jono_infosec @jono_infosec

Information Security Professional #Security+ #GSEC #GWAPT #GCFE #GCIH #GCCC #GICSP #CCSK Prague, Czech Republic Joined April 2010

Tweets

226
Followers

22
Following

390
Likes

25

Jake Williams @MalwareJake

7 years ago

Another vendor vulnerability note: Don't say "this vulnerability was never exploited in the wild." You can't possibly know this. You can say "there's no evidence it was exploited." That's okay, but it's also very different. Don't confuse the two.

5 40 178 0 0

Robert Graham @ErrataRob

7 years ago

Sometimes it's easy to believe we haven't made progress in cybersecurity. We have. For example, this used to be a warning in Internet Explorer:

23 440 1K 0 0

Download Image

jono_infosec @jono_infosec

7 years ago

This sounds promising, but let's see how it plays out...

0 0 0 0 0

Rachel Tobac @RachelTobac

7 years ago

Here’s an example of getting around 2FA with social engineering. 😬🤖 Dang. Thanks @alanchavezv for sharing this.

115 3K 5K 0 87

Download Image

Parker Higgins @xor

8 years ago

You know what was a really great Congressional hearing, was the L0pht hackers talking about computer security in 1998 washingtonpost.com/sf/business/20…

12 86 296 0 6

Download Image

The Hacker News @TheHackersNews

8 years ago

Warning—Just opening an email in Microsoft Outlook can give away your Windows password to hackers, without requiring additional interaction thehackernews.com/2018/04/outloo… This week, MS issued an incomplete fix for #Outlook flaw (CVE-2018-0950)—almost 18 months after the initial report

14 618 489 0 19

Download Image

bugcrowd @Bugcrowd

8 years ago

A new study indicates that 95% of the email domains managed by the Executive Office of the President could be spoofed and potentially used in phishing attacks: cyberscoop.com/white-house-dm… | @CyberScoopNews

0 3 2 0 1

Mikael Thalen @MikaelThalen

8 years ago

Vigilante hackers have left American flags and messages on machines in Russia and Iran motherboard.vice.com/en_us/article/…

0 10 5 0 0

Download Image

Troy Hunt @troyhunt

8 years ago

Remember that guy who was trying to shake me down for a couple of hundred bucks to do a penetration test because my blog had "CSRF / XSS / SQL injection"? Here's how he identified my site and how ultimately, it didn't work out too well for him: troyhunt.com/a-scammer-trie…

18 138 364 0 5

Jake Williams @MalwareJake

8 years ago

If you work in #DFIR and haven't read this research on SSD imaging, you totally should. Hashes for data acquisition may differ depending on whether the drive is imaged while mounted or unmounted. HT:@HECFBlog @JimPersson3 articles.forensicfocus.com/2018/03/13/for…

5 89 131 0 12

Download Image

𝕁𝕠𝕤𝕙 𝔾𝕣𝕒𝕙𝕒𝕞 ℹ️ @delitescere

8 years ago

A handy little script I wrote to check just how much the password you're about to use sucks. gist.github.com/delitescere/eb… Thanks to the awesome work by @troyhunt. It uses his superior k-Anonymity API so you don't have to worry about him working it out either. #haveibeenpwned

3 8 22 0 3

Huntress @HuntressLabs

8 years ago

Free implant called PowerShell-RAT exfils data through Gmail attachments. Boasts “code is fully undetectable by antivirus software”. Uses three statically named Scheduled Tasks that launch .VBS #footholds kitploit.com/2018/03/powers…