Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
Joined July 2020
- Tweets9.8K
- Following2.9K
- Followers37.1K
- Likes6.9K
CyberKnow retweeted
who remember HAFNIUM?
who remembers MSBLASTER?
who remembers WANNACRY?
who remembers LOG4SHELL?
who remembers {INSERT SOME OTHER NAME}
guys: this is the job! in 10 years time there will be more names to add to the list, and then in 10 years after that... even more.
This is the game!
CyberKnow retweeted
If you’re taking cybersecurity advice from someone who posts like this, I have bad news for you: you’re definitely going to get hacked.
Is infosec Twitter back? I mean top tier folks like @UK_Daniel_Card
Never left but it looks like its more active atm.
CyberKnow retweeted
Current information I have on php2Shell:
- The RCEs requires the attacker to obtain memory addresses which are typically protected by ASLR.
- I suspect the original author (lcfr_hax) likely has a reliable exploit which leads to stable code execution.
- Most of the PoCs being posted are completely non-functional AI slop.
- There is at least 1 working non-slop exploit being passed around, but it's reliant on bruteforcing for ASLR bypass, so not particularly impactful.
- Rumor of ITW exploitation are patchy. There are attempts being seen using the non-functional leaked RCE, or variants that are config / system specific.
- Some rumors point towards a known-working exploit being used by threat actors (I've personally confirmed this specific exploit works, but the ASLR bypass technique is unreliable at best and massively limits the potential impact).
- I'd expect heavy ITW exploitation in the next few weeks based on how many people are looking at this. Though, success rates will vary heavily based on the specific exploit chain.
My first thought about this pre-announcement activity is: Is it increased or above normal activity? No doubt php gets scanned often and the fact is makes up 70% of websites means its probably targeted all the time. So was it usual or unusual?
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
CyberKnow retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
If can only help having @MalwareTechBlog contributing on here again. Saves most people from screnshoting his linkedin to post.
Since my posts have been shared here ~30 times in the past few weeks, it seems like I'm going to be contributing to Space Karen's Ketamine Extravaganza whether I like it or not.
I don't really intend to be active here, but I'll post some of the more important cybersecurity-focused stuff, since it gets screenshotted anyway. That way, people don't have to read post a week late and out of context.
AI has a bit of a ways to go to be as transformation as Social Media or the smart phone
The difference is that they were able to integrate and then evolve without the ridiculous FUD attached
AI's hype might be its biggest undoing, which is a shame for a handy tool
Would we have this level of AI FUD if Steve Jobs was still alive?
Feel like he might have kept folks in check.
@UK_Daniel_Card
CyberKnow retweeted
See this dude gets it! how come so many cyber grifters don't??? oh wait..... the first part... grifters! that's the reason!
Ben Affleck says AI is simply matrix multiplication, linear algebra and floating point calculations, and however convincingly it sounds like a person, it has nothing to do with thought, humanity or feeling
“Nor do I believe, and I think it’s important to draw the distinction between what AI does, which is simply predict the next token or the next word in a sentence, then add that word on, run it back to the machine, do a lot of computation and pick the next word."
"That is a very different thing than sentience or thought. And I think we need to be really clear about that because it can be convincingly, in an illusory way, sound like thought or like a person."
"But let’s be real clear. This is matrix multiplication. This is linear algebra. These are floating point calculations. It has nothing to do with thought, humanity, or feeling.”
Physical implications of cyber attacks go after aspects of society that cause the most disruption to targeted societies.
This screams hacktivists with hybrid warfare intent.
However, at this time noone is claiming it. One to watch.
🇫🇷 Hackers just turned supermarket FREEZERS into OVENS across France, and the damage is absolutely INSANE.
Hundreds of stores were hit after attackers remotely forced refrigeration systems to heat up to 122°F (50°C), in some cases for SIX HOURS.
Entire stocks of fresh and frozen food had to be THROWN AWAY, and authorities even reported FIRES linked to the attack.
Intermarché, Carrefour, and Coopérative U were among the chains affected, while investigators traced a potential vulnerability to outdated refrigeration software.
It's so over ☠️
Writer: Sol
CyberKnow retweeted
🚨 Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group – the group believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor.
This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly.
This arrest demonstrates the strength and reach of our efforts to protect Americans from cybercrime.
We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate.