Kevin Beaumont

Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.

I have Direct Messages disabled - you can send them, but I will never receive them.

My website: https://doublepulsar.com
Github: https://github.com/GossiTheDog
Signal: GossiTheDog.1337
Threads: https://threads.net/@GossiTheDog

Public Key

npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye

NIP-05 Address

gossithedog_at_cyberplace.social@momostr.pink

Profile Code

nprofile1qqs0uvd8fnn6wdtgj6r2f29akaj63axmj3werdn5ztr4qk9g9fgullgqz02ha

Author Public Key

npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye

Show more details

Last Notes

2024-09-14 16:56:56

Just saw a post on Mastodon via Threads federation that was a screenshot of a BlueSky post which had a screenshot of an X post.
https://cyberplace.social/system/media_attachments/files/113/136/960/326/537/563/original/ccfcdb72ee5c1be4.mp4

2024-09-06 11:40:04

- reply

contain = you try to evict attacker from your infrastructure by containing important and risky systems, and try to figure out how they got in and what they touched.

2024-08-06 08:15:34

ONS salary data for 2024 is out
https://www.forbes.com/uk/advisor/business/average-uk-salary-by-age/
Average UK salary is £35.8k

2024-08-06 07:20:54

I’ve noticed a significant uptick of scanning for webshells on Microsoft Exchange Server boxes in the past 24 hours in my honeypots. #threatintel

2024-08-06 06:52:24

- reply

BMW set upon and Asian men inside attacked - how violence surged in one city https://www.bbc.com/news/articles/cj622z0w7n0o

2024-08-06 06:42:49

- reply

yeah 24 years ago

2024-08-05 22:45:00

- reply

it’s really tacky IMHO, capitalism is the worst

2024-08-05 22:43:52

- reply

good!

2024-08-05 22:11:05

- reply

Elon Musk's UK 'civil war' post criticised by No 10 https://www.bbc.com/news/articles/c5ydddy3qzgo

2024-08-05 22:04:25

- reply

The funny thing about that one btw is I didn’t leak the MSPAC call transcript.. but I sure as shit tweeted that article while working there.
At the time they were paying anti-trans candidates and election result deniers.. while saying they did it for access to lobby. I’d never worked for an org like that before.

2024-08-05 21:51:47

- reply

Microsoft President Brad Smith explains how political contributions really work https://www.cnbc.com/2021/01/22/microsoft-president-brad-smith-defends-mspac-to-employees.html
https://cyberplace.social/system/media_attachments/files/112/911/626/914/395/870/original/7e5975fd7a781ffb.jpeg

2024-08-05 21:45:11

- reply

One thing I don’t understand is how Microsoft is completely absent from discussion about antitrust.
I mean I do, they spend very significant amounts of money lobbying.

2024-08-05 21:36:34

- reply

yes

2024-08-05 21:31:06

Good.
Google's online search monopoly is illegal, US judge rules https://www.bbc.com/news/articles/c0k44x6mge3o

2024-08-05 21:20:30

In case you missed it - CrowdStrike are attempting to use legal threats to suppress criticism and parody. https://doublepulsar.com/crowdstrike-trying-to-use-legal-threats-to-suppress-criticism-and-parody-of-global-it-outage-49320e922120

2024-08-05 20:31:15

- reply

Well done to Elon for purchasing and mostly sinking a company in under two years.
https://cyberplace.social/system/media_attachments/files/112/911/310/490/461/585/original/96aaf61959f116f5.jpeg

2024-08-05 20:29:11

One thing to know about security mastodon - lots of people are just posting to Twitter and replicating their posts here automatically.

2024-08-05 20:23:21

Twitter is closing its head office, after mandating staff return to said office and firing those who didn’t. https://www.nytimes.com/2024/08/05/technology/x-twitter-san-francisco-office.html

2024-08-05 19:47:28

If you reported a vulnerability to Microsoft over the past few decades to January 2024, consider any writeup and proof of concept compromised. #threatintel

2024-08-05 18:34:53

- reply

If anybody has any CATCHDNS samples I’d love to see them uploaded to VirusTotal 🙏

2024-08-05 18:23:49

Challenge - investigate how Windows silent calls to msftconnecttest.com to check internet connectivity is exploitable. https://www.volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/

2024-08-05 16:57:53

- reply

Update: https://www.bleepingcomputer.com/news/security/keytronic-reports-losses-of-over-17-million-after-ransomware-attack/
#threatintel

2024-08-05 14:21:17

The AI stock market crash is some time away, I think. Majority of orgs are still drinking the marketing, and will be pissed for a few years.

