Cary Hendricks 🏴🇿🇦
@figjam.sogeek.org
BBQ fanatic • InfoSec dabbler • Cyber Security Instructor • Hacking • Forensics • DIFR • Compliance • Award Winner • Speaker • Caught making faces on TV • Veteran • formerly @fignjam on X
@hackglasgow.bsky.social hey.. ok, I will start this off! Thank you for the awesome conference and having me on first!
April 30, 2025 at 5:29 PM
@hackglasgow.bsky.social hey.. ok, I will start this off! Thank you for the awesome conference and having me on first!
Right, after a mental couple of weeks, it is maybe time to start posting again. The hiatus is over.
April 30, 2025 at 5:18 PM
Right, after a mental couple of weeks, it is maybe time to start posting again. The hiatus is over.
Reposted by Cary Hendricks 🏴🇿🇦
Researchers reveal OT-specific malware in use and in development - Help Net Security www.helpnetsecurity.com/2024/12/17/o...
Researchers reveal OT-specific malware in use and in development - Help Net Security
Malware that targets ICSes and OT-specific machines is rare, but security researchers have recently identified two salient threats.
www.helpnetsecurity.com
December 18, 2024 at 8:26 AM
Researchers reveal OT-specific malware in use and in development - Help Net Security www.helpnetsecurity.com/2024/12/17/o...
Reposted by Cary Hendricks 🏴🇿🇦
97 percent of banks hit by third-party data breaches betanews.com/2024/12/11/9...
97 percent of banks hit by third-party data breaches
New analysis released by SecurityScorecard reveals that 97 percent of the top 100 US banks have experienced a third-party data breach in the past year. As banks increasingly rely on third-party ven…
betanews.com
December 15, 2024 at 11:15 AM
97 percent of banks hit by third-party data breaches betanews.com/2024/12/11/9...
The last few weeks something has been driving me nuts. My #zigbee devices in #homeassistant have suddenly get lots of latency to the point that #z2mqtt has gone very slow. So still in troubleshooting mode but I found this diagram for wifi and zigbee channel relationships. 1/n
December 7, 2024 at 12:22 PM
The last few weeks something has been driving me nuts. My #zigbee devices in #homeassistant have suddenly get lots of latency to the point that #z2mqtt has gone very slow. So still in troubleshooting mode but I found this diagram for wifi and zigbee channel relationships. 1/n
@mrr3b00t.bsky.social what was that dang chrome:// thing that was posted earlier this week. It was about debug.
I did not bookmark it.. LOL
I did not bookmark it.. LOL
November 22, 2024 at 9:43 AM
@mrr3b00t.bsky.social what was that dang chrome:// thing that was posted earlier this week. It was about debug.
I did not bookmark it.. LOL
I did not bookmark it.. LOL
Reposted by Cary Hendricks 🏴🇿🇦
By me @forbes.com : Google's new scam advisory service highlights landing page cloaking threat.
#infosec
www.forbes.com/sites/daveyw...
#infosec
www.forbes.com/sites/daveyw...
Google Issues New Security Cloaking Warning As Attackers Use AI In Attacks
With scams and cyber attacks increasing in both number and sophistication, Google warns users about the use of landing page cloaking and AI.
www.forbes.com
November 17, 2024 at 2:47 PM
By me @forbes.com : Google's new scam advisory service highlights landing page cloaking threat.
#infosec
www.forbes.com/sites/daveyw...
#infosec
www.forbes.com/sites/daveyw...
Reposted by Cary Hendricks 🏴🇿🇦
A look at the Information Laundromat website analysis tool (informationlaundromat.com)
- Content similarity analysis
- Metadata similarity analysis
- Ranking technical website indicators
digitalinvestigations.substack.com/p/a-look-at-...
Author @craigsilverman.bsky.social
- Content similarity analysis
- Metadata similarity analysis
- Ranking technical website indicators
digitalinvestigations.substack.com/p/a-look-at-...
Author @craigsilverman.bsky.social
November 17, 2024 at 4:35 PM
A look at the Information Laundromat website analysis tool (informationlaundromat.com)
- Content similarity analysis
- Metadata similarity analysis
- Ranking technical website indicators
digitalinvestigations.substack.com/p/a-look-at-...
Author @craigsilverman.bsky.social
- Content similarity analysis
- Metadata similarity analysis
- Ranking technical website indicators
digitalinvestigations.substack.com/p/a-look-at-...
Author @craigsilverman.bsky.social
While I am getting stuff ready for the course, I would be remiss in not telling folks about Vortimo. These a genuinely good folks and make good tools. Here is one. Tracking every page you went to. (Also just renewed my annual license)
find.osint-tool.com
find.osint-tool.com
Vortimo OSINT Tool
Web site created using create-react-app
find.osint-tool.com
November 17, 2024 at 3:22 PM
While I am getting stuff ready for the course, I would be remiss in not telling folks about Vortimo. These a genuinely good folks and make good tools. Here is one. Tracking every page you went to. (Also just renewed my annual license)
find.osint-tool.com
find.osint-tool.com
Well the prep for next week is going well. A full week of digital forensic course delivery. Going to be superfun, but hope the students will be having just as much fun!
