CollectiveMakers

IT Experts community : We share CyberSecurity, Cloud/Devops and Digital Workspace intelligence.

[🅰🅽🆃🅾🅽🅸🅽 🅷🅸🅻🆈 @AHCybSec]

LAPSUS$ se paye @okta ?
Le fournisseur de services d'authentification Okta enquête sur une probable cyberattaque après la publication de captures d'écran montrant des données internes...
#infosec #cybersecurity #threatintelligence
https://t.co/6Jvj3T7Yop

[CERT-EU @CERTEU]

Critical Vulnerability in Microsoft Exchange Server (CERT-EU Security Advisory 2022-015) - https://t.co/YE91U1uu7l

[The Hacker News @TheHackersNews]

Researchers warn of a new high-risk #vulnerability (CVE-2022-0492) affecting the #Linux kernel's cgroups feature that could potentially be abused to escape a container to execute arbitrary commands on the host.

Read details: https://t.co/kj4EYGauRX

#infosec #cybersecurity

[CollectiveMakers @Collectivebay]

Nouvelle édition de la norme ISO27002, version 2022 https://t.co/Y8It2yrOOt

[Trickest @trick3st]

Releasing our latest project, CVEs! A constantly updated collection of 𝘢𝘭𝘮𝘰𝘴𝘵 every publicly available CVE PoC.

👉 Browse, find a PoC, and test away!
👉 Search for a specific product.
👉 Watch the repo to be notified when new PoCs go public!

https://t.co/O4NQeQvDcM

[CollectiveMakers @Collectivebay]

VirusTotal hacking - Hackers can access trove of stolen credentials on VirusTotal https://t.co/3nyScGmMrE

[Scott Piper @0xdabbad00]

😱😱😱 This is worse than ChaosDB for AWS. @orcasec gained access to all AWS resources in all AWS accounts! They accessed the AWS internal CloudFormation service.
https://t.co/2oCCRvo389
Separately, they did something similar for Glue.
https://t.co/BDFMLQI06B

[Yoan Bernabeu @yOyO38]

💡 Votre historique Git est obscure pour vous ? Besoin d'y voir plus clair ?

👉 « Un bon croquis vaut mieux qu'un long discours »

🚀 L'extension "Git Graph" pour VSCode est faite pour : https://t.co/RT6rQATV28

👌 Naviguer dans l'historique graphiquement hyper simplement !

[Matthieu Garin @matthieugarin]

🚨 S'il n'y avait qu'un seul article à lire sur #Log4Shell... regardez ici : https://t.co/IFJRvFWvvZ

1️⃣ Le mieux: maj #log4j vers la version 2.15.0
2️⃣ Sinon: maj de la variable log4j2.formatMsgNoLookups à True
3️⃣ Plus radical: enlever la classe JndiLookup

Bon courage à tous !

[CollectiveMakers @Collectivebay]

Sysadmin/DevOps/SRE, highway to a massive pauperization of our jobs! https://t.co/9LFlka9SlS

[CollectiveMakers @Collectivebay]

How we rolled out security keys at Twitter https://t.co/JV9a8rwx7n

[CollectiveMakers @Collectivebay]

5 start-up françaises lancent une solution souveraine de détection des cybermenaces https://t.co/U7qQUhGHMX

[CollectiveMakers @Collectivebay]

gquere/pwn_jenkins: Notes about attacking Jenkins servers https://t.co/1iHmt9nUDT

[CollectiveMakers @Collectivebay]

Customer Zero: Elastic's infosec team protects the organisation with Elastic Security https://t.co/4xBLtJvBuy

[CollectiveMakers @Collectivebay]

A Closer Look at NSA/CISA Kubernetes Hardening Guidance https://t.co/VoUQtmVe5t

[CollectiveMakers @Collectivebay]

Les pirates épient en continu les secrets des dépôts GitHub https://t.co/EtPzYNeqqd

[CollectiveMakers @Collectivebay]

Linux Page Cache for SRE https://t.co/ou65meiH0m

[CollectiveMakers @Collectivebay]

ZDI-21-1053: Bypassing Windows Lock Screen https://t.co/FT3JFaBySf

[CollectiveMakers @Collectivebay]

Microsoft warning: This malware creates a 'persistent' backdoor for hackers https://t.co/0hMhsKTHeX

[CollectiveMakers @Collectivebay]

Impact of Packet Loss and Round-Trip Time on Throughput https://t.co/1P56stjAZn