Favorite tweets

While working on #VulkanFiles, I received a tip: an interesting file had been dropped on Virustotal. It turned out to be the master’s thesis by Evgenii Serebriakov, the person who’s heading infamous Sandworm team, part of Russia's military agency GRU https://t.co/WRuvbbIjHy

— hakan (@hatr) Jun 27, 2023

from Twitter https://twitter.com/hatr

June 27, 2023 at 07:25AM
via IFTTT

While working on #VulkanFiles, I received a tip: an interesting file had been dropped on Virustotal. It turned out to be the master’s thesis by Evgenii Serebriakov, the person who’s heading infamous Sandworm team, part of Russia's military agency GRU https://t.co/WRuvbbIjHy

hatr

https://twitter.com/hatr/status/1673653667734380546

https://t.co/WRuvbbIjHy

Favorite tweets

Here I’m using an angle grinder to sculpt down the paper mache on my lunch breaks. https://t.co/FfQdBJUNh4

— Malware Unicorn (@malwareunicorn) Jun 25, 2023

from Twitter https://twitter.com/malwareunicorn

June 24, 2023 at 11:59PM
via IFTTT

Here I’m using an angle grinder to sculpt down the paper mache on my lunch breaks. https://t.co/FfQdBJUNh4

malwareunicorn

https://twitter.com/malwareunicorn/status/1672816827377000448

https://t.co/FfQdBJUNh4

Favorite tweets

If you haven't seen the Microsoft OAuth vulnerability yet, you need to check it out. #nOAuth Anyone in the world is able to access your apps AS YOU with MS OAuth if the app is configured to use email as the account identifier. Next tweet contains a video demo:

— C.J. May (@lawndoc) Jun 21, 2023

from Twitter https://twitter.com/lawndoc

June 21, 2023 at 12:47PM
via IFTTT

If you haven't seen the Microsoft OAuth vulnerability yet, you need to check it out. #nOAuth Anyone in the world is able to access your apps AS YOU with MS OAuth if the app is configured to use email as the account identifier. Next tweet contains a video demo:

lawndoc

https://twitter.com/lawndoc/status/1671560540290953217

https://ift.tt/HFydnph

Favorite tweets

I found the SALTWATER sample from the #Barracuda ESG report on CVE-2023-2868 on VT The funny thing is: s/o appended a 0x00 so that it got a different hash (not the one from the IOC list) PS: I don't have the orig file. I found out by removing 1 byte. https://t.co/Sz3p4dAyYN https://t.co/blpUQ71bbS

— Florian Roth (@cyb3rops) Jun 8, 2023

from Twitter https://twitter.com/cyb3rops

June 08, 2023 at 04:39AM
via IFTTT

I found the SALTWATER sample from the #Barracuda ESG report on CVE-2023-2868 on VT The funny thing is: s/o appended a 0x00 so that it got a different hash (not the one from the IOC list) PS: I don't have the orig file. I found out by removing 1 byte. https://t.co/Sz3p4dAyYN https://t.co/blpUQ71bbS

cyb3rops

https://twitter.com/cyb3rops/status/1666726658806521857

https://t.co/Sz3p4dAyYN