2024-08-05 13:28:45

- reply

I don’t know, I’m not a business expert. However there are lots of orgs who operate at very heavy losses for a long period of time - I guess they are propped up by investors.

2024-08-05 12:15:17

- reply

I've written up a bit about CrowdStrike's latest bold strategy.
https://doublepulsar.com/crowdstrike-trying-to-use-legal-threats-to-suppress-criticism-and-parody-of-global-it-outage-49320e922120

2024-08-05 11:19:37

- reply

CrowdStrike are publicly threatening their customer, Delta. https://www.theverge.com/2024/8/5/24213521/crowdstrike-refutes-blame-delta-outage-litigation
https://cyberplace.social/system/media_attachments/files/112/909/141/486/505/098/original/ad4d68cb28daf721.jpeg

2024-08-05 09:47:27

- reply

Bloomberg report a vast majority of the CrowdStrike losses reported by customers will be judged by insurance as not covered by policies. https://www.bloomberg.com/news/articles/2024-08-02/billions-in-damages-from-crowdstrike-outage-to-go-uninsured

2024-08-04 20:24:40

- reply

EFF are calling for antitrust action after the CrowdStrike incident https://www.eff.org/deeplinks/2024/07/crowdstrike-antitrust-and-digital-monoculture

2024-08-04 19:39:38

- reply

yeah I limited it off the back of this, he basically told on his own instance

2024-08-04 19:12:09

My LinkedIn profile views are basically every org I’ve annoyed at any given moment.
https://cyberplace.social/system/media_attachments/files/112/905/337/283/685/338/original/67e5225fa2349f40.jpeg

2024-08-04 19:08:28

- reply

I got stung by a snake and died as I didn’t know how to fix the poison in time, so in many years Red Dead Redemption 2 is the most real role playing game I’ve played.

2024-08-04 19:04:34

- reply

Lads on tour etc
https://cyberplace.social/system/media_attachments/files/112/905/307/443/617/590/original/4c61c5f8c3260b1f.png

2024-08-04 18:09:22

- reply

oh shit 😬

2024-08-04 17:48:55

- reply

🐴
https://cyberplace.social/system/media_attachments/files/112/904/919/231/097/395/original/957e0c824b0e4689.png
https://cyberplace.social/system/media_attachments/files/112/904/993/669/707/189/original/d83f7a1c4e0d7964.png
https://cyberplace.social/system/media_attachments/files/112/904/996/113/853/372/original/c76426120db6d1dd.png
https://cyberplace.social/system/media_attachments/files/112/905/003/069/248/433/original/322ddb681e9642b9.png

2024-08-04 16:40:03

- reply

I am terribly surprised this guy turned out to be a moron.
https://cyberplace.social/system/media_attachments/files/112/904/738/632/023/410/original/1dd59dae442bcf2e.jpeg
https://cyberplace.social/system/media_attachments/files/112/904/738/899/777/672/original/d6fb67f0337f31f5.jpeg
https://cyberplace.social/system/media_attachments/files/112/904/739/214/393/179/original/27fb11c9835f343c.jpeg

2024-08-04 16:08:12

https://www.snopes.com/news/2024/08/02/imane-khelif-olympics-boxing/

2024-08-04 15:46:34

lol
https://cyberplace.social/system/media_attachments/files/112/904/528/860/255/123/original/ae58966dce33b43a.jpeg

2024-08-04 15:04:09

- reply

After burning down libraries and attacking mosques, the mob have now moved onto Holiday Inns.
Somebody is going to end getting killed if this continues.
It is blatant racism and those involved and those who enable it - including Elon after unbanning Tommy and engaging with this stuff on his own platform - should feel ashamed of themselves.
https://cyberplace.social/system/media_attachments/files/112/904/360/697/414/878/original/076d99a203d2e425.png
https://cyberplace.social/system/media_attachments/files/112/904/361/560/556/235/original/7179c3ae4f82330c.png
https://cyberplace.social/system/media_attachments/files/112/904/362/020/990/466/original/d45cd99fb7bc6ba6.png

2024-08-04 14:51:05

- reply

he’s rich is the sad truth. When you’re rich, you have the best lawyers. Plus he literally owns Twitter, which all the politicians gleefully use.

