Ricardo Lira

Working hard

[Threatpost @threatpost]

Researchers have dropped a proof-of-concept (PoC) #exploit for a known XSS #bug in the @Cisco Adaptive Security Appliance now being exploited in the wild. #cybersec https://t.co/DhPdlfvpE1

[Andrés Velázquez @cibercrimen]

¿Por qué es importante lo que está pasando en Estados Unidos con el "ciberataque" que afectó el oleoducto más importante de ese país?

Aquí va el hilo

#ciberseguridad #CyberSecMx

[Andrés Velázquez @cibercrimen]

Las escuelas de negocio de Universidades requieren agregar temas de ciberseguridad como parte de la estrategia de negocio.

#Ciberseguridad #infosecmx

[Juan Vázquez  @jc_vazquez]

Que buen contenido sobre lecciones aprendidas de ejercicios de Red Team en entornos OT: https://t.co/5OWtdUE53o via @FireEye #infosec #cybersecurity

[Eugene Kaspersky @e_kaspersky]

Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild 👉 https://t.co/58ZFF3hkSm

[Hipertextual @Hipertextual]

🔴 Todos los detalles de la filtración masiva de datos personales de Facebook que afecta a más de 500 millones de usuarios.

❌ 13 millones de México
❌ 10 millones de España
❌ 2 millones de Argentina

https://t.co/A0s0n3H5rI

[briankrebs @briankrebs]

FBI/IC3's cybercrime 2020 report: $4.2B in reported losses. Top 3 crimes victims reported were phishing, non-payment/delivery scams, and extortion. Victims lost the most $ to business email compromise scams, romance/confidence schemes, & investment fraud. https://t.co/TbjKl4UFnG

[Arturo Garcia @ElProfeSeguro]

El día de mañana 18 de Marzo a las 11:15 hrs, estaré participando en la Mesa de Discusión: Tendencias de Ciberseguridad en el Sistema Bancario.
https://t.co/UH7PNJc9oA

#InfosecurityMexico

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft has released a new, one-click mitigation tool, the Microsoft Exchange On-Premises Mitigation Tool, to help customers who do not have dedicated security or IT teams to apply security updates for Microsoft Exchange Server. Learn more: https://t.co/IfChAqpcEH

[Microsoft Threat Intelligence @MsftSecIntel]

We have detected and are now blocking a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers. Microsoft protects against this threat known as Ransom:Win32/DoejoCrypt.A, and also as DearCry.

[Andrés Velázquez @cibercrimen]

Los invito este próximo jueves 11 vía Youtube a la presentación del libro "Aspectos Prácticos de los Ciberdelitos y la Evidencia Digital" que co-escribí con @ProtDataMx en @TirantMexico

Lo podrán ver en:
https://t.co/OvfOxLK5LW

#ciberseguridad #ciberdelitos #libros

[briankrebs @briankrebs]

Secureworks: Chinese cyber groups went rooting~around SolarWinds users late last year. Between Aug-Nov 2020 exploited a SolarWinds API authentication bypass flaw (https://t.co/bq1jRFPfOv) and uploaded web shell/backdoor to vulnerable SolarWinds systems. https://t.co/F6V0CqeAMn

[The Hacker News @TheHackersNews]

Researchers demonstrate first microarchitectural side-channel attacks that leverage contention on the CPU ring interconnect against #Intel CPUs, allowing malware to pilfer sensitive data from modern processors.

Read details: https://t.co/6351baVPUu

#infosec #tech #cybersecurity

[DuckDuckGo @DuckDuckGo]

However, as VA Senator @MarkWarner says, it still needs to be easier for "citizens to invoke their privacy rights, such as through a global privacy control."
https://t.co/OF9rwtVOOk

That's why Global Privacy Control is on by default in our app/extension:
https://t.co/A87ZDSrisC

[Todyl @todylsecurity]

Zero Trust Is Not A Security Solution; It’s A Strategy https://t.co/LpfWS2bQRo via @Forrester. We believe “never trust, always verify” is *the* security strategy for our work from everywhere world. https://t.co/P0bseT07rD

[Richard Bejtlich 💾 🇺🇦 @taosecurity]

If @briankrebs report of hundreds of thousands of compromised Exchange servers is true, it is an indictment of the entire conceptual and operational reality of modern security, for this type of self-hosted service. The damage may be orders of magnitude worse than SolarWinds.

[Ricardo Lira @pentestmexico]

@ElProfeSeguro @Justabyte @cibercrimen @er_insec @mhoz @cyberpostpunk @GilbertoVicente @juan_carrillo Check your WA @ElProfeSeguro

[Ricardo Lira @pentestmexico]

Muy interesante la charla, coincido con @Justabyte: Back to Basics. Nos escuchamos próxima semana @cibercrimen @er_insec @mhoz. Amarilla a @cyberpostpunk @GilbertoVicente @juan_carrillo x no asistir.

[Eli Ruiz @er_insec]

Super todas las historias!! Muchísimas gracias a todos @cibercrimen @Justabyte @mhoz @pentestmexico @aabarcab

Platicamos la siguiente semana!! #infosecmx

[Eli Ruiz @er_insec]

Super todas las historias!! Muchísimas gracias a todos @cibercrimen @Justabyte @mhoz @pentestmexico @aabarcab

Platicamos la siguiente semana!! #infosecmx