Lightnews — Scholar-powered news

Scoubi @scoubi.bsky.social · 3d

a man with long hair is making a funny face and saying `` i was there gandalf i was there 3000 years ago ... ''

ALT: a man with long hair is making a funny face and saying `` i was there gandalf i was there 3000 years ago ... ''

media.tenor.com

1

Reposted by Scoubi

SpecterOps @specterops.io · 14d

Happy #BloodHoundBasics Day from @scoubi.bsky.social!

By now, you've probably heard about our Query Library. But did you know you can run any query in your own instance of BHE/BHCE and then save the query to your Personal Library?

Follow the steps threaded below!

🧵: 1/5

1 2 1

Reposted by Scoubi

Ian Coldwater 👻🌿 @lookitup.baby · 25d

Today is the 30th anniversary of Hackers

the cast of Hackers (1995) posing in a series of adjacent phone booths

76 1.1K 3.6K

Scoubi @scoubi.bsky.social · Sep 7

You should wear them proudly at @deathcon.io in Montreal! 😁

2

Reposted by Scoubi

DEATHCon @deathcon.io · Sep 6

The final round of #DEATHCon2025 online tickets will drop on 9/9 at 0900 UTC deathcon.io/tickets.html
In-person tickets still available at some sites (1/4)

1 2 1

Scoubi @scoubi.bsky.social · Aug 20

There is only one in Montreal 🤣

But it’s 1 DEATHcon and multiple locations. Same content is available everywhere but each site is free to choose which Workshops they’ll showcase during the weekend.

All content is also available for at least 1 month online for all attendees.

1

Scoubi @scoubi.bsky.social · Aug 20

Buy your tickets here : www.eventbrite.ca/e/deathcon-montreal-on-site-tickets-1422785262019

DEATHcon Montreal - On Site

2 days of hands-on Detection Engineering and Threat Hunting workshops! Join us Live in Montreal.

www.eventbrite.ca

1 1 2

Scoubi @scoubi.bsky.social · Aug 20

Interested in hands-on learning of #DetectionEngineering and #ThreatHunting ?
We still have a few tickets left for @DEATHCon2025 in #Montreal
We are lucky enough to have 4 Workshops Leaders with us that will be able to hosts a Live Play of their workshop and help you complete it!

DEATHcon Montreal - On Site

2 days of hands-on Detection Engineering and Threat Hunting workshops! Join us Live in Montreal.

www.eventbrite.ca

2 2 1

Reposted by Scoubi

Tib3rius @tib3rius.bsky.social · Aug 17

Fucking do it, I dare you.

3 1 19

Reposted by Scoubi

SpecterOps @specterops.io · Aug 12

What all do you need to know about BloodHound CE 8.0 & OpenGraph? @scoubi.bsky.social is joining @redsiege.com's Wednesday Offensive tomorrow to dive into the JSON schema for OpenGraph, how to ingest nodes & edges, best practices, & how to create custom icons.

Join 👉 ghst.ly/46MNltn

3 5

Scoubi @scoubi.bsky.social · Aug 3

Word!

2

Reposted by Scoubi

GreyNoise @greynoise.io · Aug 1

This month's NoiseLetter will make the perfect light reading for a trip to say...Vegas? Make sure to check it out (even if you're not headed to BlackHat/DEF CON there is something in it for you). 🤘

NoiseLetter July 2025

Get GreyNoise updates! Read the July 2025 NoiseLetter for product news, key resources, the latest tags and vulnerabilities, and more.

www.greynoise.io

2 3

Reposted by Scoubi

Red Siege @redsiege.com · Jul 31

The Python Software Foundation warns of phishing emails directing users to a fake PyPI site (pypj. org) to steal credentials. PyPI isn’t hacked, but users are urged to stay alert.

www.bleepingcomputer.com/news/securit...

Via @bleepingcomputer.com

#hacking #infosec #cybersecurity

Hackers target Python devs in phishing attacks using fake PyPI site

The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website.

www.bleepingcomputer.com

2 3

Reposted by Scoubi

Joe Slowik @pylos.co · Jul 30

This is AMAZING

David Ho @davidho.bsky.social · Jul 30

Motherfucking wind farms…

3 9 23

Reposted by Scoubi

SpecterOps @specterops.io · Jul 25

Think being compliant = being secure? Think again. 🤔

Hear from @scoubi.bsky.social at #BSidesLV as he exposes the gap between blindly following rules & security posture.

