Notices by :rainbowCrow: (cr0w@infosec.exchange), page 4

Vercel networks in case anyone wants to block them for whatever reasons you might have today.

76.76.21.0/24
66.33.60.0/24
64.29.17.0/24
64.239.123.0/24
64.239.109.0/24
216.230.86.0/24
216.230.84.0/24
216.198.79.0/24
216.150.16.0/24
216.150.1.0/24
198.169.2.0/24
198.169.1.0/24
155.121.0.0/16
143.13.0.0/16

Cloudflare is protecting a booter. Then rather than stop the criminals from leveraging Cloudflare infra, they sold their protection to the victim. How is this even legal? We all know it's been happening at smaller scale but even with a high profile extended attack like Ubuntu has been dealing with, their response is "LOL. Fuck you. Pay me."

#fuckCloudflare

AI in a nutshell.

It's wild how many dudes out there followed this exact life path:

Computers are my whole personality.

Gaming is my whole personality.

4chan is my whole personality.

Guns are my whole personality.

Blockchain is my whole personality.

Bitcoin is my whole personality.

NFTs are my whole personality.

Tax evasion

Owning the libs is my whole personality.

Flag code violations.

Defending billionaires is my whole personality.

Civil rights are bad, actually.

Defending AI is my whole personality.

I am very smart.

It's like an entire generation of American men.

@cxiao @chillybot @da_667 Pretty sure we're all catte around here at this point. :catte:

RE: https://swecyb.com/@orlysec/116483284337537623

LMFAOOOOOOOOO

RE: https://flipboard.com/@themirror/the-mirror-sl5qf4b2z/-/a-B5jPPrhfQF65kR0D0kTx_g%3Aa%3A1643597903-%2F0

hashtag team elephant

OH from my partner in the other room, who is not in IT: Teams is not a document repository!

It's not just nerds fighting that shit. 😆

@Sempf Yeah, that's a no for me. My risk models remain unchanged.

He is right that AI gives us the catalyst and the tools.

@darkuncle @Sempf Easier for attackers means a potentially higher likelihood of occurrence, but it does not change the severity of impact. And while the likelihood does theoretically impact the risk score, for at least some orgs, it's minimal to no change when your adversaries are at the top of the field already. The rising tide of AI may be lifting all attackers' boats, but the high water mark remains the same, despite the industry continuously claiming a tsunami is coming. I just don't see it.

@Sempf @darkuncle

Computers are fucking stupid.

Happy International Birds Day :brdKnife:

Cisco listed by Shinyhunters.

3 breaches (UNC6040, Salesforce Aura, and AWS accounts). Total over 3M Salesforce records containing PII, Github repositories, AWS buckets and other internal corporate data have been compromised.

#ransomware

You know what would be cool? If people would acknowledge that Microsoft has no fucking idea how their own shit works and stop giving them the benefit of the doubt, especially with things like consent and AI.

allowing html emails is still the largest risk that pretty much every org is intentionally accepting send toot

@InsiderTreat @catsalad What do you mean? Isn't that how ops usually work?

@InsiderTreat @catsalad

stares into mirror

Am I CatSalad?

@InsiderTreat @catsalad

@scottwilson @da_667 There is but I can't find it right now. That means we need moar. :catte: