Christian 🇬🇧 | 0eroDay

Hacker - Cyber Security Researcher and Consultant - GCHQ certified MSc - Pentester and Defender

[Christian 🇬🇧 | 0eroDay @0eroDay]

@sysadafterdark Damn you got me

[Christian 🇬🇧 | 0eroDay @0eroDay]

@ReadingCouncil @ReadingClowncil Do not do this! It’s terrible advice.

[Christian 🇬🇧 | 0eroDay @0eroDay]

@vxunderground Did anyone say https://t.co/zzsXv5T48L

[Christian 🇬🇧 | 0eroDay @0eroDay]

@LisaForteUK Can you go buy me some Amazon vouchers please 😂😂

[Christian 🇬🇧 | 0eroDay @0eroDay]

@JenMsft @EanMeyer @Windows Why did you do this 😭

[Christian 🇬🇧 | 0eroDay @0eroDay]

@XPGoD @Malwarebytes 😂

[Christian 🇬🇧 | 0eroDay @0eroDay]

@Malwarebytes 😂😂

[Christian 🇬🇧 | 0eroDay @0eroDay]

Now fake booking . com X account is replying to tweet … way to go X on that impersonation protection.

[Christian 🇬🇧 | 0eroDay @0eroDay]

Link was received via booking[.]com messaging system

[Christian 🇬🇧 | 0eroDay @0eroDay]

Can’t provide full link due to containing PII. Each page has unique ID at the end of the URL @Cloudflare

[Christian 🇬🇧 | 0eroDay @0eroDay]

https://t.co/cP8dIdozIG

[Christian 🇬🇧 | 0eroDay @0eroDay]

@thiojoe No way?!?!? I don’t believe it 😂

[Christian 🇬🇧 | 0eroDay @0eroDay]

I want Twitter back

[Christian 🇬🇧 | 0eroDay @0eroDay]

@Paul_Reviews @HandsamLtd Think they’re going for a full house there

[mRr3b00t @UK_Daniel_Card]

################################
CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent
################################

now.. first questions...

how many devices in your enterprise do you have running a vulnerable version of SSH?
How many of these are internet facing?
are there in the wild exploitation?
Do you need to patch regardless? (think cyber essentials)
are there even patches available?
At what priority should you patch this vs other vulnerabilities?

#Vulnerability #Management

[Christian 🇬🇧 | 0eroDay @0eroDay]

@PoeHaH Nah. GTFO