rootsecdev

Senior Security Consultant @TrustedSec | Military grade meme poster, researcher, cloud penetration tester, voider of warranties. My thoughts are my own.

[rootsecdev @rootsecdev]

Just wanted to remind everyone. Azure Cloud training does not need to be super expensive. You just need to know where to look. Because that is what hackers do.
#Azure #Cloud #Hacking

Books:
https://t.co/7yZhT0zujy

Labs:
https://t.co/e3wz9R50EX

Free SANS Courses (on demand):
https://t.co/Kvm3eXZDNO

https://t.co/r5h99OQ7gO

(Jun8th 2023..live!)
https://t.co/icnhj7GEm5

Need more training. Feel Free to check out my blog on this topic:
https://t.co/aRIZ6IpE1D

[rootsecdev @rootsecdev]

@MerrittBaer 👀 nice!

[rootsecdev @rootsecdev]

Still at it this morning. Happy Wednesday my friends. Q4 is here 🔥

[International Cyber Digest @IntCyberDigest]

‼️BREAKING: Cloudflare says it is already seeing early attacks on the two leaked PHP flaws, hours before the patch.

Its CTO Dane Knecht says WAF rules for the known exploit vectors are live for all customers, including free plans, but calls them "a STOPGAP only".

Websites are going dark while they wait. NotuBiz, used by 100+ Dutch local governments, pulled council information sites offline, including those of Den Bosch, Breda and Eindhoven.

explain xkcd and the Star Citizen Wiki are down too.

PHP ships the fix at 14:00 UTC today.

[rootsecdev @rootsecdev]

@CharlesDardaman I’ve been using sol here. Ive been reserving astra for more complicated things. Expensive to run 😬 I’m cheap 😂

[rootsecdev @rootsecdev]

@curi0usJack Go ahead

[rootsecdev @rootsecdev]

Hey everyone, its only tuesday. So its not like we are all reading this on a friday evening. So atleast defenders have that going for them this week.

[watchTowr @watchtowrcyber]

We were all supposed to wait until Thursday at 11am ET.

Information has leaked wrt zero-day embargoed RCE vulns in PHP. We can confirm that they're real. CVE-2926-109618/619

We cannot share further information right now. Take this seriously and apply patches when available.

[rootsecdev @rootsecdev]

@sherrod_im 👀

[rootsecdev @rootsecdev]

We live in wild times.

https://t.co/bAfJQC7Qwe

[rootsecdev @rootsecdev]

@HackingLZ OpenAI was way easier

[rootsecdev @rootsecdev]

@DrAzureAD Welcome home

[rootsecdev @rootsecdev]

@sherrod_im Just have AI do it

[rootsecdev @rootsecdev]

@HackingLZ 👀

[rootsecdev @rootsecdev]

Oh I acquired some hacking fuel today @nyxgeek @HackingLZ

[Huntress @HuntressLabs]

RAPID RESPONSE: Huntress has become aware of a widespread security incident involving ConnectWise Cloud Backup (formerly SkyKick).

We’ve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. 🧵

[rootsecdev @rootsecdev]

Did three separate shots at the local clinic office yesterday. Flu, Covid, and pneumonia shots. So tired today. Someone bring me caffeine…STAT

[rootsecdev @rootsecdev]

This tracks

[rootsecdev @rootsecdev]

@vmiss33 Just lock in 😎

[rootsecdev @rootsecdev]

Keep climbing for those deficits. Getting leaned out. Will report back by the end of the month to keep me honest 👌

Time to go lifting 😎

[rootsecdev @rootsecdev]

Got up early to work on a few things. Had a shell up on one of my AI agents.

Me: oh hey wait I remember that I needed to do something.

👀

[rootsecdev @rootsecdev]

I have probably used this more lately than what I should have.