1+1=3 for large values of 1
The Netherlands
Joined June 2008
- Tweets1.3K
- Following528
- Followers221
- Likes4K
chris retweeted
#HITB2023AMS HITB LAB: Developing Malicious Kernel Drivers - Tijme Gommers - conference.hitb.org/hitbsecc… cc @tijme
chris retweeted
Ons logo lijkt wel perfect gemaakt voor deze plek op @nyckdevries zijn helm… nog maar 2 weken en dan barst het weer los! #F1
chris retweeted
The stolen data from LastPass is actively being decrypted and exploited. People with secrets keys for crypto wallets & login data to online wallets are being plundered. If you had your secret keys in LastPass, move your funds now, changing your password does NOT help.
chris retweeted
Northwave has conducted research into the psychological effects of a ransomware crisis on people involved in mitigating a ransomware attack. The findings reveal the deep marks that a ransomware crisis leaves on all those affected.
northwave-security.com/wp-co…
chris retweeted
I love this blog post from @Northwave_Sec. I cover some of this in my ransomware recovery talk. Taking care of your people during ransomware (and other) IR is really important, I see a lot of burnout and resignations after a ransomware incident.
northwave-security.com/en/bl…
chris retweeted
These 'Beach Animals' were created by Theo Jansen as a fusion of art and engineering. The kinetic structures walk on their own and get all their energy from the wind.
chris retweeted
Cobalt Strike BOF foundation for kernel exploitation using CVE-2021-21551. In its current state, as a PoC, it overwrites the beacon token with the system token (privesc).
github.com/NorthwaveSecurity…
chris retweeted
I worry that the current belief/practise that the only way to get into pentesting is via certs is having a weirdly damaging side effect. 🧵
chris retweeted
Any incident responder saying "DO NOT PAY A RANSOM" is hurting their customers. Paying (or not) should be a risk-informed business decision, pure and simple.
chris retweeted
RFC 9225: Software Defects Considered Harmful, J. Snijders, et al., rfc-editor.org/info/rfc9225, This document discourages the practice of introducing software defects in general and in network protocol implementations specifically. 1/2
chris retweeted
Het blijft verbazingwekkend dat Jan geen hypotheek krijgt waar hij €1000 euro p.m. voor zou moeten betalen, maar hij wel €1500 huur mag betalen aan huiseigenaar Kees.
Jan lost de hypotheek van Kees af, maar wordt niet in staat geacht zijn eigen hypotheek af te kunnen lossen.
chris retweeted
While this may sound too simple, we've managed to escalate across domains on several occasions by accounts with blank passwords 🔥!
In this blog we describe how it works, and which popular spraying tools we've updated to support empty password spraying: northwave-security.com/abusi…
chris retweeted
Interesting to see how @moxie’s post changed the tenor of discussions on web3 (at least on my timeline).
The strongest proponents shifted from “it’s the solution” to “it could be with a lot more work”.
Also a lesson for us: Nothing beats doing the work & writing it up cogently.
chris retweeted
I sincerely hope the Infosec community and media don’t lose their minds over thinking DarkSide is actually shutting down when it’s almost certainly a rebranding attempt to avoid the heat.
chris retweeted
We wanted to use Instagram ads to highlight how ad tech invades your privacy. Instead, Facebook shut our account down: signal.org/blog/the-instagra…
chris retweeted
Wow, what an awesome ride! From Early Bird Code Injection to the Clean Source Principle; the entire Kill Chain has been treated from an Outflank perspective, using the new OST toolset, adding maximum value for customers. Highly recommended training! Thanks @OutflankNL #redteaming
chris retweeted
Gain an initial foothold by permanently migrating Exchange clients to your rogue Exchange server via HTTP Request Smuggling!
northwave-security.com/harve…