Benjamin Bouillé

Security Consultant

[ANSSI @ANSSI_FR]

🧰Après une phase expérimentale de test, l'@ANSSI_FR vient de publier la mise à jour du #référentiel d’exigences applicables aux prestataires d’administration et de maintenance sécurisées (#PAMS).

Pour en savoir plus ⬇️
https://t.co/R6rQplcxcc

[Proton @ProtonPrivacy]

Using encryption doesn't matter if you do things like use "password" for your password. And it goes beyond passwords. Here are the most important steps to take to secure your Proton account: https://t.co/mRKedylvKE

[Hexacon @hexacon_fr]

Croissants, red wine and high-quality offensive security talks in a wonderful place? That's all the Hexacon team is promising for October 2022.

Details and Call For Papers are coming very soon... Until then, a bit more teasing for you folks: https://t.co/lM8CWUnCtj

#HEXACON2022

[National Institute of Standards and Technology @NIST]

A1: Cyber attackers are phishing with online messages. Don’t get caught!

Keep an eye out for ...
👀 Misspellings
👀 Unusual email senders
👀 Threats
👀 Time pressure
👀 Generic greetings

@USCERT_gov has more tips: https://t.co/2VBOiJH3Ic

#SlamTheScamChat #NCPW2022

[Fermat's Library @fermatslibrary]

LaTeX was only released in 1984. In the pre-LaTeX era it was common for papers to have hand written formulas and diagrams. Here is a Richard Feynman's PhD thesis, published in 1942.

[Yanir Tsarimi @Yanir_]

I found a vulnerability in #Azure allowing me to access Azure accounts of companies worth billions

We all know vulnerabilities exist. This isn't an injection, XSS, or RCE.

But the crazy thing about it?
It took 2 hours to discover. 🤯

Here's the story of #AutoWarp👇 (1/10)

[blasty @bl4sty]

Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary. https://t.co/q8NtTlbgOZ

[mr.d0x @mrd0x]

Steal Credentials & Bypass 2FA Using noVNC

https://t.co/MUOEtUaKvH

[💾 Astr0 Baby @astr0baby]

If anybody wants to give VxWorks RTOS a try under qemu-system-x86_64 - it is available for free for non-commercial projects and educational purposes - it also runs quite well on the M1 ARM Mac - one still needs x86_64 Linux for the SDK though - https://t.co/u1G633WIoF

[/r/netsec @_r_netsec]

Vulnerability in log4j 2.17.0 more hype than substance | LunaSec https://t.co/BZ1mRAAcRq

[/r/netsec @_r_netsec]

I found and fixed a vulnerability in Python's source code https://t.co/jhASLoj9VL

[NoLimitSecu @nolimitsecu]

#Podcast #Cybersécurité

Épisode #347 consacré aux #REDOCS 2021 (Rencontres Entreprises DOCtorants en Sécurité) du @GdrSecInfo, avec @Pascalafourcade

https://t.co/oUtaX1ofKc

[OSINT-FR @OsintFr]

We are pleased to share with you the #1 episode of our podcast #OSINTOrigins!
In this episode we have invited @manhack, who has worked with @wikileaks and has been doing #OSINT investigations for more than 20 years especially on intelligence services. 1/7

https://t.co/PQBvRIVtia

[Serge Courrier | Now on secou.bsky.social @secou]

🔴 [#OPENDATA] Plateformes open data locales françaises à l'échelon :

⁃communal : https://t.co/x0HMAOaFFA

⁃intercommunal : https://t.co/yf7YsHgyVr

⁃départemental : https://t.co/ya1s2ecOJA

⁃régional et CTU : https://t.co/I3uE1QOyyp

[SwitHak (👁) @SwitHak]

🛡️BlueTeam CheatSheet * #Log4Shell CVE-2021-44228* | Last updated: 2021-12-11 0040 UTC
↘️
https://t.co/gamCpn8AmH

[Simon J. Bell @SimonByte]

I wanted a way to monitor trending CVEs on Twitter

So I built https://t.co/YiHEgCQ2y9

- data comes from Twitter + NIST NVD APIs
- back-end: Python, Flask, PostgreSQL, and Redis
- front-end: React + Bootstrap

It's a quick MVP, but let me know your thoughts and feedback...

[Commandement de la cyberdéfense @ComcyberFR]

🏆 Remise des prix du CTF 🏆de @EUCyberWeek organisé avec @thalessecurity @Amossys @diateam_labs @AirbusCyber @regionbretagne et le COMCYBER.
Félicitations à l'équipe de @EsnaBretagne qui décroche la 1ère place ! 👏🏻

[hardwear.io @hardwear_io]

@securityaffairs @KononovichVl Yes we are on it & will be out soon!😎We will keep you posted. Expect in coming weeks!

[Threat Intelligence @threatintel]

Flaws in GitHub Actions bypass code review mechanism https://t.co/hSQacRPbSU

[☣ KitPloit - Hacker Tools @KitPloit]

Xmap - A Fast Network Scanner Designed For Performing Internet-wide IPv6 &Amp; IPv4 Network Research Scanning https://t.co/TmD8eiolOJ