All Things Security! / Speaker / Threat Researcher / Cyber Profiler / ___ALL THE ____/ Fast Cars , Fast Bikes.
Joined September 2012
- Tweets18.3K
- Following502
- Followers543
- Likes61.4K
Network23 retweeted
Very heartbreaking news for the Gas Monkey family today as we learned about the passing of the one and only Sue Martin. Sue was just as much of a part of Gas Monkey Garage as anyone else on the team and meant the world to us. Our sincerest condolences to her family and the team at ASM Auto Upholstery.
Network23 retweeted
Do you know Google Flare team ( an elite reverse engineering and malware analysis unit ) has a crash course that explains and teaches malware analysis from basics to advanced step by step.
Link :- docs.google.com/document/d/1…
Network23 retweeted
【古いバージョンのDSMを標的としたランサムウェア攻撃について】 （本ポストは、URLを調整し再投稿しています）
Synologyは、2024年12月に修正済みの脆弱性を悪用し、修正前のバージョンのDSMを実行しているデバイスを標的とした攻撃を確認しております。
既に修正済みバージョンをご利用のお客様への影響はございません。
該当するバージョンをご利用のお客様は、直ちにDSMを最新バージョンへアップデートしていただきますようお願いいたします。
また、今後もシステムを最新の状態に保つため、自動アップデートを有効にしていただくことを強く推奨いたします。
⬇️詳細はこちら⬇️
synology.com/ja-jp/company/n…
Network23 retweeted
What a heartbreaking week it has been. Sir Patrick Stewart was a friend, a colleague, and a magnificent actor. From the stage to the bridge of the Enterprise, he brought intelligence, grace, and a deep sense of humanity to everything he did. Captain Picard stood for the best of us, and so did the man who played him. I was filled with affection and admiration for him and his work.
My heart goes out to Sunny and his family. He will be deeply missed.
Network23 retweeted
pfSense is turning 20, and Netgate just dropped a big update: CE and Plus are officially reuniting into ONE pfSense starting with version 26.10.
The full feature set, new GUI, built-in API, and free security updates are now free for everyone on amd64 hardware.
netgate.com/blog/pfsense-at-…
Network23 retweeted
❗️ Lenovo's ThinkPlus FU100 fingerprint stick was marketed as "hardware encrypted" with AES-256, but inside was an ordinary SD card with nothing encrypted.
The fingerprint only switched on the USB link, researcher Xusheng Li found.
Lenovo's stopgap fix covered the card in epoxy.
Network23 retweeted
Terrible news Sir Patrick Stewart has died at 86.
With a career spanning more than six decades, Stewart became one of the most respected actors in film and television
Thank you for the memories, Sir Patrick. You will never be forgotten.
Network23 retweeted
‼️ The git, curl and python3 in macOS still trust compromised eMudhra certificates, 11 days after Apple was told.
Anyone can recover their keys, so an attacker on your network could pose as GitHub and feed you code.
Researchers say macOS 27.2 even wiped fixes applied by hand.
Network23 retweeted
#バンダイスピリッツ
10月31日(土)発売 1/1000 宇宙戦艦ヤマト3199 デラックスセット 特別先行展示中！
ヤマトのリメイクシリーズに登場する6形態が全て再現可能。全て並べてご覧いただける機会はなかなかに貴重です
#福井晴敏 総監督のメッセージも展示中
是非当店6階でご覧ください
#宇宙戦艦ヤマト
Network23 retweeted
So my daughter got a prescription and it was sent to @cvspharmacy , well now the pharmacy won't fulfill the prescription on the doctor's orders!!!
CVS I'm gunna let you know my daughter has cancer and your pharmacist won't fulfill her prescription.
