chervaliery

[Givn @givn_io]

🎁 CONCOURS

Logitech a encore frappé et vous offre le casque G3215 Lightspeed à remporter sur Givn !

Pour participer 👇
-Follow Givn sur X et RT la publication
-Follow Givn sur Instagram et like la publication

⏰ TAS : 16/04
🍀 Bonne chance à tous

#givn #gaming

[Sébastien Mériot @smeriot]

We just published a guide for DFIR teams to perform forensics on Public Cloud instances in case of 🙂

[chervaliery @chervaliery]

#For610 was a really great course !
Thanks for @xme for this training !

[Xavier Mertens @[email protected] 🇧🇪 @xme]

Another #FOR610 training completed! Congratulations to the coin winner and kudos to all the students for the great week!

[ESET Research @ESETresearch]

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5

[PT SWARM @ptswarm]

Since the PoC for the VMware vCenter RCE (CVE-2021-21972) is now readily available, we're publishing our article covering all of the technical details.

Read the article: https://t.co/L3nms8E71o

[Virus Bulletin @virusbtn]

At VB2020 localhost @__Thanat0s__ detailed an incident response that he and his team faced when, in December 2019, a Belgian hospital required their help to manage a breach of their informations system. https://t.co/LwqO6dOZGW

[Thales Cyber Solutions LU & BE @ExcelliumSA]

#FIC2020 - #CoRIIN: Présentation disponible en ligne!
Dans le cadre du @FIC_eu s’est tenue la 6ème Conférence sur la réponse aux incidents et l’investigation numérique (CoRIIN). Retrouvez la présentation de Guenaëlle De Julis du CERT-XLM: https://t.co/5fRGMcgi6m
#cybersecurity

[TrendAI Zero Day Initiative @thezdi]

Windows #UAC isn't a favorite feature, but @HexKitchen details a bug submitted by Eduardo Braun Prado that shows how you can use it to escalate from guest to SYSTEM (includes video) https://t.co/eS3mDLxc5l

[Metasploit Project @metasploit]

Today we released a community-developed exploit module PR for #BlueKeep (CVE-2019-0708). We expect to continue refining the exploit over time in collaboration with contributors. Some important notes on exploitation and detection from @busterbcook: https://t.co/1y4TodHDc0

[Thales Cyber Solutions LU & BE @ExcelliumSA]

Our security expert Dominique Righetto discovered a vulnerability in ManageEngine Asset Explorer. More information about our CVE-2019-12994, CVE-2019-12959 and CVE-2019-14693 in our website : https://t.co/vY3xdgIT2S

[Dominique Righetto @righettod]

We are now an OWASP Flashship project.
It reward more than 2 years of very hard work from the core team supported by our amazing community.
Thank you to the OWASP board and our community for your trust and constant support.

https://t.co/TZnkuQQXV5

#owaspcheatsheetseries #owasp

[France Titres - ANTS @FranceTitres]

@k0dcast Bonjour, avez-vous renseigné tous vos noms et prénoms dans les cases prévues à cet effet ? Si vous n'avez qu'un nom et prénom, je vous invite à mettre un ou deux autres prénoms au hasard. Vous pourrez les enlever dans votre rubrique "Mes données personnelles", une fois connecté.

[Sean Coonce @cooncesean]

My personal identity was hacked last week. The attacker was able to steal $100k+ in a sweep of my Coinbase account. I'm equal parts embarrassed, hurt, and deeply remorseful.

In an effort to raise awareness about the attack, I wrote about it here: https://t.co/ZnbB0AN6Gd

[__mat__ @matthieu_faou]

New @ESET Research: We analyzed #LightNeuron, a #Turla malware targeting Microsoft Exchange servers
- Abuses the Transport Agent feature
- Can read/modify/block any email
- Backdoor controlled by email attachments
Full WP: https://t.co/9Ct47e2VPC
Blogpost: https://t.co/sd3FNDrwqa

[d00rt @D00RT_RM]

Dynamically compile C# in PowerShell - too funny :)

Add-Type -outputtype consoleapplication -outputassembly helloworld.exe 'public class helloworld{public static void Main(){System.Console.WriteLine("hello world");}}'

[Dominique Righetto @righettod]

If you use Odoo then it is time to patch because my team mate Benoît Chenal have spotted a security issue 😉

https://t.co/ZaUKVJ7eAq

@ExcelliumSA #appsec

[Dominique Righetto @righettod]

If you use WSO2 API Manager then it is time to patch because my team mate @JulienOuryNog have spotted some security issues 😉

https://t.co/hDHreVpGpN

https://t.co/DhjDRdWmuI

@ExcelliumSA #appsec

[Samy @no0be]

Do you still consider WPA2-PSK is secure? Well, what if I told you that people still uses lame passwords...

Check-out my PwnageBase post on cracking WPA-PSK wireless networks:
https://t.co/gZU2KzRphf

#infosec #pentest #wifi

[Samy @no0be]

Happy to release my first offensive security tool on GitHub 😀 !

DNSlivery - Easy files and payloads delivery over DNS
https://t.co/czRpcQvW2D

Special thanks to @joff_thyer, @securityweekly and @MDSecLabs for the inspiration.