#blackhatasia — Public Fediverse posts

THREAT MODEL: CYBERSECURITY 🧑‍💻
for August 18th, 2026
by independent journalist @violetblue

- US greenlights private firms to “hack back” attackers from outside the US (what could possibly go wrong...?)

- JKR-banned #AmnestyInternational report removed from #InternetArchive and the #StreisandEffect is still real

- Adversarial Pattern Research has an #AntiFlock car wrap

- Print your own 3D #Flock Sock

- Undercover fed caught violating court order after dropping her wire on the floor

- Violet's #BlackHatAsia keynote is now online (and spicy!)

...and much more.

✨THREAT MODEL weekly newsletters are free to read -- please help keep them accessible to all by becoming a patron, even $1 a month makes a difference!✨

https://www.patreon.com/violetblue/posts/cybersecurity-18-166988899

#ThreatModel #ThreatModelCybersecurity #ThreatModelNewsletters #VioletBlue #infosec #cybersec #CovidIsNotOver

Back from #BlackHatAsia in Singapore after our 3rd year teaching our cyber investigations class with Samuel Lolagar.
And while a lot of things have remained the same (the core investigative minset, the principles of intelligence analysis, etc.) it has been interesting to see how things are also shifting. Tools, techniques, and the questions people ask are becoming very different.

We do need more discussions around the responsible use of AI and around what it means to evaluate & verify data sources. We do need professionals with cognitive skills and knowledge that they can readily apply in their work. It was great that our class participants could explore these concepts with us.

Always grateful to have the opportunity to teach in such diverse, multicultural classes. A big thank you to everyone who joined us, shared their perspectives, asked questions, and spent 2 days learning and working on their investigative skills with us!

Aaaand we're back-- after a week off, new Threat Model: #Cybersecurity newsletter from @violetblue is out, with news on AI, ICE, Microsoft, and much more, plus Violet's after-action on #BlackHatAsia. Read/share/support: https://www.patreon.com/posts/156746057
#InfoSec #NatSec

Open Source Models Challenge Dominance in Automated Bug Finding

The impressive performance of Anthropic's Mythos in automated bug finding, which uncovered 271 Firefox flaws, has been called into question by Ari Herbert-Voss, who argues that open-source models can be just as effective. Herbert-Voss suggests that Mythos's success can be attributed to its ability to detect both simple and…

https://osintsights.com/open-source-models-challenge-dominance-in-automated-bug-finding?utm_source=mastodon&utm_medium=social

#AutomatedBugFinding #VulnerabilityDiscovery #OpenSource #AiSecurity #BlackHatAsia

At #BlackHatAsia 2026, Seppe Wyns, Sayon Duttagupta & Nikola Antonijević presented #WhisperPair, exposing flaws in #Google Fast Pair. Mis-implementations enable device hijacking & tracking via Find Hub, showing how small add‑ons create big #privacy risks.
#Bluetooth
https://blackhat.com/asia-26/briefings/schedule/

Flaws in EV Charger Security Expose Cities to Denial-of-Service Attacks

A security researcher recently demonstrated how easily electric vehicle chargers can be hacked, leaving cities vulnerable to denial-of-service attacks with just a few clicks. In a stunning Black Hat Asia presentation, he showed how typing a simple charger ID into a custom-built script could instantly…

https://osintsights.com/flaws-in-ev-charger-security-expose-cities-to-denial-of-service-attacks?utm_source=mastodon&utm_medium=social

#EvChargerSecurity #InternetOfThings #DenialofserviceAttacks #EmergingThreats #BlackHatAsia

📍 We’re in Singapore for #BHA2026!
Stop by DomainTools booth # 119 to see how our integrations reduce context-switching and identify evolving threats in real-time.
It's not too late to schedule a chat ➡️https://www.domaintools.com/events/black-hat-asia
#BlackHatAsia #CyberSecurity

📍 Singapore bound for #BHA2026!
Stop by DomainTools booth # 119 to see how our integrations reduce context-switching and identify evolving threats in real-time.
Don't leave your 2026 strategy to chance. Schedule a chat➡️ https://www.domaintools.com/events/black-hat-asia
#BlackHatAsia #CyberSecurity

