techy
@techy.detectionengineering.net
Creator of Detection Engineering Weekly (https://detectionengineering.net), Sec Research/Intel/Detection @ Datadog
DEW #130 - God-mode Azure vulnerability, Composite Detections & Detection Observability In this post: * 💎 by Dirk-jan Mollema discloses a cross-tenant Azure vulnerability that gives access to any Azure tenant, with detection opportunities to boot! www.detectionengineering.net/p/dew-130-go...
DEW #130 - God-mode Azure vulnerability, Composite Detections & Detection Observability
power overwhelming
detectionengineering.net
I'm starting a new series on Detection Engineering called the Detection Field Manual. I wanted to publish < 10 minute reads on threat detection topics I've built in the field, at conferences and our interviews for candidates at Datadog. Here's issue 1! www.detectionengineering.net/p/detection-...
Detection Engineering Field Manual #1 - What is a Detection Engineer?
Why does Detection Engineering matter to a security org?
detectionengineering.net
I'm so excited to announce that Datadog Security Research is launching a FREE, fully-online, Detection Engineering focused conference called Datadog Detect! bit.ly/datadog-detect Our lineup is incredible with experts in the field of detection, response and threat intelligence.
Datadog Detect: Scale your Security Operations with Detection Engineering | Datadog
See metrics from all of your apps, tools & services in one place with Datadog's cloud monitoring as a service solution. Try it for free.
bit.ly
🍎👿 The key macOS malware families of 2024: This past year saw a sharp rise in sophisticated campaigns targeting macOS users in the enterprise and the increasing adoption of cross-platform development frameworks.
2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise
Learn about the key macOS malware families from 2024, including tactics, IoCs, opportunities for detection, and links to further reading.
s1.ai
I’m biased, but wow—it’s so refreshing to get updates that genuinely help me better track threat actors. 🔥 www.validin.com/blog/threat_...
Tracking Threat Actors with Validin | Validin
Quickly identify threat actors and discover malicious infrastructure using Validin by viewing detailed descriptions on thousands of threat actors that Validin has cataloged
validin.com
Did a security researcher at Snyk really just publish malicious packages to NPM targeting Cursor.com?
🚀 Excited to announce the alpha release of NIMS - a Notion-based Incident Management System! Designed for SOC/IR teams, NIMS helps streamline incident management and collaboration using Notion's powerful database features. #InfoSec #DFIR #IncidentResponse #SecOps #Notion
"North Korea-nexus Golang Backdoor/Stealer from Contagious Interview campaign" published by dmpdump. #ContagiousInterview, #DPRK, #CTI https://dmpdump.github.io/posts/NorthKorea_Backdoor_Stealer/
The cybersecurity subreddit has a thread on influencers and “who to avoid because of xyz”. These threads irk me because there’s no clear measurement and lots of gate keeping around who is allowed to post stuff and who isn’t. www.reddit.com/r/cybersecur...
From the cybersecurity community on Reddit
Explore this post and more from the cybersecurity community
reddit.com
I’ve been pretty sick for the last 2 weeks, but Christmas holiday has been a much needed break for rest and recovery. Take care of yourselves people; I think stress contributed a ton to this, and being mindful and in the present has helped me out a lot. And lots of Christmas food.
telling chatgpt my editor in a very blunt and snarky way, as all vim users do
Today is not a good day. Our dog needed a vet visit because he was weak and not eating. Turns out he had blood and fluid throughout his abdomen due to cancer. He was an amazing friend and family member, and tomorrow’s issue will be somber but commemorative with lots of pupper pics. Hug your dogs!
You've got to be a total wanker to name a law after yourself, and guess what! www.chrisfarris.com/post/three-l...
Farris's Three Laws of Auto Remediation - Chris Farris
In this post, I present three laws of Cloud Security Robotics with homage to a SciFi great.
chrisfarris.com
love these looks from Proper Cloth's new lookbook titled "New Ivy." even the grey shetland knit with black jeans and small dress watch looks great.
DeFi platform Radiant Capital says North Korean hackers were behind the theft of over $50 million worth of assets from its servers in October this year. Radiant says it was hacked after an employee opened a malicious file received from a former contractor via Telegram: medium.com/@RadiantCapi...
Radiant Capital Incident Update
2024–12–06
medium.com
zizmor would have caught the Ultralytics workflow vulnerability https://blog.yossarian.net/2024/12/06/zizmor-ultralytics-injection #security #oss
NEW pod alert! Turla caught stealing from a Pakistani APT, fourth-party espionage, threat actor attribution. Plus, a Monokle-like spyware finding, Salt Typhoon disinfections and Romania's election crisis over Russian interference via TikTok. @craiu.bsky.social @jags.bsky.social
NEW EPISODE! Our esteemed guests @justinschuh.com and @matthewdgreen.bsky.social joined us to debate whether `Dual_EC_DRBG` was intentionally backdoored by the NSA or 'just' a major fuckup: securitycryptographywhatever.com/2024/12/07/d... www.youtube.com/watch?v=i0eo...
Dual_EC_DRBG with Justin Schuh and Matthew Green
YouTube video by Security Cryptography Whatever
youtube.com
Ultralytics, a python package with close to 6.4 million downloads per month, was backdoored to run a cryptominer. Running theory from the reported GitHub issue is a GitHub action injection attack, but theres also evidence that the malicious code was published directly via PyPi and skipped CI/CD
First time I’ve seen a successful arrest and plea of a large crypto jacking campaign. Nebraska man leveraged stolen cloud resources to mine crypto for 3.5 million www.justice.gov/usao-edny/pr...
Nebraska Man Pleads Guilty in Multi-Million Dollar “Cryptojacking” Case
Earlier today, in federal court in Brooklyn, Charles O. Parks III, also known as “CP3O,” pleaded guilty to wire fraud for operating a large-scale illegal “cryptojacking” operation. As part of the sch...
justice.gov
