Larry W. Cashdollar
@larry0.bsky.social
Principal Security researcher at Akamai. Exploit Coder. Research covered by Slashdot, ZDNet, arstechnica, MSN + more also a Mitre CVE CNA with 200+ CVEs
Also: Cole Allen: I was targeting the rapist, pedophile, and traitor. Donald Trump: Couldn't be me! I'm not a rapist or pedophile! bsky.app/profile/atru...
Aaron Rupar@atrupar.com · 4mo agoTRUMP: I'm not a rapist. I didn't rape anybody O'DONNELL: Oh, you think he was referring to you?
Shipped a copy of this book that contains an entry from me to the library of congress. They accepted it as a donation for inclusion in their collection.
Ok, you can stop texting me, I saw the Ring ad. Troubling things about it 🧵: -The long awaited (much warned about) intro of “AI” recognition. It starts w/ searching for a “brown dog” but means the tech is there for lisence plate reading, face recognition, searching for suspects by description, etc
-Chat & Ask AI leaks chatbot messages -Nobel Committee investigates hack -Data leak at the Ttareungyi bike-sharing service -Comcast agrees to $117.5m settlement over 2023 breach -Aperture Finance and SwapNet get hacked -NVIDIA RTX comes to Linux -Tor Browser gets vandalized -US investigates WhatsApp
I've been looking at legacy IOT camera firmware checking for command injection vulnerabilities -> www.akamai.com/blog/securit...
akamai.com
At 50 years old I put my foot on a skate board after not touching one for 20+ years and it felt like peering into death's face.
Science is under attack! 🚨 Join Bill Nye and thousands of science supporters in fighting back against this anti-science administration. Your voice matters! ➡️ act.ucsusa.org/41Eqmxm
Honored to be named an Industry Visionary in the 2025 #CyberScoop50. Special respect to Amit Yoran, who was posthumously awarded Lifetime Achievement. Amit’s vision & integrity shaped our industry. Many of us followed his lead, myself included. His example endures. cyberscoop.com/cyberscoop-5...
CyberScoop 50 reveals 2025 winners; honors Amit Yoran with lifetime award
The cybersecurity world stands immeasurably stronger because of the vision, expertise, and leadership of Amit Yoran. Throughout his distinguished career, Amit fundamentally shaped the field of cyberse...
cyberscoop.com
Neat phishing campaign sending out docusign requests redirecting to a fake apple icloud login page
@micahflee.com gets the goods. If this doesn’t tell you how unserious the current administration is about Security then I don’t know what will. micahflee.com/doge-bro-kyl...
DOGE bro Kyle Schutt's computer infected by malware, credentials found in stealer logs
Kyle Schutt is a 37 year old "DOGE software engineer," according to ProPublica. In February, Drop Site News reported that he gained access to FEMA's "core financial management system." His computer wa...
micahflee.com
How I Rob Banks: A Journey into the World of Ethical Hacking with Freakyclown podcasters.spotify.c...
How I Rob Banks: A Journey into the World of Ethical Hacking with Freakyclown by Phillip Wylie Show
About The Guest: FC Barker aka Freakyclown is an ethical hacker and professional cyber criminalist with over three decades of experience. He is the co-founder of Sygenta, a company that specializes in ethical hacking and penetration testing. Freakyclown has a background in offensive cyber research and has worked for major defense firms. Summary:Freakyclown shares his experience as an ethical hacker and professional cyber criminalist. He discusses the type of pen testing he does, which goes beyond the typical cookie-cutter approach. He emphasizes the importance of manual work and understanding the foundations of hacking. Freakyclown also talks about the evolution of hacking over the years and the changes he has witnessed. He provides advice for those interested in getting into offensive security, including participating in CTFs and bug bounty programs. Freakyclown also talks about his new book, "How I Rob Banks," which shares anecdotes and tips from his career in physical pen testing. Key Takeaways: Ethical hacking goes beyond automated tools and requires manual work and understanding of the foundations. The barrier to entry in offensive security has lowered, but the threat landscape has expanded. Participating in CTFs and bug bounty programs is a great way to gain skills and experience in offensive security. Freakyclown's book, "How I Rob Banks," provides entertaining anecdotes and tips from his career in physical pen testing. Freakyclown resources: https://twitter.com/_Freakyclown_ https://www.linkedin.com/in/freakyclown/ https://www.cygenta.co.uk/ How I Rob Banks book: https://www.wiley.com/en-us/How+I+Rob+Banks%3A+And+Other+Such+Places-p-9781119911517
podcasters.spotify.com
I’m sorry. You can’t conduct “peace talks” with Russia over its invasion of Ukraine without Ukraine at the table.
Now that RFK Jr. is confirmed as HHS Secretary, and with the bird flu moving toward becoming a pandemic, we can all look forward to this:
a man in a helmet is saying `` bring out your dead '' while standing in the rain .
ALT: a man in a helmet is saying `` bring out your dead '' while standing in the rain .
media.tenor.com
I personally will continue to use "Gulf of Mexico" because our president is a wrathful felonious nincompoop with the intellect of paramecium and I do not consent to his cartographic buffoonery
Encyclopaedia Britannica@britannica.com · 2y agoEncyclopædia Britannica will continue to use ‘Gulf of Mexico’ for a few reasons: -We serve an international audience, a majority of which is outside the U.S. -The Gulf of Mexico is an international body of water, and the U.S.’s authority to rename it is ambiguous. 🧵⬇️
Encyclopædia Britannica will continue to use ‘Gulf of Mexico’ for a few reasons: -We serve an international audience, a majority of which is outside the U.S. -The Gulf of Mexico is an international body of water, and the U.S.’s authority to rename it is ambiguous. 🧵⬇️
Analyzing ELF/Sshdinjector (IoT bot) with r2ai. Really helpful and time save to use AI (with r2ai) for analysis *but* use it with a non-AI decompiler side by side: 1. To direct the AI 2. To spot more easily hallucinations or extrapolations. www.fortinet.com/blog/threat-... #r2ai #IoT #botnet #AI
Analyzing ELF/Sshdinjector.A!tr with a Human and Artificial Analyst | FortiGuard Labs
FortiGuard Labs reverse engineers a malware’s binaries to look into what the malware is actually doing.…
fortinet.com
Happy Black History Month, and yeah, we're still doing that.
a drawing of a fist with a purple bracelet around it
ALT: a drawing of a fist with a purple bracelet around it
media.tenor.com
My co-worker noticed this in our honeypot logs and tagged me into investigate it with him -> www.akamai.com/blog/securit...
akamai.com
Digiever devices are actively being expolited in the wild a blog post by the Akamai SIRT -> www.akamai.com/blog/securit...
akamai.com
A book that I wrote a chapter for, '97 Things Every Application Security Professional Should Know: Collective Wisdom from the Experts', is available on Kindle now! Woohoo! www.amazon.com/Thing...
