13 Followers
56 Following
309 Posts
infosec leader, learning more than posting
Time to put some miles under the wheels again.
Happy pride!!
Love is love people.
MSRC; Tell The Whole Story Please

Every so often, it seems that Microsoft Security Response Center (MSRC) likes to stick their proverbial foot in their mouth on the topic of vulnerability disclosure. The root issue is that collecti…

Rants of a deranged squirrel.

π’π’π§πœπž π–π‘πžπ§ 𝐃𝐒𝐝 𝐀𝐬𝐀𝐒𝐧𝐠 𝐟𝐨𝐫 π„π―π’ππžπ§πœπž 𝐁𝐞𝐜𝐨𝐦𝐞 β€œπƒπžπŸπžπ§ππ’π§π  π‚π«π’π¦π’π§πšπ₯𝐬”?

Dissent responded harshly to these accusations, firmly rejecting any insinuation of collusion with criminal groups. The journalist pointed out that every time she asks for evidence to support certain claims, she is labeled β€œcriminal-friendly” or accused of being a mouthpiece for cybercriminals, simply for refusing to uncritically accept statements lacking public verification.

https://www.suspectfile.com/since-when-did-asking-for-evidence-become-defending-criminals/

#Canvas #Data_Breach #Instructure #Navigate360 #Ransom #ShinyHunters

Exclusive: Fast16 malware has raised questions about what it was designed to do. Researchers at Symantec finally confirm it was subverting software used to simulate nuclear weapons explosions. Nuclear experts also tell me Iran was the likely target and explain how it impacted nuclear weapons tests. Fast16 wasn't aimed at sabotaging nuclear weapons themselves, but was only designed to alter data being fed to engineers from software used to simulate nuclear explosions tests. The goal was to trick engineers into believing their tests were failing to create confusion and slow down weapons program. Fast16 and Stuxnet were similar in that they both fed false data to engineers. But Stuxnet also physically altered centrifuges while tricking engineers into believing the devices were fine. New analysis from me also shows the two codes were contemporaneous, not separated by years.

Here's my story, which contains a link to a timeline showing how they were being developed around the same time, likely as part of a multi-pronged operation to slow down Iran's nuclear program.

https://www.zetter-zeroday.com/experts-confirm-the-fast16-malware-was-sabotaging-nuclear-weapons-tests-likely-in-iran/

Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran

Fast16 didn't predate Stuxnet but was contemporaneous with it. It also wasn't aimed at altering nuclear weapons but was simply feeding false data to engineers about the nuclear detonation tests they were conducting, in order to trick them into believing the tests were failing.

ZERO DAY
Canvas is hacked and stressing out 230+ million students, teachers and staff during finals. What does this mean and how do we stay safe? What are the next steps for the 8,800 affected schools during finals.
Answered below in my video:

The mystery around a cyberattack against Venezuela's state-run oil company last December deepens with the discovery this week of a "highly destructive" wiper that may have been used in the attack. Previous reports had indicated that the December attack was a ransomware incident. But the wipr found this week was compiled last September, and hard-coded into it is the domain for PetrΓ³leos de Venezuela (PDVSA) , the state-run oil company. The hard-coded domain means the attackers had designed their precision weapon to only destroy data on the oil company's systems, not on any other system outside the company's domain. My story is below. Please consider becoming a paid subscriber if you like my work.

https://www.zetter-zeroday.com/hwiper-targeting-venezuelas-state-oil-company-discovered/

Mystery Around Venezuelan Cyberattack Deepens, with New Discovery of "Highly Destructive" Wiper

The mystery around a cyberattack that struck Venezuela's state-owned oil company in December is growing, following an announcement by researchers this week that they had discovered a "highly destructive" wiper program that appears to have been designed to target the oil company and may have been used in the December

ZERO DAY

I launched my tech newsletter last week.

After 10+ years covering startups and tech in Europe, I wanted to build something more focused: a smart briefing for people who want to understand what’s really happening in tech, beyond the headlines.

πŸ‘‰ https://hypertext.fyi/anthropic-the-european-unicorn-ripper/

Anthropic, the European unicorn ripper?

Hi everyone, I hope you enjoy this week’s edition of Hypertext. Feel free to share it with a friend, it really helps πŸ’Œ Sign up here. The phrase of the week is clearly a variation of β€œthe new Claude Mythos AI model is so good that it’s too dangerous

Hypertext
Android's new feature "adjust how bright you want your flashlight to be, every time, instead of just on/off": NO THANK YOU. I don't want to press extra buttons for no reason thanks.
Great session by @wendynather and Bob Lord on lessons that can be learned from near misses. Plus I got to say hello in person.