Apopheniac @[email protected]

Red Pandas having a snack will always put a smile on your face.

Good job boys.

Small scoop here: In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

https://krebsonsecurity.com/2023/09/experts-fear-crooks-are-cracking-keys-stolen-in-lastpass-breach/

From the story:

"...the researchers learned the attackers frequently grouped together victims by sending their cryptocurrencies to the same destination crypto wallet.

By identifying points of overlap in these destination addresses, the researchers were then able to track down and interview new victims. For example, the researchers said their methodology identified a recent multi-million dollar crypto heist victim as an employee at Chainalysis, a blockchain analysis firm that works closely with law enforcement agencies to help track down cybercriminals and money launderers.

Chainalysis confirmed that the employee had suffered a high-dollar cryptocurrency heist late last month, but otherwise declined to comment for this story."

It begins, the final stages of the merge.

RT: https://poa.st/objects/6cb8cabd-6f3d-4f7e-bfaf-663077afb731

"Exploiting aCropalypse: Recovering Truncated PNGs"

My writeup on exploiting CVE-2023-21036 (un-cropping Android screenshots!)

https://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html

Three Random Fires Happen at Three Separate Oil Refineries in Mexico on Same Day
Tin foil hat time.
https://theconservativetreehouse.com/blog/2023/02/24/three-random-fires-happen-at-three-separate-oil-refineries-in-mexico-on-same-day/

Where would you rather live:

Seeing multiple train derailments happening all over the country makes me think that using the government to fuck over railway workers and force them to work without paid time off might have been something of a mistake.

Excited to see the open-source canarytokens.org offering #Azure #CanaryTokens! One more type of sensitive data that attackers now need to worry about using: https://blog.thinkst.com/2023/02/canarytokens-org-welcomes-azure-login-certificate-token.html

@backagain88 @Effortless That's correct, it's video games.