DU Consult

IT-Security | Business Intelligence

Office: Schönwalder Str. 17g, 16761 Hennigsdorf

[DU Consult @DUConsult]

WiFi security! Yesterday, security flaws in all wifi implementations were announced under the term #FragAttacks: https://t.co/1uG1VHOKZf
Unauthorized attackers could inject alternative DNS servers to users and then read along. PoC available.

[DU Consult @DUConsult]

@jschellevis @opnsense Congrats and many thanks! First QA machines upgraded successfully.

[heise Security @heisec]

Sicherheitsupdates: Schwachstellen in PHP gefährden Websites https://t.co/9lXgWTfLy8 #Security

[heise Security @heisec]

Linux-Kernel: Neuer Exploit verschafft Root-Rechte https://t.co/cLCryvZ6n5 #Security

[OPNsense @opnsense]

#OPNsense 23.10.3 business edition released. https://t.co/kBb5hybfqc

[DU Consult @DUConsult]

Secure location interconnection! Both boxes goes to customer's branches. Firewalls made with #OPNsense from @Deciso_tweets

[heise Security @heisec]

Geräteverwaltung: hochriskante Schwachstelle in Ivanti Endpoint Manager https://t.co/9AFD0OE0gD #Security #Sicherheitslücken

[heise Security @heisec]

Jetzt patchen! Über 335.000 SSL-VPN-Interfaces von Fortinet attackierbar https://t.co/PJQhl9TAFV #Exploit #Security #Sicherheitslücken #SSL #Updates #VPN

[BleepingComputer @BleepinComputer]

300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bug - @billtoulas
https://t.co/xOnGG2ePJZ

[DU Consult @DUConsult]

@hackinarticles There are a lot of tools mentioned that are sources for a SIEM, but are no SIEM at all. ELK and Splunk is the closest to SIEM, the rest not.

[Tom🌶\(^-^)/🌶 infosec.exchange/@tomlawrence @TomLawrenceTech]

It also reduces threat surface! #ipv6

[x0rz @x0rz]

It’s like an SQL injection, but way better

[DU Consult @DUConsult]

Hey @graylog2, is there actually an equivalence list for former Splunk users to make the switch over more easy?

[heise Security @heisec]

FBI warnt vor Juice-Jacking-Attacken an öffentlichen USB-Ladestationen https://t.co/8dEQ40z22W #FBI #JucieJacking

[heise Security @heisec]

DDoS-Angriffe auf offizielle Websites: BSI warnt Bundesländer https://t.co/chsqBgMmi2 #DDoS #Polizei

[DU Consult @DUConsult]

Fun fact: we installed two additional RAM bars to increase the awareness platform's performance, and the server failed over and over again. Tested all combinations of the new ones.
In the end, the error was found with one of the old bars.

[DU Consult @DUConsult]

IT tales from hell: Saturday and the hunt for the faulty RAM bar.

[DU Consult @DUConsult]

@MarcelBilal Server rebooted short after every memtest86+ run.

[Thomas Roccia 🤘 @fr0gger_]

🔍If you are looking for a comprehensive overview of the current #3CX supply chain attack, I created a diagram that shows the attack flow!💥I'll update as soon as the analysis progresses. Stay tuned for the MacOS edition! #cybersecurity #infosec #supplychainattack #3CXpocalypse

[heise Security @heisec]

BSI: Alarmstufe Orange wegen Trojaner in 3CX-Softphone-App https://t.co/n9NO4SDb5T #3CX #Trojaner

[DU Consult @DUConsult]

Die Angriffsform ist nicht neu. DLL #Sideloading ist (leider) seit Jahren ein Problem unter #Windows und findet (leider²) wenig Beachtung in der Software-Entwicklung.

[heise Security @heisec]

VoIP-Software 3CX verteilt Schadcode nach Sideloading-Angriff https://t.co/Thxg8zovV3 #3CX #Trojaner