2024-08-04 14:19:05

- reply

Oh good, Elon’s jumped on the “stop the boats” bandwagon now.. for a killer who was born and raised in the UK.
https://cyberplace.social/system/media_attachments/files/112/904/184/925/206/647/original/bcdd1a6b05fb6f07.jpeg

2024-08-04 11:58:28

- reply

🐴
https://cyberplace.social/system/media_attachments/files/112/903/631/996/758/062/original/fcd7c25af0d38d2f.png
https://cyberplace.social/system/media_attachments/files/112/903/623/512/730/877/original/75135f2c2c6995db.png
https://cyberplace.social/system/media_attachments/files/112/903/626/430/410/198/original/5bdde54cb11c379c.png

2024-08-04 09:43:37

- reply

Twitter unbanned Tommy Robinson, which is driving a lot of this. https://www.bbc.com/news/articles/cl4y0453nv5o

2024-08-04 09:40:55

- reply

I used to live just down the road from this in Liverpool. Locals burnt it down and stopped the fire brigade from putting out the fire.
https://cyberplace.social/system/media_attachments/files/112/903/091/154/014/934/original/ccc8591c3a6d067f.jpeg

2024-08-04 07:31:25

- reply

More than 90 arrests after far-right demonstrations turn violent https://www.bbc.com/news/articles/c0jqjqxl3dyo

2024-08-04 07:20:57

- reply

Rioting is still continuing in parts of the UK due to social media posts about the Southport attacker.
People are turning up with “STOP THE BOATS” banners.
It was a kid born in Wales.
https://cyberplace.social/system/media_attachments/files/112/902/540/733/944/340/original/f79ce67ce51281e8.jpeg

2024-08-03 23:18:32

Al Jazeera rebuffs Israeli claim killed journalist was Hamas operative https://www.bbc.com/news/articles/c1rwr8lj9jro

2024-08-03 22:52:33

Copilot’s front page on the app today suggests I ask “tell me a fact”.
I did.. the first one is “Banging your head against a wall burns 150 calories”, which links to a Reddit thread, which links to an article, from a “contributor”, which mentions it in the headline then has no citation or mentions it again.
https://cyberplace.social/system/media_attachments/files/112/900/541/079/569/043/original/58d53c7bcab70c55.png
https://cyberplace.social/system/media_attachments/files/112/900/541/572/661/708/original/3b4db94ad12b87e0.png

2024-08-03 21:21:34

- reply

Previously on Crowdstrike Falcon vulnerability research, check out this timeline where they tried to use NDAs to avoid disclosure, then fixed it without telling anybody. https://modzero.com/modlog/archives/2022/08/22/ridiculous_vulnerability_disclosure_process_with_crowdstrike_falcon_sensor/index.html

2024-08-03 19:52:02

- reply

I only cache media for one day, which is sub 100gb.
No real user impact - if a user views an old post, it just retrieves it from the original server on load.

2024-08-03 18:34:52

- reply

I’m gonna end up 100%’ing it, aren’t I
https://cyberplace.social/system/media_attachments/files/112/899/528/268/959/052/original/7bbe97a616381b7b.jpeg

2024-08-03 18:26:08

- reply

Me trying to remember the controls in Red Dead Redemption 2 six years later
https://cyberplace.social/system/media_attachments/files/112/899/493/988/456/781/original/3048ebe4f83c3e64.mp4

2024-08-03 15:59:57

Back in 2018 I took two weeks off work for the launch of Red Dead Redemption 2.
I played it for about 50 hours, but only completed about 40% of the main story.
I just loaded it up for the first time since then and, oh boy, I forgot how good this world is.

2024-08-03 10:35:42

- reply

fully agree. People in China are consistently doing the best research, while us westerners high five each other for being shit in comparison

2024-08-03 09:46:11

If you’re a fan of the BBC’s Saving Lives at Sea, I shot some of the aerial shot footage in upcoming series 10.

2024-08-03 06:47:42

- reply

360 takes a look at the Crowdstrike kernel drivers - finds they implement an eBPF like system, contain a wide attack surface, don’t check validity of update files (eg no signing of updates) and claim they contain conditions for LPE and RCE vulnerabilities. https://mp.weixin.qq.com/s/uD7mhzyRSX1dTW-TMg4UhQ

2024-08-03 06:15:36

- reply

We’ve reached the part of the brand cycle where people are using CrowdStrike as an excuse https://www.theverge.com/2024/8/2/24212298/mrbeast-beast-games-crowdstrike

2024-08-02 22:40:33

- reply

we have way over that many servers, and my last few jobs have had that too

2024-08-02 22:39:22

This is proper facepalm stuff by the Home Office - they refused a passport for a child named Khaleesi as they said Warner Bros owns the name.
https://www.bbc.co.uk/news/articles/c4ng1xd06xwo

2024-08-02 21:14:28

- reply

XDA Developers, who were a good source of behind the scenes info during the Microsoft Recall saga, are saying Microsoft have kicked Recall into the long grass and they think it may never launch. https://www.xda-developers.com/thread/microsoft-wants-you-to-forget-about-copilot-recall-it-seems/
It’s been almost two months since Microsoft said it would launch for Insiders in “weeks” instead.

