crows3c @crows3c

One of the inhabitants of the earth. Passion for IT security. Mastodon: @[email protected] Galactic Sector ZZ9 Plural Z Alpha Joined July 2018

Tweets

747
Followers

20
Following

176
Likes

71

Shir @shirtamari

3 years ago

Vulnerability only affects SMB servers using the experimental ksmbd module (Intro'd in Linux 5.15). If your SMB server uses Samba, you're safe. If it uses ksmbd, an attacker with read access could leak your server's memory (similar to Heartbleed). zerodayinitiative.com/advisories/ZDI…

4 62 201 48K 24

crows3c @crows3c

3 years ago

All I want want for Christmas is no coordinated public release of a unauthenticated #RCE #vulnerability impacting a large amount of systems. But here we go again: zerodayinitiative.com/advisories/ZDI… #linux CVSS score 10.0 #ZDI-22-1690

0 0 1 147 0

crows3c @crows3c

3 years ago

Created my #Mastodon. Find me at infosec.exchange/@crows3c #infosec

0 0 0 0 0

Lesley Carhart @hacks4pancakes

3 years ago

Infosec Mastodon Lists! tisiphone.net/2022/11/10/inf…

8 47 258 0 92

Censys @censysio

3 years ago

⚠️ Censys is tracking a critical vulnerability that has been found in applications using OpenSSL version 3.0.0 and above. Learn more about the potential impact and how to identify vulnerable hosts in our latest blog: hubs.li/Q01r7mD_0 #OpenSSL

0 4 9 0 0

/r/netsec @_r_netsec

3 years ago

List of (un)affected software OpenSSL vulnerability (still being updated) github.com/NCSC-NL/OpenSS…

1 8 17 0 5

Luke Tucker @luketucker

3 years ago

The measure of a security team is what they say when you ask them: What’s currently facing the internet? How many total systems do you have? Where is your data? How many vendors do you have? Which vendors have what kind of your data?

1 1 13 0 1

James Forshaw @tiraniddo

3 years ago

I guess this is why MSRC still don't consider Admin -> Kernel a security boundary.... I guess they prioritized shipped a new shittier UI and forcing TPM requirements over basic security features they've been crowing about for years.

6 21 93 0 11

Justin Elze @HackingLZ

3 years ago

@SubTee next time we discuss red teams vs real world 😂

5 14 78 0 10

Download Image

crows3c @crows3c

3 years ago

Asking how to get int #InfoSec is the same thing as asking how to work with cars. It is not specific enough. Do you want to design, build, ship, sell, drive, repair, or scrap cars? If you know what you want it becomes easier to recommend a learning path.

0 0 0 0 0

Dr. Nestori Syynimaa @DrAzureAD

3 years ago

Yet another reason to block #AzureAD directory sync soft match. And while you're doing that, block the takeover through hard match too. You DO NOT need those features for anything!

Semperis @SemperisTech

3 years ago

Yet another reason to block #AzureAD directory sync soft match. And while you're doing that, block the takeover through hard match too. You DO NOT need those features for anything! https://t.co/8Foa1Tu4yA

0 77 168 0 59

8 122 393 0 163

Download Image

Florian Roth ⚡️ @cyb3rops

3 years ago

The typical "100% log collection coverage" I've reviewed in my life consisted of OS level logs from 90% of the systems 😛, some service logs and rarely an application log

19 132 798 0 88

Download Image

Mark Simos @MarkSimos

3 years ago

Working on a patching strategy visual - whaddya think?

1 5 15 0 3

Download Image

Wietze @Wietze

3 years ago

Many applications appear to rely on Environment Variables such as %SYSTEMROOT% to load DLLs from protected locations. By changing these variables on process level, it is possible to let a legitimate program load arbitrary DLLs. Full blog post here 👉 wietzebeukema.nl/blog/save-the-…

4 282 777 0 195

Download Image

Aura @SecurityAura

3 years ago

@rj_chap @CD_R0M_ @smellyfeetuhave @IcsNick @jamieantisocial @SwiftOnSecurity It looks stupid, but whenever I give small workshops on MDE, I tell clients to export from TVM a list of all installed software like... once a month and review them. They'll discover how many random software users installs and spot the random AnyDesk, Teamviewer, Tor, etc.

3 4 25 0 5

Nick H @nickh_c137

3 years ago

Intune Australian Cyber Security Centre's (ACSC) Windows Hardening Guidelines github.com/microsoft/Intu… #MSIntune

2 81 281 0 85

Alex Verboon @alexverboon

3 years ago

I have started working on the Azure Threat Research Matrix KQL queries github.com/alexverboon/Az… #kql

1 14 45 0 11

John Wiseman @lemonodor

3 years ago

Finally, the only daily, global, free map of GPS interference has officially launched: gpsjam.org Watch jamming around conflict zones develop over time. Wonder who's jamming GPS all around Moscow. Like all the best maps, it raises more questions than it answers!