Want to see how the world's best CTI teams map adversary DNS? 🗺️
We’re heading to #BlackHatAsia 2026 to share how we provide 97% internet visibility and detection 10 days ahead of blocklists.
Let's grab coffee! Book 20 mins here ➡️ https://www.domaintools.com/events/black-hat-asia
#BHA2026 #OSINT

Shift your posture from reactive to proactive at #BHA2026. 🇸🇬
With DomainTools, your team can:
✅ Automate the hunt
✅ Contextualize alerts
✅ Get more from your existing stack
Meet us in Singapore ➡️ https://www.domaintools.com/events/black-hat-asia
#BlackHatAsia #ThreatIntel

𝐎𝐮𝐫 "𝐅𝐮𝐧𝐝𝐚𝐦𝐞𝐧𝐭𝐚𝐥𝐬 𝐨𝐟 𝐂𝐲𝐛𝐞𝐫 𝐈𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬 𝐚𝐧𝐝 𝐇𝐮𝐦𝐚𝐧 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞" 𝐜𝐥𝐚𝐬𝐬 𝐢𝐬 𝐫𝐞𝐭𝐮𝐫𝐧𝐢𝐧𝐠 𝐭𝐡𝐢𝐬 𝐬𝐩𝐫𝐢𝐧𝐠 𝐭𝐨 Black Hat Asia 𝐢𝐧 𝐒𝐢𝐧𝐠𝐚𝐩𝐨𝐫𝐞! 🎉

Join Samuel Lolagar and me on the 21st & 22nd of April for two days full of learning, hands-on exercises, real life case studies and the latests developments in #OSINT #SOCMINT and #HUMINT.

You will learn how to conduct an in-depth digital investigation on a subject, discover new leads, uncover and utilize all the evidence that are hiding in plain sight (and beyond) and conduct virtual HUMINT in an uncomplicated, step-by-step process.
We have seen firsthand the power of these techniques and we firmly believe in the effectiveness of combining these complementary intelligence disciplines.

We are looking forward to passing these skills on to our new group of attendees.
Hope to see you there!

P.S. There will be a class challenge, and a reward :)

Training details & registration: https://blackhat.com/asia-26/training/schedule/?track[]=human

#BlackHatAsia #BHAsia #OSINT #opensourceintelligence #humanintelligence #socialengineering

👉 I was invited to be a speaker to represent the hacker's perspective in the panel session for "Three Perspectives on Bug Bounty Program Success" at the Black Hat Asia 2025 security conference! 😊

😅 It was my first time public speaking in a security conference, it was a fun and humbling experience! Please pardon the stuttering and nervousness, at least I tried my best to share! 💪

📽️ In this video, I have compiled my own's cut from the panel session, I hope the things I shared are useful to you! 😊 

⬇️⬇️⬇️

https://youtu.be/W5sP5TCpFUo

#bugbounty #bugbountytips #togetherwehitharder #blackhatasia #bhasia

🔒 RELIANOID is heading to Black Hat Asia 2025! 🔒

From April 1st-4th, we’ll be at Marina Bay Sands, Singapore, joining top cybersecurity professionals from around the world for cutting-edge trainings, expert briefings, and high-level networking.

Let's connect and shape the future of cybersecurity together! See you at Black Hat Asia 2025. 🚀

#BlackHatAsia #CyberSecurity #ApplicationSecurity #HighAvailability #DisasterRecovery #RELIANOID

https://www.relianoid.com/about-us/events/black-hat-asia-2025/

Is someone going to #BlackHatAsia
Please let me know, I got questions 😉

#CyberSecurity

Our training class at #BlackHat Asia is now over! We are grateful that we had the chance to come back for a 2nd year and deliver yet another training to such a largely diverse class. Bringing together participants (and perspectives) from different continents, countries, and cultures will always help expand the collective knowledge pool and mindset of everyone being present in class.

Time to fly home.
Over and out,
@ChristinaLekati & @OSINTgeek

#BlackHatAsia #BlackHat2024 #OSINT #SOCMINT

Happy Wednesday everyone!

