netbroom
@netbroom.bsky.social
Founder of @pulsedive.com. Creator of threatfeeds.io.
A huge thank you to everyone who attended Jeremy's"Droid Rage" talk! We had a great turnout and some fantastic discussions around Android security, penetration testing, and mobile application vulnerabilities. Follow up event is on July 9th! Stay tuned! #DEFCON908 #Cybersecurity #Infosec
Hey Everyone! On Thursday Feb. 19th we'll be hosting another talk at the Westfield Memorial Library! This time we've got Dimi talking about modding a motorcycle with an Arduino to manage fuel injection! We hope to see you there! #DC908 #Cybersecurity #arduino #motorcycle
Join us for an engaging panel on Vulnerability Disclosure! We will be selecting panelists at the event. Panelist or not, feel free to bring your own questions to discuss! Westfield Memorial Library on Jan 22nd at 7pm! #cybersecurity #DEFCON908
Check us out on Oct. 23rd for a group talk on cybersecurity topics! Everything ranging from current events, different security realms or just ranting about the state of cybersecurity today! Link in bio for more details!
details on NPM supply chain compromise: - targets crypto - client-side (executes in browser) - pushed to repos sept 8 - NPM account compromised through phishing email with domain npmjs[.]help www.aikido.dev/blog/npm-deb...
npm debug and chalk packages compromised
The popular packages debug and chalk on npm have been compromised with malicious code
aikido.dev
Josh Junon@bad-at-computer.bsky.social · 11mo agoYep, I've been pwned. 2FA reset email, looked very legitimate. Only NPM affected. I've sent an email off to @npmjs.bsky.social to see if I can get access again. Sorry everyone, I should have paid more attention. Not like me; have had a stressful week. Will work to get this cleaned up.
X509 extensions be like 124.5.32.5.6.3.46.42.5312.4.2.564.643623.42.1.1.3.1.2.1.1
Seen 3 #defcon33 badges fall apart within an hour of getting them 😬
Browser extensions are commonly used, but present a significant security risk as a growing threat vector. Our newest blog looks at examples from January 2025, including Cyberhaven and GraphQL Network Inspector, to discuss how threat actors compromise extensions. blog.pulsedive.com/compromised-...
Compromised Browser Extensions - Jan 2025 | Pulsedive Blog
Learn how threat actors leverage browser extensions as an attack vector, including examples for Cyberhaven and GraphQL Network Inspector.
blog.pulsedive.com
Our recap of 2024: - Key exploited vulnerabilities - Top malware - Outages - Law enforcement actions - Looking ahead to 2025 Read: blog.pulsedive.com/2024-in-revi...
Pulsedive Blog | 2024 In Review
A rewind of the year across the threat landscape and at Pulsedive.
blog.pulsedive.com
A French media company is demanding Quad9 block access to piracy sites, and French courts agree. This follows an identical case culminating in favor of Quad9 brought on by Sony pictures in Germany. www.quad9.net/news/press/q...
Quad9 Faces New DNS Censorship Legal Challenge in France from Canal+ | Quad9
After a long but successful result in the German case brought by SONY Music in December 2023, Quad9 is now facing new legal challenges in France. Quad9 has been presented with demands by Canal+, a Fre...
quad9.net
With 3 weeks left in 2024, we wanted to thank you for all you do in the security community. So we're hosting a year-end sticker giveaway through Dec. 21- no purchase necessary. To participate: - Like this post 👍 - Fill out: forms.gle/nxLQQxNtRahS...
just pushed an update to @pulsedive.com, should improve scan performance and Analyze bulk scan hangs.
Switched to tabby.sh from mremoteng today, loving it so far 😎
Tabby - a terminal for a more modern age
Tabby is a free and open source SSH, local and Telnet terminal with everything you'll ever need.
tabby.sh
@pulsedive.com's Black Friday deal is live! 30% OFF Pulsedive Pro for 1 year. Details: blog.pulsedive.com/black-friday...
Pulsedive Black Friday | Get 30% off Pro Subscriptions
This Black Friday, get 30% off Pulsedive Pro to boost your threat intelligence research and analysis flows.
blog.pulsedive.com
Top stressful life events include: - Death of a loved one - Divorce - Major illness or injury - Building IKEA furniture
my cats basically vote on when to eat now. at least 60% of them must be meowing in the kitchen.
absolutely wild searching for a laptop today. each major manufacturer has 5-10 lines of laptops, each line has 5-10 models with different keyboards and port configs, and each model has 5-10 configurations with different processors and options. i just want 14' w/ dedicated Home/End keys...
if you want to encrypt + compress files, always compress first. encryption introduces entropy making compression less effective. some file formats like JPEG are already compressed, so additional compression won't have much of an impact.
An "ally" is not something you call yourself. It is something other people call you.