2024-08-02 20:57:35

- reply

Additionally to loop this in, CrowdStrike submitted a takedown for a parody label (they’ve since rescinded it after being called out).
https://cyberplace.social/system/media_attachments/files/112/894/427/261/866/901/original/7638af20832cf4a3.png

2024-08-02 20:52:54

- reply

CrowdStrike complained to Cloudflare about a CrowdStrike parody site… and Cloudflare took it down. Without a court order. https://clownstrike.lol/crowdmad/

2024-08-02 18:49:18

- reply

it didn’t even offer the download link

2024-08-02 15:28:53

- reply

CrowdStrike’s website then vs now
https://cyberplace.social/system/media_attachments/files/112/893/134/034/079/028/original/bf13406cec3d11dc.jpeg
https://cyberplace.social/system/media_attachments/files/112/893/134/759/551/848/original/0e436fd3e0814ae1.jpeg

2024-08-02 15:09:35

- reply

I escaped the escape room
https://cyberplace.social/system/media_attachments/files/112/893/058/870/348/237/original/080449af87c40e22.jpeg

2024-08-02 14:17:30

- reply

issue baseless DMCA claims

2024-08-02 10:44:46

- reply

somebody is going to end up writing a book about crisis comms on this whole thing 🤣

2024-08-02 10:03:40

Aside from sending cease and desists for parody websites, CrowdStrike sent a cease and desist for a label. The security industry should not try to abuse its power.
https://cyberplace.social/system/media_attachments/files/112/891/855/960/999/253/original/223809d020ca4ad0.png

2024-08-02 08:11:39

- reply

The UK government also removed the AI bill from the King’s Speech, and instead brought forward cybersecurity legislation.
“When I became secretary of state, within a very short period of time, and I’m talking hours, not multiple days, I became very, very aware that there was a cybersecurity challenge that our country faced that I simply wasn’t aware of before becoming secretary of state,”
He went on to say he’s making cybersecurity the national security priority.
https://www.theguardian.com/uk-news/article/2024/jul/29/uk-desperately-exposed-to-cyber-threats-and-pandemics-says-minister

2024-08-02 08:08:18

Good. UK Government shelves £1.3bn AI plans https://www.bbc.com/news/articles/cyx5x44vnyeo

2024-08-02 07:54:12

- reply

🤣

2024-08-02 07:38:31

https://cyberplace.social/system/media_attachments/files/112/891/284/803/675/905/original/71920170b67fc51d.png
https://cyberplace.social/system/media_attachments/files/112/891/285/239/294/064/original/a7448a490269595e.png

2024-08-01 21:58:52

- reply

pretty much, this is how big enterprise IT works

2024-08-01 21:52:17

- reply

pray for the Delta account manager on those calls

2024-08-01 20:41:49

- reply

that’s a small number compared to my last 3 employers

2024-08-01 20:40:08

Metal Materials Inc have filed an 8-K alleging “…a former executive officer of the Company deliberately de-activated and cancelled the renewal of the Company’s website, which significantly impacted the Company’s IT systems, including delivery and receipt of electronic email communications from customers, investors and other stakeholders of the Company.”
https://www.sec.gov/ix?doc=/Archives/edgar/data/1431959/000095017024089345/mmat-20240725.htm
#threatintel

2024-08-01 19:16:11

- reply

https://cyberplace.social/system/media_attachments/files/112/888/366/167/637/389/original/af6ffcb6c551a1ce.mp4

2024-08-01 19:15:24

- reply

So it looks like Twitter have locked in me. https://awscommunity.social/@TechnicalAdept/112888347799822753

2024-08-01 19:07:09

- reply

they give no shits

2024-08-01 19:06:56

At some stage the AI bubble is going to start to burst, and I think OpenAI will try throwing Microsoft under the bus somehow during that collapse.
https://cyberplace.social/system/media_attachments/files/112/888/329/826/756/426/original/618400b6e6eb0ce6.mp4

2024-08-01 19:04:11

- reply

Tried deleting my Twitter account from a desktop PC and yep, same error.
Has anybody else managed to delete their account in the past week? I’m trying to work out if they’ve set my account as protected.

