Red Team Operations and Adversary Emulation.
London, England
Joined January 2017
- Tweets1.6K
- Following981
- Followers514
- Likes1.3K
Pinned Tweet
Myself and Steve Townsley have been working on a podcast where we talk about fun security topics from both an offensive and defensive perspective: purpleteamdialogues.podbean.… We've already done a couple of episodes talking about the Crowdstrike 2024 report and Phineas Phisher. Enjoy!
Richard Gold retweeted
New: Facebook is awash with stolen, AI-generated images that massive groups of people think are real
The once-prophesized future where cheap, AI trash content floods out the hard work of real humans is already here, and is already taking over Facebook 404media.co/facebook-is-bein…
Richard Gold retweeted
Here is your friendly reminder that we built Signal for private, secure communication. It’s built so you can communicate individually and in groups, through text and calls, without fear of interference or data collection. Free to use and not for profit.
CTI in a nutshell.
every time i am forced to take a mandatory security training, i am being reminded of how @thegrugq was right about how people give names to concepts they do not understand tricking themselves into thinking they do. youtu.be/wP2J9aYM6Oo
Shame to think that this creativity is being used for this purpose.
A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution googleprojectzero.blogspot.c…
At the risk of sounding overly philosophical, the more someone has already made their mind up about themselves, other people and the world around them, the worse they will be at security.
Kicking it old school! Great story...
Christmas Lecturer John Ambrose Fleming (#BOTD in 1849) was involved in the first public display of hacking, which took place here at the Ri as early as 1903.
Read the story of how his demonstration of long-range wireless communications was taken over. rigb.org/blog/2014/november/…
Richard Gold retweeted
Today Smashing the Stack for Fun and Profit is 25 years old. Older than I was when I wrote it.
Richard Gold retweeted
A lot of you might be too young to remember this, but back in the day memory corruption was this big security problem with quite a lot of our software. Anyway we learned to program more carefully and it sorted itself out
Advice from a friend that I should start charging for access to a next-gen consultancy service which is just recycling TechNet articles from 2017: techcommunity.microsoft.com/… [seriously though, secure your admin access!]
Offsec starter pack:
Paper: schneier.com/wp-content/uplo… [A Cryptographic Evaluation of IPsec]
Talk: youtube.com/watch?v=bDJb8WOJ… [Disrupting nation state hackers]
Snippet: github.com/JohnLaTwC/Shared/… [Defenders think in lists]
Tool: nmap.org/ncat/ [ncat]
Richard Gold retweeted
My students @maxzks and Tushar Jois spent most of the summer going through every piece of public documentation, forensics report, and legal document we could find to figure out how police were “breaking phone encryption”. 1/
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
If you work in, or are interested in, offense, I highly recommend reading this article!
I wrote a bit about the operational side of offensive cyber operations. In particular, the critical elements under the control of the attackers which play a significant role in determining the success of their operation.
gru.gq/2020/12/23/on-pre-op-…
