Fabian Franz

IT Security, Home Automation, Techie

[Sam Altman @sama]

first, sorry for the messy rollout.

second, when we screw up, we try to make it right.

third, we should be able to begin broad rollout to API customers and chatgpt subscribers in the near future. as usual we will start with pro subscribers.

[Daily CyberSecurity @Daily_CyberSec]

Public PoC for NGINX CVE-2026-42945. An 18-year-old RCE flaw in the rewrite module enables server takeover. Update to NGINX 1.31.0 or 1.30.1 immediately.

#NGINX #CyberSecurity #InfoSec #RCE #Vulnerability #CVE #WebServer #PoC #GitHub #SysAdmin #TechNews
https://t.co/huz0K21JaR

[Nextron Systems @nextronsystems]

We’ve released a CLI utility to transform THOR logs into Timesketch-compatible JSONL for timeline analysis

Correlate findings across hosts and time, enrich your analysis, and integrate audit-trail logs

Supports THOR and THOR Lite

🔗 https://t.co/zEknHKWVXw

[Velociraptor @velocidex]

📣 Velociraptor v0.7.2 is now live!

The long-awaited release is highlighted by EWF support, dynamic DNS, improved SSH access, secrets management & much more.

Read up on all the exciting new features and download it today: https://t.co/m3pG1EpJhW

[The Hacker News @TheHackersNews]

⚠️ Ivanti releases security patches for 4 new flaws in Connect Secure/Policy Secure Gateways.

Flaws could allow attackers to execute arbitrary code or launch DoS attacks.

Learn more: https://t.co/Wddwmnx1LQ

#cybersecurity #hacking #infosec

[Velociraptor @velocidex]

Sigma rules can be used on more than just log files. The Velociraptor Sigma project also provides monitoring rules that can be used on live systems for real time monitoring.

Read more at: https://t.co/Gg4PkJGf8s

[Velociraptor @velocidex]

Sigma support is here!

In Velociraptor, Sigma rules can directly be used on the endpoint, without the need to forward all the events off the system first! This makes Sigma a powerful tool for initial triage to narrow down suspicious hosts during an IR.

https://t.co/Gg4PkJGf8s

[Phill Moore @phillmoore]

I made a thing, based on the excellent work of other people and some of my own experience. It's ok for a v1, but it still needs work to make it more useful.

I'm still learning proper source management, so it's a start

#DFIR
https://t.co/yGED3pObrZ

[Florian Roth ⚡️ @cyb3rops]

Introducing THOR-Cloud Lite 🌩️: Seamless On-Demand Forensic Scanning Made Easy

- apply YARA + Sigma + IOCs
- it's free
- many more features upcoming

Blog 📘
https://t.co/rXgf3DUUso

Release Session 📺
https://t.co/ynWU2wrewd

Register for Free ⚡️
https://t.co/wazEjbN014

[Home Assistant @home_assistant]

For over a decade @tweethue offered lights that work without sharing your data to the cloud. This is changing soon and we need your help to make some noise to convince them to revert this decision.

https://t.co/VeSmBQtvjX

[Alex @alexanderjaeger]

🕶️🧐👀🥷🥁A new project by the Security Response team of @Google: https://t.co/fTO9MvhPBa. It fills a gap I have seen for years, asking the same questions in similar investigations across analysts who might have different background and know how. 🕶️🧐👀🥷🥁

[Florian Roth ⚡️ @cyb3rops]

This guide here is derived from a guide shared with a limited number of people TLP:AMBER

I'm glad s/o made most of it public

Follow the guide to investigate possible Citrix NetScaler compromises (CVE-2023-3519)

Meanwhile we're testing @thor_scanner scans via an SSH mount

https://t.co/PbGJ6a44KM

[Deutsche Telekom CERT @DTCERT]

🚨 Alert! 🚨 There is a critial #RCE vulnerability in #Citrix NetScaler ADC with CVSS score 9.8. Zero-day #exploits have already been seen in the wild. Patch your systems now!

[CERT-Bund @certbund]

❗️ #CERTWarnung ❗️
In Microsoft Office gibt es eine #ZeroDay #Schwachstelle, zu der bislang kein Patch zur Verfügung steht. Weitere aktiv ausgenutzte Sicherheitslücken wurden mit dem Juli #Patchday von Microsoft geschlossen. #PatchNow
https://t.co/LmtLIjB5n7

[~billswearingen☎️# 🟩 @hevnsnt]

For too long Incident Response has relied on industry experience, consultants, or 4000 page compliance frameworks that are too hard digest.
I am going to fix this. I am writing a fully open-source "Awesome Incident Response guide". https://t.co/aJyv1BeIuk

[Timesketch @TimesketchProj]

✨ New Timesketch release.

Highlights:
SSH/Windows bruteforce analyzers, DFIQ support, Updated event tags UI, Verbose analyzer output and Restyled timeline chips.

Full changelog: https://t.co/NJoOS1KseC

Thanks to everyone who contributed to this release!

[Stuhli @stuhlonsky]

I recently pushed an update on #DFIRTrack. 🚀
Most of the work was done by @lejurn to implement a whole new filtering experience. Filters will be more flexible in the future and working should become easier. Time for new ideas…
#DFIR #opensource

[Timesketch @TimesketchProj]

We have started to automatically tag releases to our official docker images. Use the release version when pulling the image. For example:

https://t.co/PmTa8Y95ya

GitHub releases: https://t.co/qw9CgsEse9

Changelog: https://t.co/Jvpcm6hqgH

[Timesketch @TimesketchProj]

New Timesketch release (20230526)
* Important security updates
* Bug fixes
* Dependency updates

https://t.co/Jvpcm6hqgH

[Florian Roth ⚡️ @cyb3rops]

Teaser: Since I'm on vacation I started working on private project named "Cyber Security Hub", a Github project that lists and promotes cyber security training providers from around the world

PS: github pages is still a mystery to me and I could need some help