cert_lu

Cyber Emergency Response Community Luxembourg

[BSidesLuxLegacy @BSidesLuxLegacy]

BSides Luxembourg returns with a completely new organizing team and with a completely different conference! Check out https://t.co/Zuz6cJBqIp!
Please note: This account belongs to the legacy event and will not be used for announcements related to the new edition!

[hack_lu @hack_lu]

https://t.co/reuUA39Vtf 2024: A Can’t-Miss Cybersecurity Event in the Heart of Europe.

The conference agenda is live! Explore the latest sessions and workshops.

#conference #hacklu #luxembourg #europe #infosec #cybersecurity #workshop #training

🔗 https://t.co/IZup0WvdRk

[hack_lu @hack_lu]

The first wave of acceptance notifications for workshops, training sessions, and talks has been sent to the speakers.

The initial version of the agenda will be published on Monday.

#hacklu #infosec #conference #cybersecurity

[CIRCL - @[email protected] @circl_lu]

Windows TCP/IP Remote Code Execution Vulnerability when IPv6 is enabled

🔗 https://t.co/9mxFu2AcJE

#vulnerability #windows #infosec

CVE-2024-38063

[Alexandre Dulaunoy @[email protected] @adulau]

Call for papers is now open for https://t.co/zuFtxtvuED 2024

https://t.co/6iA1Rw1iCv

#cfp #infosec #conference #luxembourg #hacklu

@hack_lu

[Fondation Restena @restena]

🛠️- On 15 Feb. 24 we will replace the server used for our recursive resolver open to the general public,
❗️👉If you are using it:
1⃣ expect a temporary service interruption on 15 Feb 2024
2⃣ reconfigure the public DNS resolver with the new server
ℹ️ https://t.co/Pn3UDqHjju

[CIRCL - @[email protected] @circl_lu]

A out-of-bounds write vulnerability [CWE-787] in FortiOS may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.

"Workaround : disable SSL VPN (disable webmode is NOT a valid workaround)"

https://t.co/wCG3lf2uIO

[cert_lu @CertLu]

OMG, what a disaster.... Spread the word!

[Luxembourg House of Cybersecurity @houseofcyber_lu]

🚨TR-81 - Critical FortiOS vulnerabilities in sslvpnd and fgfmd
Two critical vulnerabilities in FortiOS devices were discovered.
With more than 600+ FortiOS devices in Luxembourg, it is highly recommended to look at the published TR - 81 and follow CIRCLs recommendations.

[CIRCL - @[email protected] @circl_lu]

TR-81 - Critical FortiOS vulnerabilities in sslvpnd and fgfmd

https://t.co/77375qmP44

#infosec #vulnerability #fortios #fortigate

[CIRCL - @[email protected] @circl_lu]

In the endless vulnerability story of Ivanti products, here is a new pitch:

"CVE-2023-46805, CVE-2024-21887, CVE-2024-21888 and CVE-2024-21893 can be mitigated by importing mitigation.release.20240126.5.xml file via the download portal."

https://t.co/2B6RCRsaHg

#ivanti

[CIRCL - @[email protected] @circl_lu]

TR-78 - CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Connect Secure and Ivanti Policy Secure Gateways

It's a critical. We sent notification to various ISPs in Luxembourg. Review your equipment it's important.

🔗 https://t.co/qNMFlP5imN

[Cynthia Wagner @evilolive28]

#cyberday_lu full house today! @restena @circl_lu @UE_Luxembourg @passbolt @BEESECURE @TelindusCSIRT @dlhluxembourg

[Fondation Restena @restena]

#cyberday_lu 📢 D-7 before https://t.co/2CSSoOOs6g event and... only 10 places left!
🏃‍♀️🏃‍♂️ Hurry up to attend the #cybersecurity event on Thurs. 12 Oct. from SKIP Pavilion in Esch #Belval
👉 Read the full programme & register at https://t.co/XpsPdKToSM

[hack_lu @hack_lu]

Agenda for https://t.co/jIxEOJNCg1 2023 - slightly updated and new workshops added:

https://t.co/ICminLGG3c

#hacklu #conference #infosec

[hack_lu @hack_lu]

First version of the @hack_lu 2023 agenda is now online

https://t.co/ICminLGG3c

The agenda will be extended in the next days with latest speaker acceptances or updates.

#hacklu #conference #infosec #luxembourg

[CIRCL - @[email protected] @circl_lu]

TR-77 - Spear phishing and voice call scams targeting corporate executives and their accounting department

There is a new campaigns targeting various organisations in Luxembourg. This document includes recommendations and a sample case:

https://t.co/kMh6oKqlQA

[hack_lu @hack_lu]

Don't forget to purchase your tickets for https://t.co/jIxEOJNCg1 and CTI summit - the special pricing is valid until this Friday!

#conference #infosec #luxembourg

[Alexandre Dulaunoy @[email protected] @adulau]

Don’t forget to submit your talk proposal to https://t.co/5Fm1u7ga3J (and also cti summit). Don’t be shy. We are interested in many topics in infosec and also welcome new speakers with challenging topics.

https://t.co/5Fm1u7ga3J

[hack_lu @hack_lu]

https://t.co/GWso7b68eB 2023 - 16-19 October 2023 is back and will take place physically in Luxembourg. The call for papers/presentation is now open and we will be glad to receive your proposals.

#infosec #conference #callforpapers

CfP -> https://t.co/FbMWe6Mb9r

[CIRCL - @[email protected] @circl_lu]

We have been informed that criminals impersonating CIRCL operators are contacting citizens and try to "give support" by installing remote access tools like TeamViewer. This is obviously scam. Hang up, don't react and please report the telephone numbers to us.