Doom Labs
doomlabs.bsky.social
Doom Labs
@doomlabs.bsky.social
Oz based Sec Analyst, IR survivor and professional procrastinator. Attracted to uncommon sense, consuming and endless learning.
Just like you, I'm cooler online.

If you've made it this far...don't forget to call your mum once in awhile for $%#* sake!
Reposted by Doom Labs
What the fuck?! MassLive is now using generative "AI" to create articles, which would be bad enough in any context but is especially egregious when publishing allegations that someone committed a crime.

@masslive.bsky.social #Massachusetts #mapoli

www.masslive.com/news/2025/10...
October 16, 2025 at 7:36 PM
Reposted by Doom Labs
Shits getting dicey in DC

I was just mobbed by a gang of furloughed workers asking if I had any datasets that needed analysis or if I had any spare compliance reports they could review
October 17, 2025 at 11:59 AM
Reposted by Doom Labs
Turning Windows into a more expensive Alexa is probably right there with the dumbest decision in tech since Microsoft's infamous Xbox One launch that basically killed its console forever
Microsoft launches new Windows features to help weave AI into regular Windows 11 PCs, including rolling out a "Hey, Copilot!" wake word and Copilot Vision (Tom Warren/The Verge)

Main Link | Techmeme Permalink
October 16, 2025 at 6:52 PM
Reposted by Doom Labs
Our DEF CON33 ICS Village talk is now on YouTube!

@sam-hans0n.bsky.social and I share stories of malware we discovered while searching for ICS threats, and discuss our approach to assessing their reputation.

Don't Cry Wolf: Evidence-Based Assessment of ICS Threats
DEF CON 33 - Don’t Cry Wolf: Evidence based assessments of ICS Threats - Jimmy Wylie & Sam Hanson
CS Malware is rare. Yet, ICS Malware like FrostyGoop and TRISIS, and related discoveries like COSMICENERGY, were all found on VirusTotal, so analysts still hunt for novel ICS Malware in public malware repositories. In the process, they discover all kinds of tools: research, CTFs, obfuscated nonsense
www.youtube.com
October 16, 2025 at 7:18 PM
Reposted by Doom Labs
Brian Krebs taking security and AI at CyberCon
#cybersecurity
#CyberCon
October 15, 2025 at 10:19 PM
Reposted by Doom Labs
In a world where basic human rights, things as simple as a living wage or going to the doctor or just using the damn public restroom, are being sneeringly taken away, anyone who says they "don't follow politics" or the like is living in massive denial of what politics is and how it affects them.
October 15, 2025 at 9:58 PM
Reposted by Doom Labs
"I'm really into evaluating threat models, but I'm not so into understanding actions taken by groups, or power relations, or what the impact of various events are on groups."

(I know "into cybersecurity not politics" just means "i think finding IOCs is cool" ie "i'm bad at cybersecurity" but still)
October 15, 2025 at 9:55 PM
Reposted by Doom Labs
Who the fuck wants this?
This is the future of Windows. Microsoft wants to rewrite Windows to turn computers into AI PCs that you talk to. It's now bringing AI features to all Windows 11 PCs today, in a bid to convince you to talk to your PC and let AI control it. Full details 👇 www.theverge.com/news/799768/...
Microsoft wants you to talk to your PC and let AI control it
Copilot Voice and Vision are now rolling out.
www.theverge.com
October 16, 2025 at 1:48 PM
Reposted by Doom Labs
Trump's new AI Action Plan contains a number of sections related to cybersecurity, including protecting AI users from attacks and developing secure models. www.whitehouse.gov/wp-content/u...

Quick run-through... 🧵
July 23, 2025 at 5:38 PM
Reposted by Doom Labs
Hell is a scam group text sent to 18 other people.
July 22, 2025 at 5:05 PM
Reposted by Doom Labs
When AI "leaders" warn of AI problems.
July 22, 2025 at 6:28 PM
Reposted by Doom Labs
Huge thanks to @lorenzofb.bsky.social for the humbling inclusion of Hack To The Future on this list ❤️💙🤍

techcrunch.com/2025/07/19/t...
These are our favorite cyber books on hacking, espionage, crypto, surveillance, and more | TechCrunch
These are our favorite cybersecurity books, both by fiction authors, as well as journalists and researchers.
techcrunch.com
July 20, 2025 at 12:21 AM
Reposted by Doom Labs
Oh the critical vuln is in SHAREPOINT, gotcha
July 20, 2025 at 5:25 PM
Reposted by Doom Labs
Reposted by Doom Labs
Here @jasonkoebler.bsky.social writes his friend was filling out surveys/games to get few dollars off essential medication. People are outpouring their "horrendous, inhumane, heartbreaking experiences with a profit-driven, private American healthcare system" www.404media.co/behind-the-b...
December 6, 2024 at 5:37 PM
Reposted by Doom Labs
Another day, another pointless BC story that's just an ad for 0Patch. I won't link it. Without vulnerability details or a CVE ID, there is no useful information for the reader other than "Use this product," which is, y'know, an advertisement.
December 6, 2024 at 5:37 PM
Reposted by Doom Labs
Facebook, WhatsApp snd Snap already prohibit under 13s from joining. All this does is raise existing self imposed minimums by three years and ask that social networks take reasonable steps to enforce
November 29, 2024 at 8:30 AM
Reposted by Doom Labs
What's the purpose of trying to get $1.1 million out of an intern? Just the principle of it all?

ByteDance seeks $1.1 mln damages from intern in AI breach case, report says
www.reuters.com/technology/a...
ByteDance seeks $1.1 mln damages from intern in AI breach case, report says
China's ByteDance is suing a former intern for $1.1 million, alleging he deliberately attacked its artificial intelligence large language model training infrastructure, a case that has drawn widespread attention within China amid a heated AI race.
www.reuters.com
November 29, 2024 at 1:12 PM
Reposted by Doom Labs
SYDNEY, Nov 28 (Reuters) - Australia's upper house of parliament on Thursday passed legislation banning social media for children aged under 16 that could set a standard for other countries to follow as Big Tech faces challenges globally over its power.
November 28, 2024 at 12:22 PM
Reposted by Doom Labs
New, by me: Security researchers say North Korean hackers, posing as VCs, recruiters, and remote IT workers, have infiltrated "hundreds of organizations" and stolen billions of crypto in recent years to fund the regime's nuke program.

My dispatch from Cyberwarcon: techcrunch.com/2024/11/28/n...
North Korean hackers have stolen billions in crypto by posing as VCs, recruiters and IT workers | TechCrunch
Security researchers say North Korean hackers have infiltrated hundreds of organizations with the goal of taking money and stealing data to further the regime's nuclear weapons program.
techcrunch.com
November 28, 2024 at 2:02 PM