Security By Default

Twitter del blog de seguridad informática SecurityByDefault

[𝑴𝒚𝒔𝒕𝒆𝒓𝒚 𝑾𝒐𝒓𝒍𝒅 𝑵𝒆𝒘𝒔 @mysteryWN]

Atención...aqui encontrareis todas las paginas, 55 en total, del documento mas buscado en estos momentos en internet. Se trata del informe de policía nacional que avisaba con anterioridad de lo que iba a suceder. Lo he tenido que dividir en 3 articulos, los dos primeros con 25 imagenes, el ultimo con 5...solo teneis que abrir cada articulo y alucinad:
1ª parte del documento:
https://t.co/uwQyEPds7M
2ª parte del documento
https://t.co/THwVRhdHBa
3ª parte del documento
https://t.co/m8VO5z7SiA

[Yago Jesus @YJesus]

Antiransom V5 is out !! Installation & demo Vídeo https://t.co/tpognJiIHa New features & download --> https://t.co/qTI6PzJdVi Project page --> https://t.co/gqJOKMzf3c

[Yago Jesus @YJesus]

So proud !!!

[Security By Default @secbydefault]

Vota por WinTriage, de nuestro compañero @lawwait como mejor herramienta DFIR no comercial del año

- WinTriage es una herramienta gratuita, para adquisición de evidencias en Windows, labores de análisis forense y respuesta ante incidentes
Vota: https://t.co/ZHblXGYL8g

[Security By Default @secbydefault]

A votar todos !! https://t.co/ZIJ3J39CvR

[Lorenzo Martínez @lawwait]

Hemos nominado a nuestra herramienta Wintriage para poder optar a los premios Forensic 4:cast en la categoría "Mejor herramienta no-comercial del 2020". Si podéis, por favor votad en el enlace que viene en el post. Muchas gracias!

https://t.co/WLqr5CFnuH

[Yago Jesus @YJesus]

Patriot Linux is a HIDS for desktop users who wants real time graphical alerts when something suspicious happens

Patriot detect:

1- Suspicious process running
2- New process starting TCP/IP Connection
3- Auditd alerts
4- New keyboards plugged
https://t.co/4U37CJ0mdM

[Yago Jesus @YJesus]

New Unhide Git repo https://t.co/yYaIQf8eNA with a lot of improvements made by @fr33project

[Yago Jesus @YJesus]

Otro año más, el @CCNCERT recomienda Anti Ransom https://t.co/V91DSMTffT como herramienta defensiva ante el Ransomware en su informe anual https://t.co/xkTEze4g5O

[Computer Security Solutions @CompSecGlobal]

a single character message can crash macs, ipads or iphones:
https://t.co/jx8aG79GoC
#mac #apple #phone #iphone #ipad #crash

[Security By Default @secbydefault]

Microsoft Anti Ransomware bypass (not a vulnerability for Microsoft) by @YJesus

https://t.co/IpQ4FOPYWt

[Rob Fuller @mubix]

#34C3 Streaming - https://t.co/fqU7Y1Qm26

[fail0verflow @fail0verflow]

Dumping a PS4 Kernel in "Only" 6 Days: https://t.co/8lEJWTXvmZ

[Quad @Kuwaddo]

I want to shoot myself right now.

Is humanity the dumbest thing on earth

I just infected a bunch of servers with my ssh key and enabled root login via a shitty meme

[Rob Fuller @mubix]

Biggest takeaway from reading @patrickwardle 's awesome post (https://t.co/rPTiGV1its) is that it's not a blank root password, it's a password setting issue for ANY disabled user. (blank just happens to be what @lemiorhan used and root being the most priv user to attack)

[Ryan Naraine @ryanaraine]

To root https://t.co/hC3MW5H1Sk

[Sean Harris @InfoSecHotSpot]

Imgur breached back in 2014, wasn’t storing your passwords properly https://t.co/rbvOEBAA3s via @InfoSecHotSpot

[Rob Fuller @mubix]

This looks fun: https://t.co/sgkcSRxX0L SMB1 packet -> code exec cc: @egyp7

[Sean Harris @InfoSecHotSpot]

A bug discovered within Google’s bug tracking system https://t.co/QgfsnDXB4J via @InfoSecHotSpot

[Lorenzo Franceschi-Bicchierai @lorenzofb]

In 2016 a researcher warned Equifax of a site where anyone could access SSNs, names & birthdates. EFX did nothing. https://t.co/QdZD4KdOSS

[Have I Been Pwned @haveibeenpwned]

New breach: Bitly had a data breach in May 2014 which exposed over 9M accounts. 47% were already in @haveibeenpwned https://t.co/LGaAnj1hUA