PandaBuy has been breached by Threat Actors operating under the names "Sanggiero" and "IntelBroker". Exfiltrated data includes:

- UserId
- First name
- Last name
- Phone number
- Email
- Login Ip
- Full address
- Order information

Breach patrons are relatively excited

We have no April Fool's day joke planned this year. Please accept this image of a cat instead.

Discord has announced they will begin displaying ads to boost revenue

We've uploaded 85,000+ malware samples to vx-underground.

Download it.

Today we learned RecordedFuture's Insikt group is pronounced 'In-sikt' and NOT 'in sync'. No idea where we got the 'N' from – but we did. For several years we thought the organization was named after Justin Timberlake's hit 90's boy band

Sam Bankman-Fried looks like he's having fun amongst his new esteemed colleagues

We've updated the vx-underground "The Old New Thing" archive for March, 2024

Please read it or Raymond Chen will haunt you for 35 years

https://vx-underground.org/Archive/The%20Old%20New%20Thing

Ransomware but it makes everyone watch workplace sensitivity training videos

Plot twist: companies would rather pay a ransom than watch 8 hours of sensitivity training

Amazon has announced they're phasing out their checkout-less grocery stores.

The "Just Walk Out" technology, which was labeled as automatic, was actually thousands of Indian employees monitoring you as you walked through the store.

https://gizmodo.com/amazon-reportedly-ditches-just-walk-out-grocery-stores-1851381116

11.50 PS4 Testkit Pup was leaked online

A group of Threat Actors operating under the monikers; IntelBroker, Sanggiero and EnergyWeaponUser claim to have compromised Acuity Inc, a Federal tech consulting firm based out of Reston, Virginia.

The Threat Actors claim to have successfully exfiltrated sensitive information on United States government personnel, and United States allies.

Some data shared shows information on individuals from the Department of Justice, Federal Bureau of Investigation, Department of Homeland Security, and Department of State. The information shared shows employee full name, government e-mail address, and government phone number (and extension if applicable).

Other snippets of data show alleged plans or operations by the United States government (not entirely sure, they're just snippets of text)

We have not verified the authenticity of these files... we're also not entirely sure how we could verify these files 🤔

We are not sure of the size or scale of the files either.

Good morning, or afternoon, or night.

We've updated the vx-underground APT collection of March, 2024. Later today we will be updating our malware analysis collection from Malpedia. Sometime later this week we will add more papers too.

That's all we've got right now.

Love you

Tuukka Ojala is a blind software developer. He almost exclusively uses the command line. He relies on text-to-speech and braille to code.

tl;dr completely blind dude is a better coder than you

https://www.vincit.com/blog/software-development-450-words-per-minute

tfw Tuuka can't even see what bad code looks like. Tuuka can physiologically detect bad code like he's in the Matrix

Yesterday the United States Department of Homeland Security released the Cyber Safety Review Board’s (CSRB) findings and recommendations following its independent review of the Summer 2023 Microsoft Exchange Online intrusion.

They spit in Microsoft's face 😭😭😭

You can read the full independent review here: https://www.cisa.gov/sites/default/files/2024-04/CSRB_Review_of_the_Summer_2023_MEO_Intrusion_Final_508c.pdf

One of our recommendations to nerds to keep up to date with stuff —allocate a binge read day.

1. Bookmark or save interesting tweets

2. Every Thursday, or Tuesday, or whatever, spend an hour, or more reviewing stuff.

3. Flex newly learned stuff to seem cool and badass