Get the info on password security & what to do when "compliant" passwords fail you. ghst.ly/4o66cWk

1 4

Scoubi @scoubi.bsky.social · Jul 12

How did it go??

Reposted by Scoubi

SpecterOps @specterops.io · Jul 11

Happy #BloodHoundBasics Day from @scoubi.bsky.social! 🎉

Have you ever run a Cypher Query & get so many nodes you couldn't see anything? You Pinch Zoom to get a closer look and it worked fine, but you Pinch Un-zoom & the application resized.

🧵: 1/2

1 1 2

Scoubi @scoubi.bsky.social · Jul 11

Only 3 Early Bird tickets left!!

Scoubi @scoubi.bsky.social · Jul 10

Tickets for #DEATHcon in Montreal are on sale now!

Book now to secure your place. FYI, Virtual Tickets for round 1 are already Sold Out!

eventbrite.ca/e/deathcon-m...

Additional info (like workshops) for the con can be found here : deathcon.io

Please like & repost for reach

DEATHcon Montreal - On Site

2 days of hands-on Detection Engineering and Threat Hunting workshops! Join us Live in Montreal.

eventbrite.ca

1

Scoubi @scoubi.bsky.social · Jul 10

Tickets for #DEATHcon in Montreal are on sale now!

Book now to secure your place. FYI, Virtual Tickets for round 1 are already Sold Out!

eventbrite.ca/e/deathcon-m...

Additional info (like workshops) for the con can be found here : deathcon.io

Please like & repost for reach

DEATHcon Montreal - On Site

2 days of hands-on Detection Engineering and Threat Hunting workshops! Join us Live in Montreal.

eventbrite.ca

2 3

Scoubi @scoubi.bsky.social · Jun 29

Ohm-I and Ed Skoudis duet

1

Scoubi @scoubi.bsky.social · Jun 28

Tickets for "DEATHcon - Montreal On Site" go on sale July 8th at 8am.
www.eventbrite.ca/e/deathcon-m...

Be with 50 other DE&TH aficionados for a whole weekend Nov 8-9 2025!!
#DEATHcon #Workshops #DetectionEngineering #ThreatHunting

DEATHcon Montreal - On Site

2 days of hands-on Detection Engineering and Threat Hunting workshops! Join us Live in Montreal.

www.eventbrite.ca

2

Reposted by Scoubi

SpecterOps @specterops.io · Jun 25

How attackers move between AD domains via trusts depends on trust type & config. We're replacing TrustedBy edge in BloodHound with new trust edges for better attack path mapping.

Check out @jonas-bk.bsky.social's blog post to learn more. ghst.ly/4lj9C5T

Good Fences Make Good Neighbors: New AD Trusts Attack Paths in BloodHound - SpecterOps

The ability of an attacker controlling one domain to compromise another through an Active Directory (AD) trust depends on the trust type and configuration. To better map these relationships and make i...

ghst.ly

4 8

Reposted by Scoubi

SpecterOps @specterops.io · Jun 18

Ghostwriter v6's new collaborative editing feature is 🔥

Alex Parrill & @printingprops.com discuss the new real-time collaborative editing for observations, findings, & report fields, enabling multiple users to edit simultaneously without overwriting each other. ghst.ly/4jVqdvG

Ghostwriter v6: Introducing Collaborative Editing - SpecterOps

Ghostwriter now supports real-time collaborative editing for observations, findings, and report fields using the YJS framework, Tiptap editor, and Hocuspocus server, enabling multiple users to edit si...

ghst.ly

2 7

Reposted by Scoubi

Wietze @wietzebeukema.nl · Jun 11

#HuntingTipOfTheDay: a personal favourite, command-line obfuscation. Substituting or inserting special Unicode characters might allow attackers to bypass string-based detections. Look for command lines with unusual Unicode characters. Checkout ArgFuscator.net for more fun!

1 3

Reposted by Scoubi

Wietze @wietzebeukema.nl · Jun 10

#HuntingTipOfTheDay: macOS has a built-in SSH mechanism that is disabled by default. Would you detect it if someone enables it and logs in remotely? Look for remote login events, and investigate the associated session.

1 3