Stefano Ortolani

Threat Research Lead @ VMware, Views are my own.

[MISP (@[email protected]) @MISPProject]

A new and maintained MISP Docker image has been released as part of the MISP project. Check it out here:

https://t.co/U8kKMOBiG5

Thanks to @ostefano

for his commitment and hard work. #MISP #infosec #ThreatIntelligence #opensource

[Stefano Ortolani @ostefano]

@MISPProject I have just split the package. This is the new working link: https://t.co/OpgpzLp5gf

[Stefano Ortolani @ostefano]

@MISPProject Despite what GitHub Package says in the Installation section, both MISP and MISP modules images are built ("core" and "modules" tags) 👍

[Stefano Ortolani @ostefano]

@fr33bzh @MISPProject This images relies on nginx and https is enabled by default 👍

[MISP (@[email protected]) @MISPProject]

A new and maintained MISP Docker image has been released as part of the MISP project.

Check it out here: https://t.co/PO3tmoYxJE

Thanks to @ostefano for his commitment and hard work.

#MISP #infosec #ThreatIntelligence #opensource

[Stefano Ortolani @ostefano]

@bbaskin Now it’s the right time 👍

[Stefano Ortolani @ostefano]

@bbaskin It’s not complete yet :S final season’s yet another installment (or movie) expected in 2023 :S

[Virus Bulletin @virusbtn]

At #VB2023 VMware's Sebastiano Mariani, Oleg Boyarchuk, @ostefano & @giovanni_vigna introduce a novel approach to detecting C2 implants at scale, using the customization techniques implemented by the C2 frameworks as a means to support effective detection. https://t.co/GHjfJRWvSH

[remy🐀 @_mattata]

Aaaaaaaand prompt injection in VT’s new feature. Puppies can’t be malicious.

(Not the creator, sent to me)

https://t.co/9bDNbNk65w

[HiddenLayer @hiddenlayersec]

Join @mvjanus & @enwckns, from our SAI team, at #BSidesSF2023 where they will discuss "Sleeping With One AI Open: An Introduction to Attacks Against Artificial Intelligence & Machine Learning."

https://t.co/hDI4GsdVUS

#cybersecurity #hiddenlayer #mldr #ml #advml #ai #aisecurity

[Stefano Ortolani @ostefano]

@pgl Nice catch! Will fix it!

[VMware vDefend @VMware_vDefend]

Part 2 of our analysis of ransomware that targets @VMware ESXi VMs is here.
Join our Threat Analysis Unit as they uncover the tactics and techniques implemented by ESXi encryptors: https://t.co/wIRo5kwO2h

[VMware vDefend @VMware_vDefend]

❗️The most evasive and destructive malware delivery system, Emotet, is back on the rise. @VMware's TAU exposes this malware's supply chain in the new threat report: https://t.co/XoFfGdkcPa

[VMware @VMware]

✍️You'll want to add this to your agenda!

Don't miss as @ChadSkipper and @ostefano share how VMware's security innovations provide the strongest defense in the industry and offer unique advantages in detecting lateral movements. https://t.co/Rlj4Vnm3ow

[HiddenLayer @hiddenlayersec]

Concerned about your existing ML security? Take a break from the noise and grab a refreshment with us in our Mandalay Bay suite at Black Hat to learn more. Request your meeting today! #hiddenlayer #mldr #machinelearning #protectyouradvantage #gohidden https://t.co/I1bB6UN9Pq

[HiddenLayer @hiddenlayersec]

Your attack surface just got a whole lot bigger. Check out our first blog (by @thomas_bonner & @enwckns) that discusses AI/ML attacks and how they apply to you! #hiddenlayer #mldr #protectyouradvantage #gohidden https://t.co/oDoLqqgzJl

[VMware vDefend @VMware_vDefend]

Emotet isn't showing any signs of stopping.
As this stubborn strain of malware continues to evolve and attack, we're showing you how to keep extracting the list of network indicators despite Emotet's new obfuscation technique. https://t.co/yg1ng0feys

[VMware vDefend @VMware_vDefend]

📢 Calling all security analysts 📢
Our Threat Analysis Unit has developed a flexible and efficient way to deploy testing environments for malware analysis.

Set up Detection Lab using NSX-T and vSphere for this pre-packaged solution. https://t.co/tuetu5zOgC

[hanno @hanno]

badkeys is a project I've been working on for a while, it's a service+tool to check cryptographic keys for known vulnerabilities (debian openssl bug, ROCA, common prime factors etc.) https://t.co/tBcYMLrZ0G I think it's now ready to be publicized a bit more.