart Villeneuve retweeted
New article: "The real reason why malware detection is hard—and underestimated"
If you think an AI with a 98% malware detection rate and 1% false positive rate is splendid, this might change your mind.
#GDATATechblog @GDATA
gdatasoftware.com/blog/2022/…
Nart Villeneuve retweeted
NEW: @apple announces #LockdownMode, a major change to iPhone security that promises to help high risk users + other actions to hold the mercenary spyware industry to account nr.apple.com/d2I3Q1s4s0
My thread w context & details 👇
Nart Villeneuve retweeted
Incredible reporting on the Indian hack-for-hire ecosystem by @Bing_Chris & @razhael.
reuters.com/investigates/spe…
@Google TAG & @ShaneHuntley helped vet the authenticity of @Reuters data & provided additional context from our own efforts to track & counter these groups. Must read👇
