Hemanth Kumar

Safety Oversight Circulars issued by the Federal Aviation Administration (FAA) are formal documents that provide guidance, information, and recommendations regarding aviation safety. These circulars are part of the FAA's efforts to promote and improve safety within the aviation industry. Here's a detailed breakdown of their key aspects: Purpose and Scope: Guidance and Best Practices: They [...] The post FAA Safety Oversight Circulars first appeared on The Black Vault.

Here are some hints, and the answer, for Wordle No. 1021.

The crackdown is coming in June, according to CEO Bob Iger.

Indiabulls Real Estate Ltd. will raise up to Rs 3,910.93 crore via preferential issue of shares and convertible warrants on a private placement basis through multiple tranches.

Sunrisers Hyderabad dominated Chennai Super Kings in an IPL match, winning by six wickets.

(Bloomberg) -- Federal Reserve Bank of Dallas President Lorie Logan said it's too soon to consider cutting interest rates, citing recent high

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details. Star the Repo If you find AttackGen useful, please consider starring the repository on GitHub. This helps more people discover the tool. Your support is greatly appreciated! ⭐ Features Generates unique incident response scenarios based on chosen threat actor groups. Allows you to specify your organisation's size and industry for a tailored scenario. Displays a detailed list of techniques used by the selected threat actor group as per the MITRE ATT&CK framework. Create custom scenarios based on a selection of ATT&CK techniques. Capture user feedback on the quality of the generated scenarios. Downloadable scenarios in Markdown format. ???? Use the OpenAI API, Azure OpenAI Service, Mistral API, or locally hosted Ollama models to generate incident response scenarios. Available as a Docker container image for easy deployment. Optional integration with LangSmith for powerful debugging, testing, and monitoring of model performance. Releases v0.4 (current) What's new? Why is it useful? Mistral API Integration - Alternative Model Provider: Users can now leverage the Mistral AI models to generate incident response scenarios. This integration provides an alternative to the OpenAI and Azure OpenAI Service models, allowing users to explore and compare the performance of different language models for their specific use case. Local Model Support using Ollama - Local Model Hosting: AttackGen now supports the use of locally hosted LLMs via an integration with Ollama. This feature is particularly useful for organisations with strict data privacy requirements or those who prefer to keep their data on-premises. Please note that this feature is not available for users of the AttackGen version hosted on Streamlit Community Cloud at https://attackgen.streamlit.app Optional LangSmith Integration - Improved Flexibility: The integration with LangSmith is now optional. If no LangChain API key is provided, users will see an informative message indicating that the run won't be logged by LangSmith, rather than an error being thrown. This change improves the overall user experience and allows users to continue using AttackGen without the need for LangSmith. Various Bug Fixes and Improvements - Enhanced User Experience: This release includes several bug fixes and improvements to the user interface, making AttackGen more user-friendly and robust. v0.3 What's new? Why is it useful? Azure OpenAI Service Integration - Enhanced Integration: Users can now choose to utilise OpenAI models deployed on the Azure OpenAI Service, in addition to the standard OpenAI API. This integration offers a seamless and secure solution for incorporating AttackGen into existing Azure ecosystems, leveraging established commercial and confidentiality agreements.- Improved Data Security: Running AttackGen from Azure ensures that application descriptions and other data remain within the Azure environment, making it ideal for organizations that handle sensitive data in their threat models. LangSmith for Azure OpenAI Service - Enhanced Debugging: LangSmith tracing is now available for scenarios generated using the Azure OpenAI Service. This feature provides a powerful tool for debugging, testing, and monitoring of model performance, allowing users to gain insights into the model's decision-making process and identify potential issues with the generated scenarios.- User Feedback: LangSmith also captures user feedback on the quality of scenarios generated using the Azure OpenAI Service, providing valuable insights into model performance and user satisfaction. Model Selection for OpenAI API - Flexible Model Options: Users can now select from several models available from the OpenAI API endpoint, such as gpt-4-turbo-preview. This allows for greater customization and experimentation with different language models, enabling users to find the most suitable model for their specific use case. Docker Container Image - Easy Deployment: AttackGen is now available as a Docker container image, making it easier to deploy and run the application in a consistent and reproducible environment. This feature is particularly useful for users who want to run AttackGen in a containerised environment, or for those who want to deploy the application on a cloud platform. v0.2 What's new? Why is it useful? Custom Scenarios based on ATT&CK Techniques - For Mature Organisations: This feature is particularly beneficial if your organisation has advanced threat intelligence capabilities. For instance, if you're monitoring a newly identified or lesser-known threat actor group, you can tailor incident response testing scenarios specific to the techniques used by that group.- Focu

