Geir Westgaard

IT Security management. Tweets are my own.
#infosec #security

[Honey Badger 🇬🇧🌻🇺🇦 @LavrovsFELLA]

Russia did this.

We hear rumours of Russian war crimes daily, but this feels different, because it's a first hand account of systematic liquidation of population centres, including orders to kill children.

DO NOT EVER GET BORED OF SHARING THIS STUFF.

https://t.co/frOTPcIPpd

[TG ☕️ @TG22110]

🎯🎯🎯

[Vatnik Soup @P_Kallioniemi]

There's not much recent data on Twitter, but Elon's "balancing act" & focus on purging left-wing accounts have left pro-Russian trolls rampant on Twitter.

https://t.co/7wZY9JTXwh

11/13

[@iainthomson @iainthomson]

We're used to scammers being lazy but...

[briankrebs @briankrebs]

"Deep insert" skimmers -- handmade devices that can fit inside an ATM's card acceptance slot -- have gotten super thin. This one's ~ 1/2 the height of a dime. Paired w/ hidden cams to grab PIN, clone cards. Here's a look at a bunch of these found recently: https://t.co/0RrkqNbdfN

[Frode #Fella 🇺🇦🇳🇴🇨🇦 @FrodeHommedal]

Ønsker du å støtte sivilbefolkningen i #Ukraina, men vet ikke helt hvordan?

[Geir Westgaard @gwestg]

Wordle 223 2/6🟨⬜🟩⬜🟩🟩🟩🟩🟩🟩

[Joe Tidy BBC News @joetidy]

Interesting on #log4j from @sonatype :

[SANS Institute @SANSInstitute]

Join @bettersafetynet @johullrich @bojanz for this EMERGENCY LIVE STREAM on the newly published #RCE vulnerability #log4j

We'll go over exploitation details & discuss what blue teams can do to detect the attack and protect their environments.

Join: https://t.co/0klWHCdO4m

[Roger A. Grimes @rogeragrimes]

Example Netflix smishing scam...using a URL from Portugal. Tried to follow up to see if it was just password stealing or tried to install malware, but it was blocked already.

[Roger A. Grimes @rogeragrimes]

Nigerian trying to get disgruntled employees to infect their own employers with ransomware was arrested.

https://t.co/5mDuL2gBcx

[Threat Intelligence @threatintel]

Microsoft mitigates record-breaking 2.4 Tbps DDoS attack https://t.co/YDf3XlTZD5

[Roger A. Grimes @rogeragrimes]

CISA's Conti ransomware advisory. Good advisory. Well done. Note that one of the attack vectors is phone-based social engineering. Good luck having any technical defense (e.g. MFA, EDR, etc.) mitigate that threat. Education is the cure.

https://t.co/ZKUT1SBrCO

[Roger A. Grimes @rogeragrimes]

Hilariously bad phish! I mean, can anyone possibly fall for this??

[@mikko @mikko]

How much is your data worth? So much that Google is paying Apple $15 billion to be the default search engine in the iPhone and other Apple devices.

Google is paying $10/year per device, to get you to use a 'free' search engine.

[Roger A. Grimes @rogeragrimes]

Mimikatz password stealing software works against Microsoft Windows 365...at least for now until it is patched

https://t.co/fstuJi2ZZC

[Schneier Blog @schneierblog]

Cobolt Strike Vulnerability Affects Botnet Servers https://t.co/3QgDFa8MHy

[briankrebs @briankrebs]

It's pretty remarkable that we've come to the point where ransomware gangs are rebranding mainly to help their victims get around Treasury/OFAC sanctions against paying the criminals. https://t.co/OFQQfSdVEz

[Roger A. Grimes @rogeragrimes]

How are we just repeating the same mistakes in the cloud as we did on-premise for 30 years??

https://t.co/nHVGr0WiAU

[RiskIQ @RiskIQ]

APT29 (#TheDukes, #CozyBear) is actively serving malware previously used in #cyberespionage campaigns targeting COVID-19 research. RiskIQ's Team Atlas has identified nearly three dozen C2 servers under the control of #APT29 serving this #WellMess malware: https://t.co/VUxhf9AxBv