The LAPSUS$ threat actor group changes the way cybersecurity professional views the threat landscape. If you are working in Threat Intel area or tracking threat actor groups, it is quite technical with the construct of new methods to penetrate systems and exploit development. The tactics and techniques used by LAPSUS$ group is fairly straightforward and simple to manipulate human factor of the cybersecurity. This piece is to explore some of the techniques used by threat actor to exploit major IT companies. LAPSUS$ Profile Summary LAPSUS$ is first seen in underground at July 2021 and the...

If you are the owner of 8” iPad Mini or smaller devices and a comic or graphic novel fan, you might explore free or paid comic apps. I was googling available iOS apps to enjoy Saga series and MoonKnight comics. This app is never listed in the first google result of “best comic reading apps”. I list down the features that I want in the app. Features of the ideal comic book in my mind I tried many apps in both Android and iPad apps and this is the features that I wish it have Free or NOT so crazy pricey Support major comic book formats Able to import files from computer and intern...

🛣️ Another Productivity Journey Recently, I was reading GRIP about how to work better and to improve productivity. It leads to a reflection of my daily workflow in managing personal and work life. I found out that there are too many apps and not clear objectives of how I was using these apps. I think of a way to make things easier to manage instead of using a dozen apps and painful data flow. So, I decided to breakdown the minimal number of apps for my workflow and cut down some apps that I don’t need to use it. Please bare in mind that my work PC is Windows and my personal devices are Ap...

What is Apple Universal Control ? When Apple announced Universal Control, I thought it is too good to be true. A single peripheral device control multiple machines without any setup? That’s something peripheral devices manufactures like Logitech are offering with keyboard that can toggle among input devices but not as smoothly as Universal Control can deliver. It’s a pretty sleek feature that can boost your productivity as an add-on functionality that is missing in Sidecar. Here is 3 reasons why it is ideal solution than 3rd party technology like Logitech Flow: No Additional Cost It wo...

What is DNS Over HTTPs (DoH)? Standard DNS (on tcp/udp port 53) works just fine but missing security features to prevent tampering of its plaintext DNS request to the DNS providers. It leads to security issues such as DNS Cache Poisoning and typo-squatting domains. DNS Over HTTPs (DoH) brings TLS/SSL encapsulation on HTTP traffic to boost security integrity issues of spoofing and tampering of DNS requests from clients to providers. In this article, i will refer DNS Over HTTPs as DoH abbreviation. The Good This brings better security for personal home network to prevent DNS based attacks...

I have some down time at this week and decided to reinvent my blog site with new look and organization. This is the first entry after I redesigned and deployed this new site. Throughout the decision making process on the choice of platform and tools, I got some ideas and update to share with you, my friends.. Platforms for blogging or Newsletters There are criteria that helps to narrow down the options: Free or Paid Options 💰 Self-hosted website, social media or community platforms? 🏠 Type of content? (blogs, art/design or professional articles) 🧑🏼‍🎨 Support of newsletter integr...

A look back into 2021, it’s not the year that I achieve something to proud of. The mental state of mind is not the best and the way that I look into life and the world is changed. The motherland is in turmoil and approaching to become a failed-state. Uncertainty is very high in all citizens, the people who can enjoy their lives with whatever they have. This is far worse than pandemic because the fix to this political conflict can’t be methodological. People falls into 4 categories; the ones that trying to maintain the wealth and status, the ones that rival against the junta power, the one t...

2020 is a tough year for everyone. For me, there is some months like house arrest alone. A year passed by and we are in 2021 with changes in our daily life style and the way we live, work and enjoy life. People are fighting for this virus outbreak but most people believe in our survival instinct and health system. As for burmese citizens including me, 2021 Feb military coup is another misery added up to already-been messed up sitiation. It’s a sensitve topic to discuss for non-political minded like me, however this is a big upset and unethical approach taken by the junta militray to the pu...

Why CISSP Well, this is the credential for security practioners like us that hard to prove the market that “I kinda of know what I am doing and would like HR personnel to make their job easier”. A bit of morale dellima in taking this exam but I have to say the learning experience and knowlege gain is worth the pain. This is a bit of extension on what I jot down at reddit post. Since I am already in ISC2 circle with SSCP, this is economical since the annual fee is fixed for no matter how many ISC2 credentials you hold. A good alternative can be CISM from ISACA with another 150 bucks more. ...

Introduction Firstly, Let start with the difference between Indicator of Compromise (IOCs) and Indicator of Attacks (IOAs). In daily security operations, we are using these terms interchangeably, however it is better to understand the accurate meanings. IOAs can describe the active attack series by adversary that is occurring in real time which is via real time monitoring and detection. The security sensors and security analysts can detect and escalate IOAs such as malicious IPs probing network, repetitive malware infection on a particular host, established inbound/outbound connections t...