DubexDIRT

Infosec, Forensics, Incident response, IT security intel from Dubex teams.

Dubex Cyber Defence Center (CDC) and Dubex Incident Response Team (DIRT)

[DubexDIRT @DubexDIRT]

Cisco Talos has posted information about firewall attack for multiple vendors.

Read this from Cisco for the details and make sure that your firewall and network gear are updated to newest patch and if possible enable MFA.

#CVE2024_20353 #CVE2024_20359

https://t.co/FoxUwHHdGR

[DubexDIRT @DubexDIRT]

Vi er mere end klar til at se dig på V2 Security i Øksnehallen i næste uge!

På vores helt egen techstage kan du få fornøjelsen af at møde Keld Norman, Steffen Munk, Rasmus Wiegman, Martin Thunn Hansen, mf.

Vi glæder os til at se dig i Øksnehallen på stand 1000.

#v2security

[DubexDIRT @DubexDIRT]

Part3
can pose a potential risk to users' security, and caution must be exercised when browsing such websites.
An easy fix is to block the .ZIP domain in a Web Proxy / Web Security Gateway, or use Web Isolation services for .ZIP and untrusted domains.

[DubexDIRT @DubexDIRT]

Beware of .zip domains! They may look innocent, but they can trick you into accessing fraudulent websites and compromise your security.

Stay vigilant and protect your sensitive information!

#security #cybercrime #zipdomains

[DubexDIRT @DubexDIRT]

Part2
standard .zip file format when, in reality, they are accessing a website. Cybercriminals can exploit this confusion by creating fraudulent websites and tricking users into entering sensitive information such as passwords or credit card details. Therefore, using .zip domains

[DubexDIRT @DubexDIRT]

If you are at Version2 Security at Øksnehallen today, can you spot Dubex stand ?

If you can find us, then give a like and there is a free cup of coffee.

#V2security #cybersecurity

[DubexDIRT @DubexDIRT]

Important to update your Apple devices to the newest iOS and macOS version.

New vulnerability known as CVE-2023-23514, CVE-2023-23529 and CVE-2023-23522 in Apple iOS older than 16.3.1 and macOS older than 13.2.1

https://t.co/nGwARTy89b
https://t.co/bHl5dX2URP

#cybersecurity

[DubexDIRT @DubexDIRT]

3/
Vulnerabilities like these in perimeter devices with remote access features such as Forgiate and Citrix appliances are critical as they have historicly led to serious breaches.
https://t.co/TgpZsBqwks

[DubexDIRT @DubexDIRT]

1/ Warning!
Attackers are reportedly actively exploiting critical 0-day vulnerabilities in FortiGate appliances with SSLVPN (CVE-2022-42475) and Citrix ADC/Gateway (CVE-2022-27518).

Vulnerabilities like these has previously led to serious breaches so it is urgent to patch now!

[DubexDIRT @DubexDIRT]

2/
Fortigate SSLVPN (CVE-2022-42475)
https://t.co/iiudKIgZRl

Citrix ADC/Gateway (CVE-2022-27518)
https://t.co/Dh2M1seLqu

[DubexDIRT @DubexDIRT]

Dear Admin

We know you are open network kind of person and hate outbound firewall rules, but will you please just add firewall logging that include byte count per session.

So, we better can include in the forensics rapport if adversary stole 100KB or 100GB from your network.

[DubexDIRT @DubexDIRT]

Yet another ”customer” visit by Dubex Red team and again without use of the Get-out-of-jail-free-card for all four times we got in and out...

We see you at a company site near you, MAYBE you see us or not.

#redteam #cybersecurity #CyberSecurityAwareness

[DubexDIRT @DubexDIRT]

@emilstahl @FixiDK We banana at the office, so hope that @FixiDK was able to deliver it to you.

[DubexDIRT @DubexDIRT]

When disposing old server gear, do you remember to properly decommission the old storage media, or can we buy them on eBay with your data on them?

If you guess the total weight of them, you win the banana

#Banana4scale

[DubexDIRT @DubexDIRT]

The winner with the closest guess will be selected on friday next week and can then collect the banana.

[DubexDIRT @DubexDIRT]

@clysel what is your weight ratio you use for TB vs KG ?

[DubexDIRT @DubexDIRT]

As a contribution to the cyber security community, Dubex CDC and Dubex DIRT will start sharing timely and relevant intelligence on cyber security matters, including insights and learnings from our daily work with preventing, detecting and responding to intrusions.

Stay tuned!