This tweet has been living in my head rent free for weeks (days?) now. This year has been rough. A lot of people who have been holding it together are really struggling with the end of the year. I see you all and I’m right there with you 🖤
Noticing a strong uptick in people who have been holding it together for 9 months now just bursting into tears lately. I guess you can only sublimate the stress and weird isolation for so long.
Be well.
I mapped active Cobalt Strike servers in the wild (over 450). Some of them could be legit Red Team Ops. However, the majority probably belongs to APT/Ransomware groups.
docs.google.com/spreadsheets…
cc @cyb3rops
Pouring one out tonight for my fellow step-parents who have stepped up. Your contributions, support, and feelings for our kids are in no way lesser. It’s about love, not biology.
The number of Cellebrite devices that is appropriate for a school to have is exactly the same as the number of police it is appropriate for a school to have: zero.
3000 people per day are dying. But, hey, that’s cool. We don’t need to take any exceptional measures to bring these numbers down. Business as usual, right?
So out of nowhere, Red Hat has decided to kill off CentOS. At the end of 2021 (instead of 2029).
CentOS 8 is the end. Might want to start migrating everything you have off of it.
Good luck I guess. This is really shitty of @RedHat and @IBM to do.
hackaday.com/2020/12/09/cent…
Rarely do I see people who actually do incident response or operational information security work dunking on organizations for getting breached. Perhaps they understand something the bandwagoners do not.
Got new info tonight.
The judge who signed the search order of my house was appointed by Governor Desantis and sworn in less than a month before he signed that warrant. In civil court. He's not even a criminal court judge. It was one of his first actions as judge.
[BLOG] Kerberos Bronze Bit Attack
blog.netspi.com/cve-2020-170…
This is some great work by Jake Karnes that details how to bypass restrictions related to the “sensitive and cannot be delegated” setting (among other things). Worth the read!