sh4des @augmentedsec

London Joined May 2019

Tweets

125
Followers

73
Following

1K
Likes

627

ESET Research @ESETresearch

2 weeks ago

#ESETResearch has discovered the first known AI-powered ransomware, which we named #PromptLock. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly, which it then executes 1/6

56 674 3K 370K 1K

Download Image

Kirill Solodskikh @GarchFather

4 weeks ago

Our research team took @AIatMeta LLaMA-8B, quantized it with QLIP using post-training int8, applied SmoothQuant, and used pre-defined compiler-compatible NVIDIA configs. Why do this? Up to 2× fewer weights and 3.6× faster on one GPU. Try it with our simple Jupyter Notebook.

6 14 202 228K 187

Arda Büyükkaya @WhichbufferArda

2 months ago

A Pro-Iranian hacktivist group, APT-Iran, used RDP access to exfiltrate data and deploy LockBit Black ransomware samples to encrypt files. In a separate incident, the threat actor claimed to have compromised the Israel Ministry of Health’s network by exploiting an F5 BIG-IP…

1 19 100 14K 75

Download Image

David Kennedy @Cyb3rC3lt

7 months ago

A little blog post I put together based around a talk I gave @BSidesLondon this year. We have had some easy access into client networks using the Cloudflared binary & when it is used in conjunction with Cloudflare Warp it can be just 1 command w/out ssh. labs.jumpsec.com/bring-your-own…

2 30 108 7K 69

The DFIR Report @TheDFIRReport

6 months ago

PYSA/Mespinoza Ransomware ➡️TTR 7.5 hours ➡️Koadic and Empire for C2 ➡️7+ Credential Access techniques ➡️ADRecon, APS, quser, arp, and nltest for Discovery ➡️RDP and PsExec for Lateral Movement ➡️Files exfiltrated ➡️PYSA ransomware for Impact Report link ⬇️

2 39 129 31K 46

Download Image

Tavis Ormandy @taviso

6 months ago

You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. bughunters.google.com/blog/542484235…

39 529 2K 148K 810

Microsoft Threat Intelligence @MsftSecIntel

6 months ago

The key to securing Active Directory is being proactive about hardening policy, remediating underlying weaknesses and applying the principle of least privilege to the environment before a cyberattack. By reducing the paths from standard non-privileged users to privileged users,…

5 79 311 42K 285

SkelSec @SkelSec

7 months ago

Hey! wanna see AI performing kerberoast attack by itself? Sure you do! @M4yFly 's GOAD environment is getting shredded This is so amazing, wish I had this when I was learning >_>

10 52 230 21K 188

Download Video

Nagli @galnagli

7 months ago

Critical vulnerabilities doesn't have to be complex or have a CVE - @deepseek_ai publicly exposed their internal ClickHouse database to the world, without any authentication at all, and leaked sensitive data. No one is safe from security mistakes, follow along to learn more 🧵

46 378 2K 287K 2K

Download Image

vx-underground @vxunderground

9 months ago

Hello, we still have quite a bit of giveaways left in the queue. Due to the size, we're going to up and the ante and do 2 giveaways a day (maybe 3, depends on mood) otherwise we won't be done by Christmas-ish. Sorry for the tsunami of spam. Remaining giveaways: - TorGuard VPN 1…

121 32 467 37K 18

JUMPSEC LABS @JumpsecLabs

12 months ago

Stumbled on a rogue USB and wondered if it's safe to plug it in? Fear no more! Our DART's Part 2 guide on USB forensics provides a roadmap to analyze such devices safely!🫡 Check it out: labs.jumpsec.com/building-foren… #DFIR #DART #IR #soclife #detectionandresponse #infosec #rogueUSB

0 3 3 249 1

an0n @an0n_r0

2 years ago

poor man's browser pivot through chrome remote debugging.🔥 no need to inject into iexplorer anymore.💪 just came across this awesome solution shared by @NotMedic long ago: gist.github.com/NotMedic/b1ab7… and this is also working with msedge (it shares the same chromium engine)!🎉

9 159 539 68K 228

Download Image

Visual Studio Code @code

2 years ago

We know a lot of you prefer to git from the terminal instead of the built-in source control view. And we don't want you to feel left out of all this AI goodness. So we made this for you...

108 547 5K 434K 586

Download Video

Justin Elze @HackingLZ

2 years ago

If your C2 interface doesn't look like this reevaluate

39 49 348 45K 18

Download Image

Nasreddine Bencherchali @nas_bench

2 years ago

Next level Shit posting 😂 sorry not sorry

1 1 15 2K 0

cts🌸 @gf_256

2 years ago

CyberChef is AWESOME. Here is a pipeline that parses Google Authenticator export QR codes and generates TOTP with them

18 282 2K 161K 1K

Download Image

Justin Elze @HackingLZ

2 years ago

Handful of public wmiexec variants

8 23 108 16K 41

Download Image

vx-underground @vxunderground

2 years ago

tl;dr summary of United States government (and associated entities) vs ALPHV ransomware group December 10th, 2023: ALPHV primary domain goes offline, administration saying it is hardware failure December 10th, 2023: Rumors circulate that is it LE taking down ALPHV December…

45 197 1K 243K 200

Download Image

Paws on a Dime @Crimeonadime

2 years ago

Drop what you're doing and listen to some @yunginnanet thats my years thing

2 2 8 751 0

Ozzny @Ozzny_CS2

2 years ago

HUGE SECURITY EXPLOIT IN CS2 RIGHT NOW⚠️ This image has been going around reddit for the last few hours (very explicit, blurred for obvious reasons). People were saying it's fake, but it isn't. Apparently, there is a security exploit with Steam names inside CS2, which allows…