@NISTcyber @NIST Is there any update on the NVD API? It's been returning 503 errors for days now and there hasn't been an update on nist.gov/itl/nvd since the 15th. It's totally understandable that issues happen, but an update on the status would be deeply appreciated.
I remember picking up this album at a independent record store in Oxford when I was 13 along with Sigur Rós ( ) and Mogwai Happy Songs.
That was one life changing weekend!
Look up “mouse on the keys” if you haven’t already. Post-rock jazz from Japan.
SEᑕBᑌG🕸 retweeted
Microsoft this week released its June Patch Tuesday collection – 69 patches for 10 project families, plus documentation for 25 (!) patches from Autodesk, GitHub, and Chrome.
SEᑕBᑌG🕸 retweeted
We have made another update to our blog on the 3CX situation: news.sophos.com/en-us/2023/0…
Adding:
- new analysis of an emergent line of inquiry concerning a timestamp mechanism in the malicious code
- information on analysis of other Electron-built apps using ffmpeg.dll
1/7
SEᑕBᑌG🕸 retweeted
NEW: Telerik UI exploitation leads to cryptominer, Cobalt Strike infections
Attacker targets bugs in a popular web application graphical interface development tool...
1/16
SEᑕBᑌG🕸 retweeted
I've become convinced that in the medium-term, very large models-as-a-service are going to become an important tool within defensive cybersecurity, and this is what Younghoo Lee and I will be talking about at Blackhat USA this year blackhat.com/us-22/briefings…
SEᑕBᑌG🕸 retweeted
It strikes me that far worse than ML's branding as 'AI' is the branding of the search to unify quantum physics and relativity as a search for 'a theory of everything', when that theory wouldn't begin to explain the behavior of an amoeba
SEᑕBᑌG🕸 retweeted
Ransomware Adversary Mishap #2:
The Maze ransomware attackers who exfiltrated a stack of victim files only to discover they were unreadable because they’d been encrypted by DoppelPaymer ransomware a week earlier.
More ransomware adversary mishaps: news.sophos.com/en-us/2021/0…
SEᑕBᑌG🕸 retweeted
NEW: Fake pirated software sites serve up malware droppers as a service 🏴☠️
During our recent investigation into an ongoing Raccoon Stealer campaign, we found the malware was being distributed by a network of websites acting as a “dropper as a service,”... 1/00
SEᑕBᑌG🕸 retweeted
You are just a fancy sea snail
Probably the best part of the interview
Here's the clip for those who missed it:
podclips.com/c/pYbWdL?ss=t&s…
SEᑕBᑌG🕸 retweeted
⚠️ Have questions about ProxyShell? Join @MatGangwer, head of the Sophos Managed Threat Response (MTR) team, to learn:
✔️ How attackers are exploiting the vulnerabilities
✔️ How to determine if you are impacted
✔️ Recommendations on how to respond
RSVP: register.gotowebinar.com/reg…
SEᑕBᑌG🕸 retweeted
We arranged our @gather_town avatars in rickroll configuration as part of a send-off to our summer interns. It's this kind of weirdness and creativity that powers innovation on the @SophosAI team :)
