Calvin Gan

Security Vulnerability Expert | Threat Protection Manager | Board Member @FSecure. Tweets and retweets are expression of my own opinion.

[F-Secure @FSecure]

F-Secure’s new 'Living Secure' report offers a comprehensive look at digital priorities and habits in 2023. It highlights the digital moments we want to protect and those that make us feel most vulnerable. Download it today: https://t.co/bsuAIPlLvG

[Sami Laiho @samilaiho]

The instructions are meant to prevent losing your biggest treasure – the Directory Service. A few soldiers might be lost but the directory service will not be compromised.

[Katie Nickels @likethecoins]

A simple threat modeling exercise. You/your leadership may be focused on the destructive attacks in Ukraine: https://t.co/HC4WaKut6T. But if you're not in Ukraine, I'd argue threats against VMware Horizon should likely be a higher priority: https://t.co/WkUAoGHifj.

[Kim Zetter @KimZetter]

I published an assessment of what we currently know/don't know about the cyberattacks against Ukraine. Includes new info and some analysis. Also tried to detail how the wiper works, but Microsoft's blog was a bit confusing. Let me know if I got it wrong.
https://t.co/CrRkU9HV4K

[Matt Linton @0xMatt]

InfoSec is:

Ten percent luck
Twenty percent tools
Fifteen percent making sense of government rules
Five percent python
Fifty percent pain
And a hundred percent learning how to clearly explain

[WithSecure™ @WithSecure]

12 notorious #ransomware actors nabbed in major Europol-led operation, via @TEISS

"This shouldn’t be seen as the end because the financial motivation behind these attacks is probably far too large for them to give up easily." - @c_gcw

https://t.co/6NffxQyR8v

#cybercrime

[WithSecure™ @WithSecure]

“The larger the impact to people or nations, the more pressure there is for these organizations to pay up or act upon the breach,” said F-Secure's @c_gcw. “This serves as motivation for attackers to continuously target them....”

[WithSecure™ @WithSecure]

NEWS: F-Secure R&D discovers exploitable vulnerability in Apple’s macOS Gatekeeper>> https://t.co/tVUd8VRIan

[WithSecure™ @WithSecure]

“A good reminder is for all organizations to treat third-party vendors or providers as part of their organization when performing security audits."

@c_gcw of our Tactical Defense Unit on the Codecov supply chain attack

https://t.co/CSguBJi3Aa

[Help Net Security @helpnetsecurity]

Nearly 40% of new ransomware families use both data encryption and data theft in attacks - https://t.co/tGBZKBqbqC - @FSecure @c_gcw @solarwinds @msexcel @Facebook @Office365 #cybersecurity #security #infosecurity #itsecurity #CISO #cybersecuritynews #securitynews

[WithSecure™ @WithSecure]

Two brilliant threat and defence experts go deep into the questions about #ProxyLogon that really matter, post-patch: Were we breached? What do we do now? Free webcast: https://t.co/rq06JHFyoo #cybersecurity

[WithSecure Labs @FSecureLabs]

Vulnerabilities killed the radio star, @LAripping came and broke your app
https://t.co/CoN3A5rSJr

[Infosecurity Magazine @InfosecurityMag]

Double-Extortion Ransomware Attacks Surged in 2020 https://t.co/XLLgrIffWy

[F-Secure Consulting @FSecure_Consult]

Shout out to our TacDef team for this Attack Landscape Report🙌“Out of all #incidentresponse investigations conducted by F-Secure’s security consultants in 2020, approximately 1/3 of them involved #ransomware - often following hands-on-keyboard hacking.”

#Cybersecurity #Infosec

[WithSecure™ @WithSecure]

NEW REPORT: online extortion, data theft gaining traction among cyber criminals.

Read more about Ransomware 2.0 and other trends in the threat landscape --> https://t.co/oQDQiL6IA3

#cyberattacks | #CyberSecurity | #ransomware | #infoSec

[The Register @TheRegister]

BP Chargemaster's Pulse rebrand let crims send IcedID banking trojan from formerly legit mailboxes https://t.co/JuRENHrYYg

[Barry Salmon @BarryPR_]

BP Chargemaster email domain hijacked by criminals to send banking trojans

@FSecure confirmed the nature of the #malware to @GazTheJourno @TheRegister

"The email is a malspam campaign spreading a new version of the IcedID banking trojan" @c_gcw

https://t.co/ps6UdATRRT

[@mikko @mikko]

Leader of the REvil ransomware gang claims that they target companies with cyber insurance. https://t.co/CR8PHSR6g1

[WithSecure™ @WithSecure]

NEW DATA FROM OUR TACTICAL DEFENSE UNIT:

Significant attacks on Microsoft Exchange ProxyLogon detected, but there’s still time to act

https://t.co/obm60uvxuY

[John Lambert @JohnLaTwC]

To simplify mitigating Exchange servers from recent attacks for customers that cannot patch, Microsoft has released a tool that installs a mitigation and runs a scan for the latest webshells. Find it below:
👇👇👇