Lukáš Rypáček

[Lukáš Rypáček @lrypacek]

@ziminvesting What about $META? Was useful to me to optimize taxes only, but still feels to be in a discount. Thx.

[Lukáš Rypáček @lrypacek]

How many home router's admin pages support TLS/1.1 and lower only?

[🎻 ➡️ BlueSky @ericlaw]

TLS/1.0 and TLS/1.1 are going to /dev/null for realz.

[Lukáš Rypáček @lrypacek]

Exactly what @david_jursa has been telling us for years: block LLMNR and mDNS on public networks, as Avast Firewall does! Incredibly detailed blogpost. Thanks, @tiraniddo!

[James Forshaw @tiraniddo]

"Can you still relay authentication in a Windows domain if NTLM is disabled?", I asked myself. "Perhaps I should research that" I said. Here's a blog post about what I found out. https://t.co/u5B7MVShCi

[Lukáš Rypáček @lrypacek]

Simply awesome!

[LeGate @williamlegate]

Facebook employees aren't able to even login to the company servers because their access badges are tied to Facebook's internal network which is entirely offline – this is the mother of all outages.

[Lukáš Rypáček @lrypacek]

Hmm, somewhat reminds me the wpad proxy autodiscovery fail.

[BleepingComputer @BleepinComputer]

Microsoft is rushing to register autodiscover.[TLD] domains that could leak Windows credentials after @0xAmit report about faulty implementations of the Microsoft Exchange Autodiscover protocol.

* 68 confirmed registered domains
* 38 more we can't confirm
https://t.co/12hnEkTpD8

[Lukáš Rypáček @lrypacek]

Avast One review - 5/5 stars, not bad! https://t.co/e42u8DbocS

[Lukáš Rypáček @lrypacek]

Interesting data! Nice to see a confirmation that adding RDP & SMB shields into Avast AV in 2020 was a smart move. https://t.co/BrUDvQuwzq

[丂卄ㄖᗪ卂几 - 👋 crack fingers @therealshodan]

Just generated some stats on the last year of attacks against @Microsoft’s sensor network.

Attacks collected >14 billion

Top 3 increases
⬆️ RDP 325%
⬆️ Network printing 178%
⬆️ Docker/K8s 110%

Top 3 decreases
⬇️ HTTP 36% 😮
⬇️ FTP 40%
⬇️ Telnet 56%

% is change from last year

[Lukáš Rypáček @lrypacek]

@hankadusikova @Andreas__Fertig @llvmorg @CompileExplore @avast_antivirus Cool indeed!😉

[David Jursa @david_jursa]

Our latest analysis of #GhostDNS source code.

https://t.co/MiBuGeJJzA

[Avast @Avast]

A message from Avast CEO Ondrej Vlcek ➢ https://t.co/Epkc3a0oRr

[Kryptos Logic @kryptoslogic]

BlueKeep (CVE 2019-0708) exploitation spotted in the wild

https://t.co/Ebe6Z3OekS

[Michael Yip | [email protected] @michael_yip]

This is *exactly* how an organisation should manage an incident and handle public disclosure. Fantastically documented by @jayabaloo and the @avast security team. https://t.co/tGZCN8NpMs #threatintel #infosec

[daniel:// stenberg:// @bagder]

curl is about to get SSLKEYLOGFILE support (to allow wireshark TLS inspection). Learn how to start playing with it: https://t.co/J6qdLJilep

[Lukáš Rypáček @lrypacek]

@david_jursa @Videotron This is new, after so many campaigns in Brazil we see it somewhere else!

[Lukáš Rypáček @lrypacek]

#notredam Notre Dame fire: Paris cathedral devastated by ferocious blaze https://t.co/beAq7aZHOv

[Michal Salat @michal_salat]

Wohoo, we have got the Product of the year award!

[abuse.ch @abuse_ch]

Botnet operator's first choice when choosing a certificate authority (CA) for getting a SSL certificate for their botnet C&C is @letsencrypt. No surprise, as they provide certificates for free and refuse to revoke such that have been issued fraudulently

https://t.co/burLeBEgxX

[daniel:// stenberg:// @bagder]

The protocols aren't done and there's no browser shipping h3 support yet, but I give you... HTTP/3 Explained! https://t.co/M0Qv5MytbH

[Lukáš Rypáček @lrypacek]

Great work by @thinkcz and @vopratko. BTW vulnerable #MikroTik routers are detected by Avast HNS aka Wifi Inspector and the mining scripts are blocked by Avast WebShield.

[Jakub Kroustek @JakubKroustek]

Our latest research of recent attacks on #MikroTik routers by @thinkcz and @vopratko: https://t.co/XHYeaon4aq (@mikrotik_com)

[Gen Threat Labs @GenThreatLabs]

Security Update: The #MikroTik #cryptomining campaign is still very much alive. In just the past 7 days, Avast blocked 5 million infected URLs on nearly 94,000 infected routers.

More updates and a deeper analysis to come; stay tuned.