Technical difficulty at the moment, the heating in the room is having an issue so may suffer from brainfreeze!
Technical difficulty at the moment, the heating in the room is having an issue so may suffer from brainfreeze!
bart simpson is holding a bucket of green liquid in his mouth
ALT: bart simpson is holding a bucket of green liquid in his mouth
media.tenor.com
November 17, 2024 at 3:15 PM
Well the prep for next week is going well. A full week of digital forensic course delivery. Going to be superfun, but hope the students will be having just as much fun!
Technical difficulty at the moment, the heating in the room is having an issue so may suffer from brainfreeze!
Technical difficulty at the moment, the heating in the room is having an issue so may suffer from brainfreeze!
Reposted by Cary Hendricks 🏴🇿🇦
CTO at NCSC Summary: week ending November 17th
Zero-days everywhere...
ctoatncsc.substack.com
November 16, 2024 at 11:57 AM
Reposted by Cary Hendricks 🏴🇿🇦
Here's one useful #OSINT tool: a video downloader for BlueSky.
Did I just spend the past 6 hours building a video downloader for the heck of it?
Yes, yes I did lol...
bsvdl.fly.dev
Yes, yes I did lol...
bsvdl.fly.dev
November 17, 2024 at 2:56 PM
Here's one useful #OSINT tool: a video downloader for BlueSky.
Today is archiving accounts, and find followers. I am sure it will eventually rebuild. :-)
Somehow the old accounts felt like teenagers growing up and find their own way and finally moving out.
Somehow the old accounts felt like teenagers growing up and find their own way and finally moving out.
November 16, 2024 at 8:52 AM
Today is archiving accounts, and find followers. I am sure it will eventually rebuild. :-)
Somehow the old accounts felt like teenagers growing up and find their own way and finally moving out.
Somehow the old accounts felt like teenagers growing up and find their own way and finally moving out.
Reposted by Cary Hendricks 🏴🇿🇦
Its always DNS
November 14, 2024 at 7:28 PM
Its always DNS
*snigger* 4.3 trillion viewers daily.. someone read an article from said website. 🧅 👀
It is beyond funny.
It is beyond funny.
November 14, 2024 at 7:25 PM
*snigger* 4.3 trillion viewers daily.. someone read an article from said website. 🧅 👀
It is beyond funny.
It is beyond funny.
Ok, who unplugged it?
November 14, 2024 at 5:25 PM
Ok, who unplugged it?
To help with muscle memory, I swapped 2 icons around on my phone. Seems to help. One is now on the first page, the other on the last page and a lot more effort to get to..
November 14, 2024 at 5:07 PM
To help with muscle memory, I swapped 2 icons around on my phone. Seems to help. One is now on the first page, the other on the last page and a lot more effort to get to..
I notice a lot of these “invalid handle” in accounts. Don’t think it means they left, maybe move from generic to custom domain? Or am I grasping at straws ?
November 14, 2024 at 4:58 PM
I notice a lot of these “invalid handle” in accounts. Don’t think it means they left, maybe move from generic to custom domain? Or am I grasping at straws ?
Gadzooks.. diving on NIST 800.. mainly because I need to align all the other things I work on against this. Then at the end of the week.. documentation on how it crosses over.
Fun times, maybe not, but somewhat interesting.
Fun times, maybe not, but somewhat interesting.
a cat with a wig on its head is laying down on the floor
ALT: a cat with a wig on its head is laying down on the floor
media.tenor.com
November 12, 2024 at 4:28 PM
Gadzooks.. diving on NIST 800.. mainly because I need to align all the other things I work on against this. Then at the end of the week.. documentation on how it crosses over.
Fun times, maybe not, but somewhat interesting.
Fun times, maybe not, but somewhat interesting.
So.. pity it is cloudy as I think this may increase to 600+ to see.. then again, maybe not..
November 10, 2024 at 6:39 PM
So.. pity it is cloudy as I think this may increase to 600+ to see.. then again, maybe not..
Sometimes Amazon deliveries are fab, delivery at 7:10am BC (Before Coffee) 😂
November 9, 2024 at 7:12 AM
Sometimes Amazon deliveries are fab, delivery at 7:10am BC (Before Coffee) 😂
Reposted by Cary Hendricks 🏴🇿🇦
I am happy to share another new resource I created called the Ransomware Vulnerability Matrix
🔗 github.com/BushidoUK/Ra...
#CTI #Ransomware #CVE #Exploit
🔗 github.com/BushidoUK/Ra...
#CTI #Ransomware #CVE #Exploit
GitHub - BushidoUK/Ransomware-Vulnerability-Matrix: A collection of CVEs weaponized by ransomware operators
A collection of CVEs weaponized by ransomware operators - BushidoUK/Ransomware-Vulnerability-Matrix
github.com
October 25, 2024 at 11:26 PM
I am happy to share another new resource I created called the Ransomware Vulnerability Matrix
🔗 github.com/BushidoUK/Ra...
#CTI #Ransomware #CVE #Exploit
🔗 github.com/BushidoUK/Ra...
#CTI #Ransomware #CVE #Exploit