The mother of all CitySecs, coming to you (very not) live from Chicago, IL. Woman-run security meetup. See also infosec dot exchange forward slash at chisec
Chicago, IL
Joined August 2009
- Tweets275
- Following95
- Followers806
- Likes49
ChiSec retweeted
Regarding the Danfoss refrigeration systems hacked in France:
The username is `admin`, and the password automatically changes every day to... the current date.
Yes, today's date.
The French supermarkets affected in today's attacks had exposed all its refrigeration controllers directly to the internet.
Every single device reportedly used the same password: today's date...
There's also a documented authentication bypass: sending a POST request to /xml.cgi can bypass the login entirely.
Via: GossiTheDog
ChiSec retweeted
Using Apple's Corelocation you can identify network devices in areas where Wigle simply doesn't have coverage.
This is Pine Gap, a joint Australian and United States satellite communications and signals intelligence surveillance base.
You cannot get within 25KM before getting stopped.
Using Apple's own infrastructure you can map out the location of over 140 Fortinet devices on the base.
ChiSec retweeted
Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security.
This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version.
This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.
ChiSec retweeted
A Day In Cybercrime: May 26, 2026. 5 news stories, 59 npm malware advisories, 31 ransomware claims, 2763 C2 observations, 2409 unique C2 hosts. derp.ca/research/a-day-in-cy…
ChiSec retweeted
my company got breached
the attacker had access for 11 days
on day 3 he emailed our IT helpdesk
complained that the VPN was slow
our helpdesk reset his password
upgraded his access tier to fix the "connectivity issue"
and closed the ticket as resolved
CSAT score: 5 stars
we found this in the logs during forensics
the attacker had rated our IT support
excellent
ChiSec retweeted
❗️🇨🇭 Researchers at ETH Zürich have discovered serious vulnerabilities in cloud-based password managers that allowed viewing and modifying stored passwords.
1Password, Bitwarden, Dashlane, and LastPass were all affected by critical vulnerabilities.
Readers added context they thought people might want to know
Bitwarden volunteered for this research and already fixed the vulnerabilities a year ago
x.com/restonjd/statu…
ChiSec retweeted
I found malware that embedded itself into an audio driver. It silently recorded from the system microphone and uploaded the compressed .wav files every 20 minutes. Using memory forensics and strings, I discovered a hidden process writing to a staged audio cache in %Temp%.
ChiSec retweeted
‼️🚨 Red Hat breached: Crimson Collective stole 28k private repositories, including credentials, CI/CD secrets, pipeline configs, VPN profiles, and infrastructure blueprints.
Our analysis of obtained data: 👇
ChiSec retweeted
As you may have already heard, 16 billion credentials were leaked for popular sites. The fine print is this has been happening for years and is a result of the rise of Infostealer malware. These 30 different DBs mentioned in the original article are personalized collections. 1/4
ChiSec retweeted
Successful experiment with password tokenization for training/use of existing probabilistic candidate password generators. 26% more cracked (over same input to same model without tokenization) by first 1 billion candidates in very first out-of-sample test. openwall.com/lists/john-user…
ChiSec retweeted
SQL Injection Attack on Airport Security dlvr.it/TCj39q
ChiSec retweeted
Local programming note: @boboTjones brought ChiSec back, it's at Twisted Spoke now(!), it's TONIGHT at roughly 7PM, it's super informal, and b/c a rare opportunity for me to drink on a Thursday I plan on being there.
ChiSec retweeted
Did you bring your wife who does not work in security (or tech at all) to DefCon? Remind her that the female attendees at DefCon are not there to entertain the wives but to network with industry peers. If you can’t do that, leave her ass at home.
ChiSec retweeted
People are paying thousands of dollars for educational courses on initial access vectors. We'll provide you a step-by-step guide on how to get initial access to companies with a budget of $0. All it requires is some time, effort, and the ability to grep
1. Go to Telegram
2. Get free stealer logs
3. Look for VPN creds
4. Hope no MFA
4.a If MFA, spam requests
4.b If fails, go back to Step 1.
5. Log into VPN
6. Go to Jira / Kanban board
7. Scrape everything when people are sleeping
8. Log out
9. ???
10. Profit!!!11
Congratulations, you're now the most dangerous hacker on the planet
Does this sound absurd? Of course it does. Does it work? Yes, literally every single day. Infostealers are a giant problem. They don't need to target enterprise environments with top-notch security – they only need to target lazy home users, with security settings probably disabled, downloading junk binaries.
ChiSec retweeted
Today we proposed reporting requirements aimed to improve internet routing security and help protect America's networks against cyberattacks. fcc.gov/document/fcc-propose…
ChiSec retweeted
what, and i cannot stress this enough, the fuck
ALT aiBIOS leverages an LLM to integrate AI capabilities into Insyde Software’s flagship firmware solution, InsydeH2O® UEFI BIOS. It provides the ability to interpret the PC user’s request, analyze their specific hardware, and parse through the LLM’s extensive knowledge base of BIOS and computer terminology to make the appropriate changes to the BIOS Setup. This breakthrough technology helps address a major hurdle for PC users that require or desire changes to their BIOS Setup for their personal computers but do not fully understand the meaning of the settings available to them.