I'm actually impressed with how industry is handling this thing. You know what isn't happening? Dumping raw exploits on the internet. Yet, people are still sharing actionable intelligence. Amazing.

Beware fake ass exploits.

As of when I went to bed last night there were no REAL exploits publicly available for CVE-2024-3400, which is great.

I was very skeptical about a modern Civil War movie in an election year where people have been fantasizing about such thing.

I would want any such movie to make people think 'that's a bad idea, maybe we should figure something else out.' Even people who think they're hard have…

Long term value of a company is inversely correlated to the frequency with which its leaders feel like they can't speak the truth.

Political executives who care more about how they look than the truth destroy value. Yet, business school churn out so many of these people.

I still see big threads, and sometimes they're posted by people with blue checkmarks. It's the worst.

Former U.S. Ambassador and National Security Council Official Admits to Secretly Acting as Agent of the Cuban Government and Receives 15-Year Sentence
justice.gov/opa/pr/former-…

On one hand, I don't want to embarrass someone for asking a nonsensical question. On the other, if you feign ignorance to pose a question you intend to answer yourself shortly thereafter, and your question is ridiculous as is your answer, well you are testing my graces.

Don't…

Delaware Woman Arrested for International Sextortion and Money Laundering Scheme justice.gov/opa/pr/delawar…

One can argue this was brilliant. Look at how many people amplified it. 😂

I want to point out something... plenty of elements of the post-exploitation activity detailed in the phenomenal blogs written by PAN and Volexity were detectable independent of any 0-day, which is obvious given that these intrusions were detected.

However, when I comb through…

I'm actually impressed with how industry is handling this thing. You know what isn't happening? Dumping raw exploits on the internet. Yet, people are still sharing actionable intelligence. Amazing.

Our threat brief is up, Operation MidnightEclipse

#CVE20243400

unit42.paloaltonetworks.com/cve-2024-3400/

The United States is taking action today against Hamas cyber and UAV operatives. We will continue to target Hamas’s destabilizing attempts to launch terrorist attacks, and disrupt its terrorists wherever they operate, including across cyberspace.

Happy Friday.

And at the opposite end of the spectrum, non-top tier companies, do the exact opposite.