GeorgesCyberInt

Hi, I am George. Running an independent newsroom to share cybersecurity related information. Follow me to keep yourself up-to-date. In Ger&Eng

[GovCERT.ch @GovCERT_CH]

🚨 Wir habe Hinweise über Scan-Aktivitäten erhalten, welche nach verwundbaren MS Exchange Server suchen (ProxyShell). Betreiber/innen von Exchange Servern empfehlen wir DRINGEND sicher zu stellen, dass die entsprechenden Security-Patches eingespielt sind (KB5001779 +KB5003435) 🔍

[CERT-Bund @certbund]

🍏Apple iOS 14.4 and iPadOS 14.4 Security Updates for Kernel (CVE-2021-1782) and WebKit (CVE-2021-1870, CVE-2021-1871) ➡️ https://t.co/qQgOd9RdmF "Apple is aware of a report that this issue may have been actively exploited."

[SecurityWeek @SecurityWeek]

BREAKING: Apple Releases Emergency Fixes for Under-Attack iOS Zero-Day - https://t.co/vDHY4EIhXV

[Virus Bulletin @virusbtn]

On his blog, @malware_traffic looks at Excel macros that pushed the Lokibot malware https://t.co/Huc9wmFPQt

[Bitdefender @Bitdefender]

The investment bank got fined for failing to properly decommission multiple business data centers that stored sensitive customer information. https://t.co/mFpwwRdiOi

[MalwareHunterTeam @malwrhunterteam]

3.6.98[.]232
3.6.122[.]107
cc @VK_Intel @bryceabdo @JAMESWT_MHT

[SecurityWeek @SecurityWeek]

Here’s what we know so far about yesterday’s big Twitter hack: https://t.co/U4825fchjC

[SecurityWeek @SecurityWeek]

#Zoom Meetings Aren’t End-to-End Encrypted, Despite Misleading Marketing - https://t.co/8RHj6cZMaE https://t.co/8RHj6cZMaE via @theintercept $ZM

[abuse.ch @abuse_ch]

Interesting: https://t.co/KJ11rdnKW8 redirects to https://t.co/M5sMCf5kJt. Similar behavior than what I have seen earlier today on 185.165.153.0/24 ("PRIVACY_MATTERS"). Bet that these two networks are operated by the same guys! 🧐

[abuse.ch @abuse_ch]

#COVID19 themed spam campaign pretending to come from the US @IRSnews, dropping GuLoader->RemcosRAT

iso:
https://t.co/a09Qfr5E0g

exe:
https://t.co/t9bUr9HW1f

RemcosRAT C2:
rex2015.freeddns[.]org:2404

... which resolves to another weird network called "Freedom Of Speech VPN"

[TrendAI™ Research @trendai_RSRCH]

Notable cyber threats related to #COVIDー19 that we detected in the first quarter of 2020 comprised of spam emails, malware, and malicious domains. More schemes related to the disease: https://t.co/tBo2e6CwY3

[MalwareHunterTeam @malwrhunterteam]

Just found some "not that smart" actors phished some @Huawei employees...
😫
For details, contact @JayTHL.
Also, it would be great if someone from Huawei would register to @abuse_ch's I Got Phished service (https://t.co/mvOrnG5uDR) for future cases...

[GeorgesCyberInt @GeorgesCyberInt]

@malwrhunterteam And Daimler? 😏

[abuse.ch @abuse_ch]

Introducing my newest project: I got phished

The goal is to notify IT-security representatives about phishing victims within their constituency 📨

👉 https://t.co/dl5x1jb3Cg

A big thanks to @JayTHL who initiated the project! 👏

For bug reports and feature requests -> DM me

[CaschysBlog @CaschysBlog]

iOS 13.3.1: Apple veröffentlicht Beta 3 für Entwickler https://t.co/LYw57LjLmZ

[heise online @heiseonline]

Daten-Leak bei Autovermietung Buchbinder: 3 Millionen Kundendaten offen im Netz https://t.co/Enk2VXMRsE #Autovermietung #Buchbinder

[BSI @BSI_Bund]

Kritische #Schwachstelle in #Windows-Versionen: Sicherheitsupdate steht bereit, Anwender sollten es schnellstmöglich installieren https://t.co/tzBUi0Qy6O

[CISA Cyber @CISACyber]

.@CISAgov releases Emergency Directive and Activity Alert on critical Microsoft vulnerabilities. Read more at https://t.co/UxJGnbXErD. #Cyber #Cybersecurity #InfoSec

[GeorgesCyberInt @GeorgesCyberInt]

❗️A severe vulnerability in Win 10 and Servers has been disclosed by NSA to Microsoft ⚠️ Update now! See: https://t.co/rPaLKg6NRO

[GeorgesCyberInt @GeorgesCyberInt]

Bitte Firefox updaten auf 72.0.1 ⚠️
https://t.co/KqD8cs6E2O