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials (API key or stolen authentication cookie) for the respective Azure DevOps Services instance. The attack modules supported include reconnaissance, privilege escalation and persistence. ADOKit was built in a modular approach, so that new modules can be added in the future by the information security community. Full details on the techniques used by ADOKit are in the X-Force Red whitepaper. Installation/Building Libraries Used The below 3rd party libraries are used in this project. Library URL License Fody https://github.com/Fody/Fody MIT License Newtonsoft.Json https://github.com/JamesNK/Newtonsoft.Json MIT License Pre-Compiled Use the pre-compiled binary in Releases Building Yourself Take the below steps to setup Visual Studio in order to compile the project yourself. This requires two .NET libraries that can be installed from the NuGet package manager. Load the Visual Studio project up and go to "Tools" --> "NuGet Package Manager" --> "Package Manager Settings" Go to "NuGet Package Manager" --> "Package Sources" Add a package source with the URL https://api.nuget.org/v3/index.json Install the Costura.Fody NuGet package. Install-Package Costura.Fody -Version 3.3.3 Install the Newtonsoft.Json package Install-Package Newtonsoft.Json You can now build the project yourself! Command Modules Recon check - Check whether organization uses Azure DevOps and if credentials are valid whoami - List the current user and its group memberships listrepo - List all repositories searchrepo - Search for given repository listproject - List all projects searchproject - Search for given project searchcode - Search for code containing a search term searchfile - Search for file based on a search term listuser - List users searchuser - Search for a given user listgroup - List groups searchgroup - Search for a given group getgroupmembers - List all group members for a given group getpermissions - Get the permissions for who has access to a given project Persistence createpat - Create personal access token for user listpat - List personal access tokens for user removepat - Remove personal access token for user createsshkey - Create public SSH key for user listsshkey - List public SSH keys for user removesshkey - Remove public SSH key for user Privilege Escalation addprojectadmin - Add a user to the "Project Administrators" for a given project removeprojectadmin - Remove a user from the "Project Administrators" group for a given project addbuildadmin - Add a user to the "Build Administrators" group for a given project removebuildadmin - Remove a user from the "Build Administrators" group for a given project addcollectionadmin - Add a user to the "Project Collection Administrators" group removecollectionadmin - Remove a user from the "Project Collection Administrators" group addcollectionbuildadmin - Add a user to the "Project Collection Build Administrators" group removecollectionbuildadmin - Remove a user from the "Project Collection Build Administrators" group addcollectionbuildsvc - Add a user to the "Project Collection Build Service Accounts" group removecollectionbuildsvc - Remove a user from the "Project Collection Build Service Accounts" group addcollectionsvc - Add a user to the "Project Collection Service Accounts" group removecollectionsvc - Remove a user from the "Project Collection Service Accounts" group getpipelinevars - Retrieve any pipeline variables used for a given project. getpipelinesecrets - Retrieve the names of any pipeline secrets used for a given project. getserviceconnections - Retrieve the service connections used for a given project. Arguments/Options /credential: - credential for authentication (PAT or Cookie). Applicable to all modules. /url: - Azure DevOps URL. Applicable to all modules. /search: - Keyword to search for. Not applicable to all modules. /project: - Project to perform an action for. Not applicable to all modules. /user: - Perform an action against a specific user. Not applicable to all modules. /id: - Used with persistence modules to perform an action against a specific token ID. Not applicable to all modules. /group: - Perform an action against a specific group. Not applicable to all modules. Authentication Options Below are the authentication options you have with ADOKit when authenticating to an Azure DevOps instance. Stolen Cookie - This will be the UserAuthentication cookie on a user's machine for the .dev.azure.com domain. /credential:UserAuthentication=ABC123 Personal Access Token (PAT) - This will be an access token/API key that will be a single string. /credential:apiToken Module Details Table The below table show

After a seven-year effort to obtain information from the Federal Bureau of Investigation (FBI) through a Mandatory Declassification Review (MDR), The Black Vault has finally succeeded in acquiring a previously unreleased document, albeit heavily redacted. Before this release, only brief citations were found in other files, also released to The Black Vault by the FBI. [...] The post Declassified FBI Cyber Threat Assessment Illuminates 2008 Digital Dangers first appeared on The Black Vault.

Diverticular disease or diverticulosis is a clinical condition that involves the gastrointestinal tract. It can affect the oesophagus and the small intestine or large intestine, which is also known as the colon.