2024-08-01 18:27:13

- reply

There's a really mad moment in that interview where they ask them what assistance CrowdStrike have offered, and he essentially says nothing, not even a lunch voucher.
What a time to be alive.

2024-08-01 18:12:54

- reply

Here's the Delta boss on his thoughts about the CrowdStrike incident.
They had 40k Windows Server boxes alone, all with BitLocker full disk encryption enabled, all of which wouldn't boot and weren't fixable without manually unlocking BitLocker. That had gone all in with CrowdStrike + Microsoft's most premium offerings.
He has a really good point about how tech companies have become obsessed with growth as their only metric of success, and customer satisfaction is not on the radar.
https://cyberplace.social/system/media_attachments/files/112/888/102/973/047/278/original/75bf10d9236bac86.mp4

2024-08-01 16:52:23

Is it too early to nominate a company for the Pwnie 2025 worst vendor response award?
Rabbit, an AI hardware company, fails at basic security incident response activities:
https://www.404media.co/rabbit-says-breach-not-caused-by-a-breach-is-fault-of-malicious-employee-hacktivists-journalists/

2024-08-01 15:01:59

- reply

any press is good press!

2024-08-01 14:56:24

Gartner Magic Quadrant for Unavailability
https://cyberplace.social/system/media_attachments/files/112/887/344/730/488/675/original/461becc7501f1035.jpeg

2024-08-01 13:19:46

- reply

lol, that is what I listed as my “professional job”

2024-08-01 12:24:08

- reply

Spirit Airlines in the US anticipates a $7.2 million hit to its third-quarter operating income due to operational disruptions caused by the CrowdStrike incident, which forced the carrier to cancel 470 flights.

2024-08-01 11:54:59

Tip to CEOs, don’t refuse to take a pay cut, spend millions of dollars on toy cars, invite your staff around to see them, then lay off those people. https://www.eurogamer.net/bungie-ceo-criticised-for-spending-millions-on-classic-cars-as-calls-for-leadership-changes-escalate

2024-08-01 11:25:17

- reply

Sophos have a blog out listing all their kernel drivers, when they load, how they’re tested etc - it’s really good. https://news.sophos.com/en-us/2024/08/01/driving-lessons-the-kernel-drivers-in-sophos-intercept-x-advanced/

2024-08-01 07:41:09

- reply

CrowdStrike made a net loss of $845m between 2018 until this year.

2024-08-01 07:26:37

- reply

CrowdStrike shareholders are suing CrowdStrike https://www.bbc.com/news/articles/cy08ljxndr4o

2024-08-01 07:20:50

- reply

they really don’t. They just introduced AI training on user posts without even asking for consent or telling users, and Elon’s busy using his posts to dunk on the EU.

2024-08-01 07:07:18

- reply

they don’t give a fuck about GDPR 🤣

2024-08-01 03:47:23

- reply

Trust and Safety
https://cyberplace.social/system/media_attachments/files/112/884/714/032/776/660/original/2742f8e4d9cbc367.mp4

2024-08-01 03:23:52

- reply

I think it’s relevant as a lot of security peeps wear ‘the world is ending’ hats and it’s important to know if hype vs reality match. The world didn’t end with this one, orgs just needed to stay calm and patch as usual

2024-08-01 03:16:52

- reply

I may message Elon and call him weird to get myself banned as a way to delete my account 🫡

2024-07-31 22:28:09

- reply

learn what?

2024-07-31 22:25:47

- reply

I have the Premium influencer mode thing as Elon pays for it for me, so I wrote to VIP support last week and they ignored it predictably. I get the impression that place is a ghost ship.
https://cyberplace.social/system/media_attachments/files/112/883/449/350/535/538/original/ff636ead3c1919e7.mp4

2024-07-31 22:20:39

Tried exporting my tweet archive on Twitter but the download process doesn’t work in Edge any more, then tried deleting my account and the account deletion process doesn’t work either.
https://cyberplace.social/system/media_attachments/files/112/883/429/235/935/777/original/a39e58041e50f392.jpeg

2024-07-31 21:47:24

Am I the asshole check - was it reasonable to ask Microsoft disclose they were getting DDoS’d yesterday, and that it was impacting their anti-DDoS service to customers?