I've been working on this for 5 years, and it's finally out! I wrote a dark fantasy book (no computers involved), and it's the hardest thing I have ever done. I'm extremely proud of the final result. (But it's in French, for now.)
https://lechantducygne.fr/gestalt/
investigation on Alternativ, another shady private-intel IT company based in France: https://politico.eu/leaked-altrnativ-world-cybersurveillance/…
The founder has deep political connections.
The situation in Europe when it comes to cybermercenaries is shameful and unacceptable.
I wrote an IDA plugin that queries #ChatGPT and explains decompiled functions. It's still very bleeding edge, but you can find the code here and try it out:
https://github.com/JusticeRage/Gepetto…
(Yes, the video was performed on a very basic case for simplicity's sake.)
Wondering what you'll be doing when you're done replacing yourself with a Python script that sends your work to #ChatGPT?
I got you covered. Did you know you can role play with it? It's exactly as amazing as it sounds.
's #ChatGPT now automatically renames variables in the pseudocode view.
(Video slightly edited to cut loading times.)
Keep in mind that this is only the work of a single week-end! This thing is only getting started.
I wrote an IDA plugin that queries #ChatGPT and explains decompiled functions. It's still very bleeding edge, but you can find the code here and try it out:
https://github.com/JusticeRage/Gepetto…
(Yes, the video was performed on a very basic case for simplicity's sake.)
This is a follow-up of the last few days' experiments: https://twitter.com/JusticeRage/status/1598649735362945026…
I'm still figuring out exactly how much we can do here. There may be a way do do a decompilation plugin too, but it will require more work to integrate with IDA. I'll post more as I discover more!
I wrote an IDA plugin that queries #ChatGPT and explains decompiled functions. It's still very bleeding edge, but you can find the code here and try it out:
https://github.com/JusticeRage/Gepetto…
(Yes, the video was performed on a very basic case for simplicity's sake.)
A lot of the value I bring to any company comes in the form of entertainment, specifically through an endless stream of salty emails. AI just made me obsolete.
All hail our new robot overlords.
I'm in no rush to leave, but if everything goes down in flames, you can also find me here: https://infosec.exchange/@justicerage
I'll collect my thoughts on Twitter's situation and post them soon.
team on developing detection signatures for nearly all major versions of Cobalt Strike…
This is one of the most comprehensive CS Beacon yara collections I’ve seen yet.
I just read FTX's Chapter 11 First Day Affidavit.
In it, the appointed restructuring CEO John Jay Ray III, who oversaw Enron's bankruptcy proceedings, calls FTX's case the worst of his career.
Its contents are shocking.
Here are the highlights:
Please watch this detailed explanation from former CIA analyst Frank Snepp about how the newspapers and magazines you were taught to regard as mainstream and reliable have always eagerly served as disinformation megaphones for the CIA and the US Security State. That's still true.
To be fair, anti-cheat usually only has a single process to protect, which its developers fully own.
EDR and endpoint solutions have to defend whole systems that they have zero control over, which is a much more difficult task.
We welcome constructive feedback from game hackers!
Kept you waiting, huh? Its the 20th anniversary of Metal Gear Solid 2: Substance, and as promised, here's a mod that lets you play it with the 3rd person camera from Metal Gear Solid 3: Subsistence!
Medical and humanitarian IT infrastructure should be safeguarded from cyber-attacks. I think this is the lowest common denominator we need to agree on.
The Red Cross proposes clearer signaling for such machines and I genuinely hope it sees adoption (including from attackers)
Cyber operations are a reality of armed conflict and can cause real harm.
We are proposing a digital emblem that would signal protection for digital infrastructure of medical facilities and identify the Red Cross/Crescent Movement in cyberspace.
How would it work?
Hey :)
New blog post detailing Raccoon V1 management infrastructure (victim storage location, Telegram update server, etc), MaaS infrastructure location + link to CC2BTC marketplace.
Once again, feedback warmly-welcomed 😄
BLOG POST: In this blog post we examine the upstream management infrastructure of Raccoon V1, including insight into the operators' wider business model - with connections to the #CC2BTC marketplace identified.
#RaccoonStealerhttps://team-cymru.com/post/inside-the-v1-raccoon-stealer-s-den…
The obsession with platforms prostrating themselves before advertisers has always been misplaced, because on any scale longer than one bad news cycle, advertisers go where the audience is.
Optimize platforms for people, not brands, because people have a choice. Brands don't.
"The censorship squad understands fickle ad revenue is a weakness"
A move to subscriptions partially blunts this attack.
TWTR rev: ~$5B/year
Proposed subscription: ~$100/year/person
You need 50M/300M users to subscribe to fully *replace* ads. Too high.
But 5M/300M is possible… twitter.com/micsolana/stat…
This is some of the most important reporting of the year, on the very close relationship of the most powerful centers of state and corporate power to control the flow of information on the internet. It should headline every show and - even though it kills them - be in NYT & WPost
Docs show Facebook and Twitter closely collaborating w/ Dept of Homeland Security, FBI to police “disinfo.” Plans to expand censorship on topics like withdrawal from Afghanistan, origins of COVID, info that undermines trust in financial institutions. https://interc.pt/3Dq6TDB
"American companies will never be able to resist the demands of their intelligence services. It doesn't matter if their servers are in Virginia, Paris, or on the damn moon. Europe should either come to terms with that reality or raise a real privacy wall."
has been investigating the targeting of #Zimbra Collaboration Suite (ZCS) instances using CVE-2022-41352 and identified approximately 1,600 ZCS servers worldwide that are likely compromised as a result of this CVE.
#volexintel 1/4
If you're managing a Zimbra installation and haven't applied the latest patch yet, start looking for webshells now. Exploitation is massive.
More details here:
, Chercheur au GReAT Kaspersky, pour parler blockchains, cryptomonnaies et NFT et voir si les promesses formulées par ces technologies ont bien été tenues.
📲 En savoir plus ▶️https://kas.pr/t5oe
A recent post by Vietnamese cybersecurity company GTSC detailed findings from a #MicrosoftExchange breach that stemmed from CVE-2022-41040 and CVE-2022-41082.
Beware of links from popular YouTube videos, as they may contain #malware. We found such a video (64K views, 180K subscribers) that has a link to a Tor Browser installer in the description. That installer comes with a previously unknown spyware that we dubbed #OnionPoison. [1/4]
Cyber Power Index paper was a bloated mistake. The methodology was illbegotten, concepts poorly defined, and results patently inaccurate. Why would they publish another one?!
"Having worked in the security industry for over 10 years now, I feel obligated to inform you that anyone who seriously considers migrating real-life technologies into a write-once environment is a stark-raving lunatic."
My (hot) take on smart contracts: