Miguel Casares Robles

No reason or rhyme - IT Security Engineer. Wazuh

[Wazuh @wazuh]

The integration of Wazuh with teler helps detect web exploits like HTML injection attacks, directory traversal, and upload attacks.

Learn how to detect web attacks using Wazuh and teler: https://t.co/MQt7DshWpL

#InformationSecurity #CyberSecurity #OpenSource

[BleepingComputer @BleepinComputer]

Wazuh is a free and open source security platform that provides unified SIEM and XDR protection. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments.

Sponsored by @wazuh
#cybersecurity #xdr #opensource
https://t.co/OPEvSWkwQq

[Wazuh @wazuh]

Learn how to get the most out of Wazuh from our best professionals. Don't miss our next special training course in Spanish that starts on October 25th.

Book your seat today: https://t.co/OOzdSlpdxQ

#InformationSecurity #CyberSecurity #OpenSource

[Nicolas Krassas @Dinosn]

New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild https://t.co/VVXbNqTmV5

[TRÄW🤟 @thatstraw]

A great picture to understand Linux File Permissions. 🐧↓

[Harsh🧢 @harshinsecurity]

🔎Search Engines for Pentesters - @NandanLohitaksh🔍
#bugbountytips #BugBounty #Ethicalhacking #cybersecurity

[Samir @SBousseaden]

Sysmon 10 with CallTrace contains seclogon (abused svc via fake client pid) + GAccess eq 14C0 & target is lsass is high likely an indicator of lsass handle obtention using malseclogon:

PROCESS_CREATE_PROCESS
PROCESS_DUP_HANDLE
PROCESS_QUERY_INFORMATION

https://t.co/jSvOhdekz1

[Somdev Sangwan @s0md3v]

🚨 ALERT 🚨

Python's ctx library and a fork of PHP's phpass have been compromised. 3 million users combined.

The malicious code sends all the environment variables to a heroku app, likely to mine AWS credentials.

[The Hacker News @TheHackersNews]

#Google has announced the creation of a new "#OpenSource Maintenance Crew" to focus on improving the #cybersecurity of critical open source projects.

Read: https://t.co/F3BwZrfrEy

#hackernews #hacking #infosec #devops #infosecurity #technews #technology

[The Hacker News @TheHackersNews]

WATCH OUT! F5 warns of a new critical BIG-IP remote code execution #vulnerability (CVE-2022-1388) due to missing authentication checks that could allow attackers to gain control of affected systems.

Details: https://t.co/inPyfcPvWy

#infosec #cybersecurity #hacking #hackernews

[Miguel Casares Robles @casares_robles]

#Emotet malware launches a new email campaign. Learn how to detect this in your environment using #Wazuh https://t.co/8EdT0Ecq7x
#Malware #cyberattacks #opensource

[The Hacker News @TheHackersNews]

A newly discovered UNPATCHED #vulnerability (CVE-2022-05-02) affects the DNS implementation of two popular libraries (Clibc and uClibc-ng) used in a number of #IoT devices, allowing attackers to perform DNS poisoning attacks on targeted devices.

https://t.co/LuPIhtqqwT

#infosec

[Wazuh @wazuh]

Check our new blog post to learn how to detect Sysjoker backdoor malware with Wazuh here:

https://t.co/MpXd8BN0ji

[LetsDefend @LetsDefendIO]

Writing Yara rule for detection

[LetsDefend @LetsDefendIO]

EDR vs XDR

[Bilgin Ibryam @bibryam]

Updated list: Must Read Free Book
https://t.co/VBtfCrJe44

[c7m @0xc7m]

Interesting list of useful Powershell scripts repository with AV bypass. #github #infosec #redteam
https://t.co/Pggd9QtiUc

[LetsDefend @LetsDefendIO]

Ransomware groups and the techniques they use for SOC teams