Nir Yehoshua

Public exploit code can chain two #Cudy WR3000 v2 flaws to bypass login checks and allow full control when the router’s control service is reachable. Update to firmware 2.5.24 or later. Listen to the article or read: hackread.com/cudy-wr3000-rou… #CyberSecurity #Router #Vulnerability

TLDR: I’ve started a small fund from my Base44 money that’s focused on cancer research and breakthrough therapies. I’ve invested in 7 incredible companies in the past 4 months and plan to do more as my liquidity allows. Listing my investment thesis below I welcome anyone like me who has been blessed financially to join me and find ways to finally manage or even end this disease. Longer - I honestly believe cancer is humanity's worst enemy. ~40% will be diagnosed with it, and out of which a ~third won’t make it. And numbers are currently not getting dramatically better. For many it might sound like a statistic But for some of us who have been there ourselves or had to go through it with a person we love, it’s one of the worst things you can imagine. I had to go through it with my mom - who passed away 4 months ago and whom I miss and think about every single day since. This field needs a dramatic push. The current wave of technology and AI is doing a lot of good in the world, But cancer therapy is one of those things that are not moving nearly fast enough. And there’s no good reason for that - AI is creating so much opportunity right now. Here's my thesis on how things will play out: For drug development, the bottleneck will shift to 1. Manufacturing 2. Real world testing "In silico" is going to accelerate incredibly fast. AI is identifying new target proteins and designing new molecules, drastically shortening timelines. AI will create an abundance / inflation of ideas. It will help design molecules faster than anything historically possible. This is already happening. Play with Claude Science or Codex and you'll be surprised at how far you can get with just a few prompts. We need a better way to *manufacture and test* the 1000s of ideas coming from AI models spitting out potential drug candidates 1. Manufacturing: i.e. how fast can we synthesize a potential drug Not too far into the future, companies with manufacturing excellence will win over companies with the smartest scientists. Being able to synthesize a drug candidate fast - together with efficient methods to test efficacy (more on that below), basically means you get more shots at a target hence more chances at succeeding. This is the same exact lesson the software industry learned about the importance of fast iterations. Companies like Starget Pharma are leveraging AI heavily to iterate on drug candidates + figured out in-house manufacturing in a way that lets them iterate on drugs almost as fast as if they were a software company iterating on features. 2. Real world testing: i.e. how fast can we get a call on a drug's efficacy. We need better real-world indicators for drug efficacy than mouse / animal models. The success rate of animal models -> human clinical trials is less than 8%. Breaking down this bottleneck will change the entire industry. Developing an oncology drug and taking it through all clinical trials usually cost >> $ 100m Thus taking the wrong bet is devastating (but still, happens a lot). Giving drug development companies the ability to better understand the efficacy and mechanisms of their drugs will change a lot. Esp in the age of abundant drug candidates. Furthermore - and once those methods proved efficient - Joining forces with regulators to shorten (or even skip) some clinical trials altogether will cut years from the process and save many lives by bringing new drugs to market faster. CuResponse is pioneering functional testing - taking real cancer biopsies and showing drug efficacy with very high precision. Can be used for precision oncology as well as testing new drugs. Cellint is providing a fully automated cell-culture R&D platform for companies and researchers. ---- I’d love to see a future where there are “cloud services” for drug development companies. A company should eventually be able to submit a drug candidate programmatically and receive: 1. The synthesized drug. 2. Testing across cells, tissues, organoids, and tumoroids. 3. Structured results showing what worked, what failed, and why. 4. A recommended next iteration derived from the biological reactions. I’ve invested in all of the above companies and am searching for additional companies to bring this “cloud services for drug dev” vision to life. ---- Alongside it, I am also investing in direct therapeutic moonshots. I invested in Baccine, which is developing a bacteria-based cancer immunotherapy platform and deserves an entire separate post. I’m also a proud LP in Even One Ventures - @sytses ’s fund to fight cancer. Sid and Jacob Stern are an inspiration to me as I’m making my first steps in the field, and I bet their companies will make a massive impact. And 3 other incredible companies focused on how therapies are delivered - where I’ll elaborate in future posts. ---- I’m still obviously spending most of my time on Base44. Which is a plus for the companies - as we’re able to support them with tools, software, AI agents, etc. I’m looking for people to join me - invest side by side or help one of the companies. I don’t have a name for the fund yet, nor an email or a website I will get to it this weekend and will post it in the comments.

After conducting a Threat Hunting operation targeting infrastructure associated with the Brute Ratel C4 framework. The research identified several active servers and domains that, according to the findings, were used in attack campaigns across different regions worldwide. Shodan: http.headers_hash:144518609 http.html_hash:1305614831 The identified infrastructure: · 77.88.193[.]134 · 91.84.111[.]104 · 157.230.132[.]195 · 178.63.172[.]13 · 62.192.173[.]249 · 167.99.165[.]34 · 91.203.132[.]57 · 155.117.20[.]166 · 178.16.55[.]52 · 178.16.55[.]226 · 158.160.15[.]41 · 13.202.120[.]94 · 161.35.73[.]220 · 193.23.118[.]155 · 63.178.135[.]144 · 5.183.219[.]132 · 68.64.178[.]130 · 78.128.114[.]22 Associated domains observed during the hunt: · phactory[.]art · mail.ukeysign[.]com · redteamer.co[.]in · shopgolic[.]ru · puffvape[.]ru · yastatic-prx[.]ru · businessanimation[.]online · brute.bzh[.]ovh · nocta-fans[.]com · teams.microsoft-365[.]app · artoriasnova[.]store

Just uploaded my last talk about Red Team and supply chain attacks. Enjoy! 🔥💣 youtu.be/P2uQ__YXs4c

We just published our newest issue - Car Hacking! Check it out and learn new vehicle hacking techniques, tools, exploitation and more! hakin9.org/product/car-hacki… #hacking #automotive #automotivesecurity #cybersecurity #carhacking #automotivehacking #pentesting #infosec

Well-designed #EDR platforms are supposed to help analysts focus on the things that matter most by eliminating false positives - the architecture of @SentinelOne’s sensor technology, however... cybr.ly/3bSxXxN #security #incidentresponse