Early registration for #BlackHatAsia ends on March 1st, so don't miss out your chance to get the early pricing! I will be conducting Cyborg Security's 2-Day Threat Hunter training on April 16 and 17 where we will be discussing theory behind the planning phase, valuable resources that help you with research, how to extract artifacts from an intel report and operationalize them, and then we dive into hypothesis creation and the data to find malicious and suspicious activity! It is a privilege to be given this opportunity and I am looking forward to it! Enjoy and Happy Hunting!

Register here!
BEYOND IOCS - HOW TO EFFECTIVELY THREAT HUNT USING TTPS AND BEHAVIORS (VIRTUAL)
https://www.blackhat.com/asia-24/training/schedule/#beyond-iocs---how-to-effectively-threat-hunt-using-ttps-and-behaviors-virtual-35652

#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #gethunting

📢 Attention, threat hunters! We're thrilled to present an exclusive training session at #BlackHatAsia2024 titled "Beyond IOCs: How to Effectively Threat Hunt Using TTPs and Behaviors," a virtual masterclass led by Lee Archinal from Cyborg Security. Don't miss this opportunity—grab the early-bird pricing before March 1, 2024!

🔗 Secure your spot at the early-bird rate by registering before March 1:
https://lnkd.in/g2Wh3Pyg

#cybersecuritytraining #threatdetection #blackhatasia #TTPsNotIOCs #behavioralthreathunting #securityoperations #cybersecurityprofessionals #mitreattack #cybersecurity #cybersecurityskills #threathunting

The #BlackHatAsia presentation "Behind the Scenes: How Criminal Enterprises Pre-infect Millions of Mobile Devices" feels suspicious.
It speaks of millions of Android devices infected directly through the manufacturer, without mentioning brands or malware types.

Media ist going into panic overdrive.
(Reminds me of #JuiceJacking)

Any pointers to more information is welcome.

Dagmawi Mulugeta is at #BlackHatAsia presenting his research into insider threats. He studied 58k users and found 15% of them upload data to personal app instances before they left their jobs and 2% mishandled sensitive data in doing so. Read more in his latest blog post: https://www.netskope.com/blog/insider-threats-packing-their-bags-with-corporate-data

#cybersecurity #infosec

Currently attending. #bhasia #blackhat #blackhatasia #infosec

It's a long shot, but is anyone from the fediverse here?

Our new notebooks for our training at #BlackHatAsia have arrived!

They contain all the #OSINT & #SOCMINT tools & techniques @OSINTgeek and I will be teaching, along with our best tips for intel analysis, profiling, and eventually a section on #HUMINT. All neatly packed 📚 🤓

REALLY excited to finally announce that our "Fundamentals of Cyber Investigations and Human Intelligence" class will be part of this year's trainings at #BlackHat Asia! 🎩

@OSINTgeek and I will deliver a 2-day training on conducting in-depth online investigations by combining the disciplines of open-source intelligence ( #OSINT ), social media intelligence ( #SOCMINT ), and human intelligence ( #HUMINT ).

We created this class with the vision to help investigators and intelligence analysts adapt to the ever-evolving complexities of online investigations. We wanted them to develop a good skill set and utilize the competitive advantage those three intelligence disciplines bring to an investigation, when combined. We have been able to do that, through our previous open, and in-house classes.

In the meantime, we started observing an increased interest from threat hunters, threat intelligence teams, security researchers, and other related professionals that came to attend with a different motive. They wanted to understand how threat actors utilize open-source intelligence along with human intelligence in their attack kill chains. They wanted to be able to conduct a more informed analysis, increase the accuracy of their reports, and inform their security strategy.

This year, we are once again offering this class as an open class, in Black Hat Asia 2023!! 🥹🥹

#intelligence #training #cybersecurity #opensourceintelligence #humanintelligence #intelligenceanalysis #threatintelligence #threatintel #socialengineering #cyber #cybercrime @[email protected] @[email protected] #blackhat2023 #blackhatasia #bhasia #fraudinvestigation #lawenforcementtraining #lawenforcement #threatanalysis #investigations