CSTI Team Support

🇨🇭Switzerland Team Support @csti_sa . 💻▶️network status

[CSTI SA @CSTI_SA]

L'interview, dans son intégralité est en ligne, https://t.co/qiKnVMYTVs et sur notre site Internet (qui en profite pour apporter quelques nouveautés !)

Quelle semaine incroyable ✨ ! Merci à toute l'équipe qui a permis, encore une fois, de réaliser l'improbable 🔝

[CSTI SA @CSTI_SA]

La v1 est (enfin) en PROD ! #2024 #staytuned

Merci à toute l'équipe qui, chaque jour, relève des défis incroyables.

https://t.co/BcvQcJ7ZiG

[Akamai Security Intelligence Group @akamai_research]

Akamai researchers discovered evolving campaigns of the Mirai-based NoaBot, including additional obfuscation techniques and XMRig crypto mining. https://t.co/2Oscw3Ju1R

[CSTI SA @CSTI_SA]

Dans le cadre de notre amélioration continue, une nouvelle étape de franchie, avec le décommissionnement de quelques équipements. Plus de performance, et est encore➕écologique ♻️, pour garantir la maitrise des prix envers nos clients ! #CSTI #Swiss #IT (Merci Thomas✅) @remyd74

[CSTI Team Support @CstiSupport]

Plusieurs clients sont impactés.
L'envoie d'emails depuis O365 pose soucis, mais cela est en passe d'être résolu, d'après le dernier message de MS.

[Microsoft 365 Status @MSFT365Status]

We're investigating an issue where some users may be unable to send Exchange Online email messages due to a recent change to the free/busy infrastructure. We're identifying a plan to resolve the impact. Further details can be found under EX649175 in the admin center.

[CSTI Team Support @CstiSupport]

Brute Force Top password #hacking #security @CSTI_SA

[CSTI Team Support @CstiSupport]

Hey Ip Scanner (Happy scanner) ! We saw you ✅@CSTI_SA #hacking ping @remyd74

[CSTI Team Support @CstiSupport]

Suite à un problème technique chez Wildix, nous ne sommes pas en mesure de recevoir de communications téléphoniques actuellement
Nous vous tenons informés de l'évolution de la situation et restons joignable par mail
Nous vous prions de nous excuser pour la gêne occasionnée

[CSTI Team Support @CstiSupport]

Due to a technical problem at Wildix, we are currently unable to receive telephone calls
We will keep you informed of the evolution of the situation
We can of course be reached by e-mail at the usual address
We apologize for the inconvenience caused

[🔎Julia Evans🔍 @b0rk]

life of a DNS query
https://t.co/5Xklb79VHx

[Ondrej Filip @ondrejfilip]

Najde se tu někdo natolik odvážný, aby šel spoluvytvářet software, na kterém stojí dnešní Internet? https://t.co/ofMUBZSVVF

[Bryton Herdes @next_hopself]

“Half of all BGP updates during December 2021 are attributed to less than 10% of the unstable prefixes, and just 50 origin Autonomous System Numbers (ASNs) accounted for one-half of all BGP IPv4 updates in this period.” Few extremely noisy ASNs with big time route instability

[Bad Packets by Okta @bad_packets]

Ongoing mass scanning activity detected from 62.76.41.46 (🇷🇺) targeting Atlassian Confluence servers vulnerable to remote code execution (CVE-2021-26084).

Payload:
http://91.201.202.139/cf.sh (🇺🇦)

First seen: 2021-12-20T02:23:34Z
Last seen: 2022-01-09T00:58:54Z
#threatintel

[Emile Aben @meileaben]

A quick write-up of our observations on the #Kazakhstan Internet outage https://t.co/X9srvrazoj
#KeepitOn

[Emile Aben @meileaben]

Around 11:15 UTC today we saw the majority of #RIPEAtlas probes in #Kazakhstan lose connectivity. This probably indicates some wider restrictions on Internet access around that time in #Kazakhstan .

[CSTI Team Support @CstiSupport]

Le #FAIL du premier jour de l'IT de l'année 2022. Comment @Microsoft via @MSFTExchange a oublié qu'après 2021, il y a 2022. Du coup, nombreux de ns clients ont été impacté ce jour. Ns avons mis en place immédiatement le contournement pour rétablir les services!
#bonneannee2022

[Joe Roosen @JRoosen]

#Microsoft and #Exchange starting off 2022 with a 💣as of 00:00UTC with freezing transport of all emails flowing through it On-Prem due to failure converting the new date... 🤦‍♂️. Solution is to disable the AntiMalware Scanning temporarily via Disable-Antimalwarescanning.ps1. 1/x

[APNIC @apnic]

SAD DNS attack infers open ephemeral port using a side-channel raised from ICMP global rate limiting, which is implemented in all model OS kernels https://t.co/zMloczRGKf

[GovCERT.ch @GovCERT_CH]

After its resurrection 10 days ago, #Emotet is now also spamming Switzerland with malware. Block macro enabled documents on your email and proxy gateways and forward malicious emails to [email protected]

[Qrator Labs @Qrator_Labs]

During the night in Europe, from November 7 to 8, at approximately 23.28 UTC, we have mitigated a ~1 Tbps (961 Gbps) DDoS attack, peaking at 88.32 Mpps of UDP flood + fragments.
We believe that this particular attack came from the recently compromised GitLab repositories.

[CSTI Team Support @CstiSupport]

@gregpuls @acontios_net @HivaneNetwork @hostelyon @nemavdotio Pour les DB, la latence est importante. Le NVMe chez un concurrent est très abordable. Ca diminue, en plus, la consommation CPU, sans parler de la consommation électrique.