Matthew Cashew
@cashewsec.bsky.social
Engineer, Hacker, Pentester, Gamer, and constantly curious.
The Tor Project X account has been compromised.
Another suspicious campaign. I wonder what made them start around December instead of waiting for the new year? They could have been the first campaign of 2025. arcticwolf.com/resources/bl...
Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on Fortinet FortiGate Firewalls - Arctic Wolf
Arctic Wolf Labs identified a campaign targeting Fortinet FortiGate firewall devices with exposed management interfaces.
arcticwolf.com
I should do some research and figure out what departments haven't been hacked. www.reuters.com/technology/c...
US Treasury's workstations breached in cyberattack by China, AFP reports
A Chinese state-sponsored actor was behind a cyberattack on the U.S. Treasury Department earlier this month, resulting in unauthorized access to some of its workstations, Agence France-Presse reported on Monday, citing a letter to Congress.
reuters.com
So at some point things will slow down and I can catch my breath, right?
Excellent research by Zakhar Fedotkin! portswigger.net/research/byp...
Bypassing WAFs with the phantom $Version cookie
HTTP cookies often control critical website features, but their long and convoluted history exposes them to parser discrepancy vulnerabilities. In this post, I'll explore some dangerous, lesser-known
portswigger.net
This story is such a wild ride. It's a shame a US soldier was likely involved. It's also a shame his username was "Buttholio" and he played Tarkav. #hacker #cyber #usarmy krebsonsecurity.com/2024/11/hack...
Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kibe...
krebsonsecurity.com
This holiday is fun but it is definitely in the running for most BS American holiday. I got to enjoy some great food though, so I can't complain!
OSEP material is dense! I thought I'd knock it out quick, but I was so so wrong.
Here's a very old husky enjoying early afternoon scritches.
Somehow, I can come away from scrolling on bsky on a Sunday afternoon without feeling crushed by the weight of humans' hate and ignorance. It's nice.
So, did Matt Gaetz just lose his entire job by resigning from both the House and his AG nomination? It sounds too good to be true. Well, other than that allowing him to dodge the investigation.
bsky is growing fast and that's awesome! It also creates a clear opportunity for operators in the cyber domain. Many, new, legitimate accounts are being created. This gives bad actors the opportunity to create sock puppets that are more immediately usable. Stay vigilant about the info you take in!
As a pentester and security engineer, I found this talk to be very inspiring. I haven't been able to use the tool yet, but you can bet I will soon! youtu.be/bCNnloBaw_U?...
The Dangers of Building a Recursive Internet Scanner by Joel Moore | BSides CHS 2024
YouTube video by BSidesCHS
youtu.be
I've been playing Vintage Story lately. It's so refreshing to see a Minecraft-like project that is built from the ground up. I haven't been able to get into Minecraft in many years, but I'm loving Vintage Story! #games #vintagestory