The CVS AT:
4490 Paradise Rd 89169
Warning to CVS if this isn't fixed immediately you will have a war on your hands. Lawsuits will be inbound
@FOX5Vegas
@8NewsNow
@reviewjournal
@JoeLombardoNV
@Wheeler4Nevada
@realDonaldTrump
@SecKennedy
Network23 retweeted
I would gut my entire kitchen to have the Ridge Racer Full Scale experience in my house
Network23 retweeted
‼️ Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution
Details: cybersecuritynews.com/uefi-f…
A critical bug in open-source EDK II firmware lets a remote attacker run code on a machine before the operating system starts. The flaw is tracked as CVE-2026-97631.
It sits in the network boot (PXE) driver and received a CVSS v4 score of 9.5. The advisory lists the NetworkPkg package in EDK II master as of September 14, 2026. EDK II is the reference code that many firmware makers use to build UEFI firmware, so the bug can reach servers, desktops, and laptops that boot over a network.
The advisory page still says “Not patched currently,” yet a fix has already been merged into the public code. Vendors must now ship that fix in their own firmware updates, which usually takes much longer.
#cybersecuritynews
Network23 retweeted
This is why people hate greedy, unethical @Microsoft. They’ve just installed an update on the computer of every user of Mac @Office 2021 that bricks Word, Excel, Powerpoint etc.
We all have perpetual licences for Office 2021 but apparently Microsoft decided it was time to try to make everyone pay them money, even though the licence was supposed to be a one-off purchase.
After some trial and error, this fix worked for me – posting here for anyone having the same problem:
1. Delete the Office apps (Word etc.) from the Applications folder
2. Download and run the Microsoft licence removal tool: go.microsoft.com/fwlink/?lin…
3. Download and install the version of Office for Mac from 6th October 2026: learn.microsoft.com/en-us/of…
4. Enter your original licence code for Office to activate it
5. In the Finder, go to Macintosh HD > Library > Application Support > Microsoft and delete the MAU2.0 folder
6. Open Word, then go to the Word menu, then About Microsoft Word and check that it shows your licence
7. Still in Word, go to the Help menu, and make sure that the Check for updates option isn’t there
8. Don’t update Office for Mac and it should keep working – you need to keep updates off or Microsoft will install an update that bricks Office all over again
What a waste of time.
Network23 retweeted
‼️ Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin and Boeing use the GoAhead web server, which has been accepting revoked certificates, FoxIO says.
Its maker says it runs in hundreds of millions of devices.
The critical flaw, CVE-2026-115881, lets a stolen device keep its access where client certificates are checked against a revocation list. FoxIO does not say which products are affected.
A second bug, a 2018 typo in GoAhead's Mbed TLS builds, shrinks a 2048-bit encryption number to one byte, leaving 8 possible secrets.
Anyone who recorded a TLS 1.2 session could decrypt it, if the connecting app accepts the broken number.
Earlier this month, browsers cut off Indian certificate authority eMudhra after one of its private keys turned out to be the number 4.
A third bug lets oversized certificate chains through on older LibreSSL builds.
GoAhead fixed the first two in version 6.1.1 in August. Proof-of-concept code is public.
Any fix for their devices has to come from the 13 firms.
Network23 retweeted
We lost Walter Koenig today, Pavel Checkov, from the original Star Trek series.
He was amazing not just there, but also in his work on Babylon 5. RIP.
Network23 retweeted
Really excited about this new series of DIY solutions to take ownership of devices and services into our own hands. Come along for the journey. Our first one is exploring the world of DIY routers. youtube.com/watch?v=sJidlu3p…
PSA: To all companies. If you send me an email and I can't respond to it because you made it a Do Not Reply then take me out of your systems and cancel any service I have with you.
Network23 retweeted
It is with joy and proud the RFID hacking community see three new modes dedicated to RFID made the cut to Hashcat v8.0 thanks to the efforts of Antiklesys.
We also want to express a special thanks to @chick3nman 🙏🏻🙏🏻🙏🏻
My old wish from 2019 has been fulfilled. I can retire. 😂
hashcat v8.0.0 released!
The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards.
Release notes: github.com/hashcat/hashcat/b…
Download: hashcat.net/hashcat/
