Nic

Security Researcher

[Nic @NetSecOps]

@dominos Make sure your drivers are well versed in knowing what hotels in their area are pet friendly. Just had a delivery run away and put my food on a table because my dog barked. If they're afraid of dogs, don't send them to a pet-friendly hotel.

[briankrebs @briankrebs]

In an SEC filing, SolarWinds says "the vulnerability was not evident in the Orion Platform products’ source code but appears to have been inserted during the Orion software build process." https://t.co/opQEEKP0ZX

[Jake | JCyberSec_ @JCyberSec_]

👍🏼Want to be a better Cyber Threat Analyst?

Play devils advocate with myself😈

1️⃣Produce a hypothesis.
2️⃣Contradict it.
3️⃣Strengthen your initial idea or revoke it and start again.

⏱️It will take longer; but your analysis will be stronger.

#Phishing #CTI #CareerDevelopment

[Eric Feigl-Ding @DrEricDing]

BREAKING—Updated results from Pfizer said it’s #COVID19 vaccine is 95% effective (vs 90% in previous early results) and had no serious side effects. 94% effective in older adults. Of 170 cases, 162 in placebo. Of 10 severe, 9 in placebo. This is HUGE!! https://t.co/OSY2hakKF8

[The Associated Press @AP]

BREAKING: Pfizer suggests its coronavirus vaccine is 95% effective and that the shots would protect older people most at risk of dying. https://t.co/Qr8TBlqnCE

[Nic @NetSecOps]

Check out this new CTI tool

[Jake | JCyberSec_ @JCyberSec_]

The framework replies heavily on the urlscan-py wrapper written by Spencer Heywood (https://t.co/ZwcyDa6IAe)

Source: https://t.co/zjKCtXwBwn

Note - I am not a programmer. This is a tool which I built to help me and saw value in sharing it with others.

[ITWhale @whale_it]

#Phishing Lloyds Bank
URL: payeesuspension[.]com
IP is 185.61.153.111
Hosted by @Namecheap
Past Phishing site on IP 2111 🥴

[Jake | JCyberSec_ @JCyberSec_]

🎈GAME TIME!!

Can anyone spot the error with this code? 😂

#PhishingFail🎉

[Nic @NetSecOps]

@BethDemme It is possible if both sides listen to each other and truly listen, not listen to respond.

[Nic @NetSecOps]

@briankrebs I don't walk away until it finishes. I've found machines are more vulnerable when patching @briankrebs

[CISA Cyber @CISACyber]

❗ @CISAgov and @FBI are aware of an Iranian APT Actor targeting U.S. state websites, including elections websites. Read more at https://t.co/57m6abTRj2 to secure voter registration data ASAP.
#Cybersecurity #APT #Infosec #Protect2020 #Elections

[ITWhale @whale_it]

#phishing Halifax Bank phishing campaign via txt
Hosted by @Namecheap
URL: //new-payee-alert.cc
IP is 198.54.115.227

[CISA Cyber @CISACyber]

⚠️ @CISAgov has noticed a spike in #password spraying, which typically targets single sign-on and cloud-based apps. Visit https://t.co/61d12H4Blq for information on securing internet-facing systems from vulnerabilities.
#Cybersecurity #CyberHygiene #Infosec

[Nic @NetSecOps]

@VickerySec I received one to a guy named "Vishnu". I've had my number for years. It was similar in asking me to vote for Cory Booker here in NJ.

[Troy Hunt @troyhunt]

I’d like to say a big “thank you” to @realDonaldTrump for providing me with material that’s going to feature in many, many presentations for years to come 🤣

[Nic @NetSecOps]

Google is apparently too big for its own good.

"The US Justice Department is set to file an antitrust lawsuit against Google" https://t.co/H5UmzWIp6q

[CISA Cyber @CISACyber]

⚠️ @CISAgov and @FBI have released a joint cybersecurity advisory regarding APT actors chaining vulnerabilities against SLTT, critical infrastructure, and elections organizations. Read more at https://t.co/8NTWHdA4ar.
#APT #Cybersecurity #InfoSec

[Borderlands @Borderlands]

"Arms Race"

[ITWhale @whale_it]

#phishing SMBC, Three UK, TD Bank, 02, UK GOV, HSBC, Halifax
Hosted by @Namecheap @ColoCrossing @CloudflareAbuse @Hostkey

[ITWhale @whale_it]

IP is full on apple related domains

this URL is interesting http://com-appie[.]cl/patron/