Alright friends, we're going to test the EDR policy. whoami /all ipconfig /all tasklist /svc Will it get detected? What else should I do from the command line?:P

Hackers claim to have breached Gravy Analytics, a US location data broker selling to government agencies. They shared 3 samples on a Russian forum, exposing millions of location points across the US, Russia, and Europe. It's OSINT time! 👇

wait until he finds out about Ghidra

we don't know anything about nuclear energy but we're wondering if the government is cool with dudes building a neutron producing nuclear fusor in their kitchen

SwiftOnSecurity M$ OCRing all images in Onedrive and storing the information in an unsecured database on the endpoint.

SwiftOnSecurity CISOs are still not executive roles meaning no company takes it seriously. SoC, ISO, FedRamp, HiTrust, etc. are a joke and have been commodified by the GRC platforms and their preferred auditors. With the move to Azure, M365, InTune, etc. the question has become are you even

i did the thing :)

@lovable_dev Fr bro, I hate thinking and learning. I prefer to use some trash website piggy backing off of OpenAI or Claude to think for me. Now that I don't have to think, I have more time to binge pornography and abuse prescription medication

Zero Trust and EDR Tier list rated by nation-state funded AI catgirls. ranked by amount of snake oil in product

windsurf sold for $3 Billion cursor now valued at $9 Billion windsurf bought by OpenAI OpenAi is an existing investor of cursor both are vsCode forks vsCode is owned by microsoft Microsoft owns 49% of OpenAi

if you’re complaining about this you’re unemployed

Happy to have gotten my first blood 🩸 on today's machine #Planning #HackTheBox.

No

There’s this weird dynamic when talking about Nazi Germany or Soviet Russia or fascist Italy or Mao’s China or any other monstrous regime that applies the known, monstrous violence that did happen to every action of the era. The Nazis did the holocaust, so everything the Nazis

Saying you don't need a pentest because your devs have completed secure code training and you have a WAF is like saying you don't need to go to the dentist because you brush and floss twice a day.

I am fully convinced 99% of JavaScript developers are absolutely fucking retarded. Like literally retarded.

rewrites the typescript compiler in go gets laid off 🤔

Any DEF CON villages want to host this talk? Sharing for visibility.

[remote] Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE) dlvr.it/TLMSgW

One way to differentiate a real nerd from a phony nerd is their appreciation of stuff For example, someone may share an idea, or proof-of-concept, which illustrates something which is unusual A nerd will appreciate it for it's documentation and appreciation that someone has