sno bunny

Sun May 17 14:05:48 2020
<773ab1f1> <https://medium.com/@TalBeerySec/zooming-on-zoom-5-encryption-cc7e9b710b9f&gt;
— Zooming on Zoom 5 Encryption
— I am a sucker for “Load Bearing Analogies” (© Dan Kaminsky) in cryptography. I…

Wed May 13 20:48:25 2020
<5547a085> <https://github.com/git-artes/gr-tempest|https://github.com/git-artes/gr-tempest>
— git-artes/gr-tempest
— An implementation of TEMPEST en GNU Radio

Wed May 13 20:07:15 2020 <5547a085> <https://old.reddit.com/r/conspiracy_commons/comments/gin79z/i_made_an_alt_because_this_is_sketchy_so_i_can/|https://old.reddit.com/r/conspiracy_commons/comments/gin79z/i_made_an_alt_because_this_is_sketchy_so_i_can/> — I made an alt because this is sketchy, so I can only post this here. The government (DEA, ICE, and local authorities) is hiding cameras on telephone poles, and then not securing those cameras with passwords. Anyone can access them. — Someone (the government) is spying on […]

Wed May 13 16:09:47 2020
<8f79fcda> goddamn mongorians

Wed May 13 15:47:10 2020 <8f79fcda> <@U4FQ46RGU> interesting to note that there was an uptick in BTC price the April 28th/29th which correlates with when these attacks began. <https://www.wordfence.com/blog/2020/05/one-attacker-rules-them-all/> — One Attacker Outpaces All Others — Starting April 28th, we saw a 30 times increase in cross site scripting attack volume, originating from a single […]

Wed May 13 14:19:06 2020
<773ab1f1> oh snap clever
<773ab1f1> nice way to weaponize a payload fire and forget style

Wed May 13 13:46:13 2020
<773ab1f1> Do you know how the XSS payload was delivered to the admin?
<8f79fcda> Through a wp_post table

Wed May 13 13:20:57 2020 <8f79fcda> <@U4FQ46RGU> <https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-sites-targeted-in-large-scale-attacks/|https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-sites-targeted-in-large-scale-attacks/> — Nearly a Million WP Sites Targeted in Large-Scale Attacks — Our Threat Intelligence Team has been tracking a sudden uptick in attacks targeting Cross-Site Scripting(XSS) vulnerabilities that began on April 28, 2020 and increased over the next few days to approximately 30 times the normal volume […]

Wed May 13 02:39:32 2020
<8f79fcda> one looks like an azure vuln

Wed May 13 02:28:19 2020
<8f79fcda> i don’t know enough details to speak competently on the details. The fact that 2 happened in a day is of note. totally different systems/vendors

Wed May 13 02:06:47 2020
<773ab1f1> Fancy, kno how yet?

Wed May 13 01:40:41 2020
<8f79fcda> Cyberattacks are up today
<8f79fcda> our phone service at work disabled outgoing calls
<8f79fcda> and we had a JS injection attack on one of our production servers that negotiated it’s way to …

Wed Apr 29 18:56:48 2020
<d666283b> <https://www.hackasat.com/|https://www.hackasat.com/>

Wed Apr 29 15:48:11 2020
<d666283b> <https://techcrunch-com.cdn.ampproject.org/c/s/techcrunch.com/2020/04/22/air-force-hack-satellite/amp/|https://techcrunch-com.cdn.ampproject.org/c/s/techcrunch.com/2020/04/22/air-force-hack-satellite/amp/&gt…

Mon Apr 27 14:05:05 2020 <773ab1f1> <https://www.cyberscoop.com/poland-cyberattack-russia-us-military/> — Poland suggests Russian operatives planted a fake letter following data breach — Polish security services on Thursday suggested the Russian government could be behind a cyberattack against an elite Polish military academy and an ensuing effort to undermine U.S.-Polish relations. Stanislaw Zaryn, a spokesman for the Minister-Special Services Coordinator, which oversees Polish […]