At least for tonight, DEFCON is cancelled. Goon just told us they're not reopening tonight and asked us to head back into one of the connected hotels.
#defcon31 #Defcon

#defcon
Everybody out of the building more Caesars SRT going in.

Interesting reality take on running a social media site. theverge.com/2022/10/28/234…

Once in a blue screen, I see a bumper sticker that literally makes me laugh out loud. This is one of them.

Packing for #DefCon30 this morning. Excited to meet new people and discover amazing things. See you there!

Microsoft’s Local Account Administrator Password Solution (LAPS) to be included in Win11 blogs.windows.com/windows-inside…

Thought of the day: Creativity is intelligence having fun.

20 lessons learned in my 10 years working as network security engineer. My job was to configure and manage firewalls for customers.

🧵👇

wsj.com/articles/push-…

This is a far more interesting 'feature' of setup.exe - a persistence trick really

Drop your payload to
c:\WINDOWS\Setup\Scripts\ErrorHandler.cmd

and c:\WINDOWS\system32\oobe\Setup.exe will load it anytime it errors (at least; enough to run it w/o cmd line to trigger)

It seems that you can still completely bypass Defender AV's static detection using *.log files, only now you have to use DLLs instead of EXEs.

Implementing multifactor authentication ( #MFA ) is a critical element to security posture optimization.

Explore all 10 of our essential controls here: bit.ly/32NK7Xr

And it begins. microsoft.com/security/blog/…

github.com/ihebski/Defaul…

'The enemy does not check your risk register prior to attacking.' - Sun Tzu, The Art of Cyber War

Please stop using SMS MFA.

VICE: A Hacker Got All My Texts for $16.
vice.com/en/article/y3g…

Hacking is something that must come from inside you. Curiosity should be the engine that drives you the fact that something has never been done before shouldn't stop you. you should take it as a challenge. Whenever you are wondering if something is possible. Just Try IT

If you use Outlook, you need to know this.

Fancy tools get caught. RDP flows like the wind.

Inc.: Would You Hire Someone to Hack Into Your Company? These CEOs Did--and They Think You Should, Too.
inc.com/kevin-j-ryan/h…