Dimitris Papapetros

Cyber Defense @PlayStation - Χρη σιγάν ή κρείσσονα σιγής λέγειν - all views and opinions expressed are my own

@[email protected]

[Dimitris Papapetros @0xDimitris]

Excited to be attending @BSidesAth today!

[Dimitris Papapetros @0xDimitris]

“[un]prompted” is a new AI security conference for practitioners (https://t.co/xKR1ZZKmkG).

The first event was held in San Francisco earlier this month and the recordings are now live:
https://t.co/9UGtUSQl2M

[Dimitris Papapetros @0xDimitris]

Attending @BSidesSF this weekend.

#BSidesSF #BSidesSF2026

[Dimitris Papapetros @0xDimitris]

A reminder of what’s possible when public and private sector efforts align effectively.

https://t.co/RyJoDdAwy9

[Dimitris Papapetros @0xDimitris]

"We cannot solve our problems with the same thinking we used when we created them."
Albert Einstein

[Dimitris Papapetros @0xDimitris]

38th Chaos Communication Congress #38c3 recordings: https://t.co/o0jBYwC6fJ

[Dimitris Papapetros @0xDimitris]

I'm attending @BSidesAth tomorrow. Looking forward to insightful sessions and networking with fellow attendees!

[Security BSides Athens @BSidesAth]

💻 Yippee Ki-Yay Motha Hacka! 🟢 The #CTF is launched. Check your #MailingList email!
Participate, learn, enjoy, have fun. Thank you @hackthebox_eu for setting it up again this year! #BSidesAth 🟢 Our ML: https://t.co/Xx7aG0KZPX 🟢 https://t.co/ZrfByd1M8I 🟩

[Dimitris Papapetros @0xDimitris]

I’m #hiring for a SOC Manager at PlayStation! This is a full-time remote position in the United States.

https://t.co/ac9EDji8t8

[Dimitris Papapetros @0xDimitris]

One more Ivanti CVE released today: CVE-2024-22024 https://t.co/c2d6wbY7Xj

[Dimitris Papapetros @0xDimitris]

CVE-2024-21893 (SSRF) can be chained to CVE-2024-21887 for unauthenticated command injection with root privileges (bypassing previous fix).
Take Ivanti hosts offline, rebuild and upgrade to the latest version that addresses all known vulnerabilities.

[Stephen Fewer @stephenfewer]

We have published our AttackerKB @rapid7 analysis for CVE-2024-21893, an SSRF vulnerability in the SAML component of Ivanti Connect Secure, that has recently been exploited in the wild, allowing attackers bypass the mitigation for an earlier exploit chain. https://t.co/tVgUCrp1KH

[Dimitris Papapetros @0xDimitris]

References:
https://t.co/wsGrUWkFHY

https://t.co/C15Xrg5Ocb

https://t.co/AIusQfxUF2

[Dimitris Papapetros @0xDimitris]

Another advisory about potential unauthorized access, this time recommending disabling all HTTP and HTTPs traffic to MOVEit Transfer: https://t.co/RjzKgUWsVh

[Dimitris Papapetros @0xDimitris]

Internet facing MOVEit Transfer hosts are being actively exploited via a critical 0day vulnerability (CVE-2023-34362), look for indicators of compromise.

- https://t.co/57x8mVguGn
- https://t.co/mt1Emj24mr
- https://t.co/ebEKlxbDh5

[Dimitris Papapetros @0xDimitris]

New advisory and patches released for new critical MOVEit Transfer vulnerabilities: https://t.co/KesNUmjpCR

[Dimitris Papapetros @0xDimitris]

I’m #hiring for a Senior Cyber Threat Intelligence Analyst at @PlayStation! This is a full-time remote position in Germany.

https://t.co/68gumTFxPs

#infosecjobs #cyberjobs #cybersecurity #threatintel #threatintelligence #cyberthreatintelligence #firstcti #FIRSTCTI22

[Dimitris Papapetros @0xDimitris]

Log4j 2.17.1 patches an RCE vulnerability (CVE-2021-44832, CVSS 6.6) affecting all versions from 2.0-alpha7 to 2.17.0 (excl.2.3.2 & 2.12.4). The attack requires permission to modify the logging configuration file, if that happens you have more things to worry about.

[Dimitris Papapetros @0xDimitris]

🚨RCE 0-day in log4j:
https://t.co/AwhnWShDI9
https://t.co/M8ZWrwNedj

[Dimitris Papapetros @0xDimitris]

Log4j 2.17.0 has been released in order to patch a high severity DoS vulnerability (CVE-2021-45105, CVSS 7.5) affecting all versions from 2.0-beta9 to 2.16.0.
https://t.co/F5ackjEbQD