Voor het digitaal veilig functioneren van onze samenleving is het belangrijk dat organisaties de risico’s in hun supply chain kennen. De Cybercheck helpt deze in kaart te brengen 🔗 aivd.nl/actueel/nieuws…
NCSC-NL NCTV

New #blog post! Dive into the complexities of collecting samples for #malware analysis as we introduce an innovative forensic approach for dumping executables on Windows. From evasion techniques to transient file interactions, we explore the challenges faced by defenders.

1/10

🤯

I just came across a tool called AttackGen. It's a simple tool that generates incident scenarios based on a Threat Actor and suggests simulations and possible detections at a high level. #llm #python #threatintel

👉 code: github.com/mrwadams/attac…
👉 app: attackgen.streamlit.app

I just published a blog and tool for the LSA Whisperer work that was presented at the SpecterOps Conference (SOCON) back in March.

If you are interested in getting credentials from LSASS without accessing its memory, check it out!
medium.com/specter-ops-po…

Privileged Access Workstations are now a ETSI - go fourth and defend - etsi.org/deliver/etsi_t…

If true, wtf. Very scary, also because China is actively exporting this type of stuff :/

This paper, 'Quantum Algorithms for Lattice Problems' is a huge deal if it's proven to be correct. It's a striking new quantum algorithm that threatens an entire category of cryptography (learning with errors) that was thought to be resistant to quantum computers until now.

Interesting 🤔

I wrote a homebrew GPS receiver from scratch. Thanks to months of dedicated work, I can now say with confidence that I am somewhere in England! axleos.com/building-a-gps…

Insightful in regards to evaluated/certified stuff.

Security should not exist. Proper engineering and delivery of qualitatively good software is all we need.

I saw an idea recently that I thought was lovely…public libraries that are open late every night so ppl can socialize, as an alternative to bars or sitting alone at home. Would be especially perfect for introverts to socialize comfortably and for older people who are lonely.

Counter Strike hacking is one of my guilty pleasures.

This is a video of an AI tool built into one of the most popular HvH cheats on the market.

HvH (Hack vs. Hack) is a game mode where everyone in the lobby is cheating.

“If everyone is cheating, then how is it fun?”

The…

Long term value of a company is inversely correlated to the frequency with which its leaders feel like they can't speak the truth.

Political executives who care more about how they look than the truth destroy value. Yet, business school churn out so many of these people.

Periodic reminder: Not giving an actual fuck can be a perfectly normal reaction in some situations.

Interesting books on the subject as well.

# explaining llm.c in layman terms

Training Large Language Models (LLMs), like ChatGPT, involves a large amount of code and complexity.

For example, a typical LLM training project might use the PyTorch deep learning library. PyTorch is quite complex because it implements a very…

octox is a Unix-like Operating System implemented entirely in Rust. The author highlights the benefits of using Rust for OS implementation, including type-safe and memory-safe systems that prevent undefined behavior and improper memory operations.

vmm.dev/en/rust/osinru…

some people asked for the code .. so I decided to quickly refactor my scrappy paramiko script and turned it into an ssh agent implementation that works with a vanilla openssh client that has a single line patched out. github.com/blasty/JiaTans…

Exactly this: good proactive security engineering (isolation, segmentation, least privilege) is 99%, it will even help you when the attacker has multiple 0days at their disposal.