Ludovic R.

Security analyst and researcher. Life-long FLOSS advocate. For publishing and consulting inquiries, please reach me at [email protected].

[Ludovic R. @_PrivacyCanada]

High recommend everyone checking their email. You might have been compromised. https://t.co/BxEQiYV3lc

[Ludovic R. @_PrivacyCanada]

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. https://t.co/IZVPTFyKL1

[Ludovic R. @_PrivacyCanada]

2.5 million people were affected, in a breach that could spell more trouble down the line. https://t.co/jhCFQ0wIoY

[Ludovic R. @_PrivacyCanada]

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. https://t.co/gs6F82WZLw

[Ludovic R. @_PrivacyCanada]

Twitter is blasted for #security and #privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. https://t.co/a9f4LswoEX

[Ludovic R. @_PrivacyCanada]

Attackers are spoofing the widely used #cryptocurrency exchange to trick users into logging in so they can steal their credentials and eventually their funds. https://t.co/thBAtKfp6k

[Ludovic R. @_PrivacyCanada]

The incident disrupted corporate IT systems at one company while attackers misidentified the victim in a post on its website that leaked stolen data. https://t.co/0CuHMgduuk

[Ludovic R. @_PrivacyCanada]

Fake #travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. https://t.co/qVg3UmlLTp

[Ludovic R. @_PrivacyCanada]

Over 130 companies tangled in sprawling #phishing campaign that spoofed a multi-factor authentication system. https://t.co/cvgbuAUqBm

[Ludovic R. @_PrivacyCanada]

Lockbit is by far this summer’s most prolific #ransomware group, trailed by two offshoots of the Conti group. https://t.co/pYKJVt5jXJ

[Ludovic R. @_PrivacyCanada]

Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. https://t.co/m9zf6paehT

[Ludovic R. @_PrivacyCanada]

Four newly discovered attack paths could lead to PII exposure, account takeover, even organizational data destruction. https://t.co/C2b32T6gd0

[Ludovic R. @_PrivacyCanada]

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. https://t.co/2BpMy8s5VK

[Ludovic R. @_PrivacyCanada]

Instances of #phishing attacks leveraging the Microsoft brand increased 266 percent in Q1 compared to the year prior. https://t.co/23Ym9CM8z6

[Ludovic R. @_PrivacyCanada]

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. https://t.co/IZVPTFziAz

[Ludovic R. @_PrivacyCanada]

Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. https://t.co/m9zf6paM7r

[Ludovic R. @_PrivacyCanada]

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack. https://t.co/zRJPXlsTFn

[Ludovic R. @_PrivacyCanada]

Twitter is blasted for #security and #privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. https://t.co/a9f4LswWuv

[Ludovic R. @_PrivacyCanada]

The CISA has seen a resurgence of the #malware targeting a range of verticals and critical infrastructure organizations by exploiting RDP, firewall vulnerabilities. https://t.co/dLoMuQjLHr

[Ludovic R. @_PrivacyCanada]

Also known as the Atlantis Cyber-Army, the emerging organization has an enigmatic leader and a core set of admins that offer a range of services, including exclusive data leaks, #DDoS and RDP. https://t.co/JsnmUZ817L

[Ludovic R. @_PrivacyCanada]

300 restaurants and at least 50,000 payment cards compromised by two separate campaigns against MenuDrive, Harbortouch and InTouchPOS services. https://t.co/FeXgVbohPe