Lilian Martinez

[Nir Ohfeld @nirohfeld]

For more details about these vulnerabilities, check out our full technical blog @wiz_io 👇👇👇

https://t.co/tPTV3VvK9M

[CISA Cyber @CISACyber]

🛡️ Palo Alto Networks PAN-OS users: We added #CVE-2024-3400, a command injection vulnerability in GlobalProtect Gateway, to our Known Exploited Vulnerabilities Catalog. Apply mitigations to protect your org from cyberattacks. https://t.co/myxOwap1Tf #Cybersecurity #InfoSec

[Will @BushidoToken]

🧵 Enjoying the trend of AI-generated Lego for cyber stuff 😃

First up - The Good Guys

h/t @snyff

[Lilian Martinez @AGNETA26]

Cositas que sé te dan paz mental @eljeffto

[Science girl @sciencegirl]

Making blue fin tuna sashimi from lego

📹 ilikehome_stopmotion
https://t.co/JmJXrZzCee

[Shodan @shodanhq]

The $5 Membership sale is now live! The sale lasts until July 17 23:59 UTC: https://t.co/0iqiq2vTpn

[Virus Bulletin @virusbtn]

Researchers from Zscaler ThreatLabz look into a multi-stage trojan targeting businesses in the LATAM region. The TOITOIN malware uses specially crafted modules throughout each stage and employs various evasion techniques and encryption methods. https://t.co/nHbqFFDVhf

[Hacking Articles @hackinarticles]

Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

[Lilian Martinez @AGNETA26]

Muy "jocosos" los cientos de subdominios registrados con "con-ip". Como bien lo dice Felipe, nada bueno viene de ahì!

[Felipe Duarte @dark0pcodes]

#REMCOS RAT AFECTANDO COLOMBIA

PHISHING EMAIL
[+] Subject: NOTIFICO DEMANDA PENAL RAD

C2 SERVER
[+] Domain: palenquito.con-ip[.]com:7770
[+] IP Address: 181.132.132.53

INFECTION CHAIN
Phishing -> Google Docs -> TAR -> EXE (1 GB) -> Process injection CSC.exe

[BleepingComputer @BleepinComputer]

Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs - @LawrenceAbrams
https://t.co/dMTTvmKXTb

[Rufus @rufusmbrown]

Mandiant IR has discovered new insights into UNC3886 intrusions including a new VMware zero day vulnerability (CVE-2023-20867), leveraging VMCI sockets, and additional tampering on systems which generally do not support EDR.

Check out the new blog here: https://t.co/ZHxYsqY9c3

[Alexandra Ramirez C @calexiar]

Super invitados a esta charla. Vamos a realizar el análisis de un incidente para ver aspectos críticos en una respuesta oportuna. Invitados a inscribirse para interactuar. Igual a través de YouTube pueden acceder al evento. Los esperamos!
#infosec #infosecurity #incidentresponse

[Lilian Martinez @AGNETA26]

@sgcol Wow en bogotá..me despertó!

[Alexandra Ramirez C @calexiar]

Estamos adelantando la 2° versión de esta encuesta y queremos contar con su participación. Conocer su visión sobre algunos cuestionamientos de nuestra profesión, sus retos y oportunidades es importante. Así que si pueden compartirla con otros profesionales, gracias :)

[BleepingComputer @BleepinComputer]

Emotet botnet starts blasting malware again after 5 month break - @LawrenceAbrams
https://t.co/iVPeGIJWIE

[Lilian Martinez @AGNETA26]

Overview of software (un)affected by the OpenSSL vulnerability. Vendors, status, some workarounds..

[ICSNick @IcsNick]

Thanks @Synacktiv for an awesome blog post and feels awesome to have given the inspiration of detection of remote tooling!

https://t.co/NgEvaMQUkb

[Antonio Sanz @antoniosanzalc]

Locura técnica de artículo #DFIR: cómo ver si un archivo está sincronizado o no con OneDrive vía atributos de la MFT: https://t.co/39vgsQGREj

[Jack Halon @jack_halon]

Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field.

Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! https://t.co/bbFjOOzlOu

[juan cubillos @juanch1t0]

The Northern Virginia Shuffle: Lateral Movement and other Creative Steps Attackers Take in AWS Cloud Environments and how to detect them. #bsideslv2022 https://t.co/4VTaCF8384