Tom

Hey, I'm Tom, based in the UK. @[email protected]. Security analyst and car enthusiast.

[Tom @Tom_From_The_UK]

@VessOnSecurity @LAB52io @ThaiCERT Presuming it would be https://t.co/IgOtsELNYj

[Tom @Tom_From_The_UK]

I could see why you might if the password was correct but they are failing at the first hurdle.

Or if it was internal to your network… but the originating IPs are all VPN/anonymising services

[Tom @Tom_From_The_UK]

Anyone else seeing Defender flagging the attempted usage of AADInternals against Microsoft services where authentication is failing (incorrect username/password)?

@merill @UK_Daniel_Card @reprise_99

[Florian Roth ⚡️ @cyb3rops]

More reports regarding the Notepad++ compromise

@Securelist
https://t.co/3s5G3asUkP

@kucher1n
https://t.co/7ZZpQ7pY2J

@ValidinLLC
https://t.co/EYEEOoXUbK

#NotepadPlusPlusCompromise

[Florian Roth ⚡️ @cyb3rops]

This is bad.
Putty level bad.
https://t.co/3w1C8YiBu8

[Jake | JCyberSec_ @JCyberSec_]

If you are not sure how to leverage this or have questions feel free to reach out to the @urlscanio team!

🔍

[Tom @Tom_From_The_UK]

@troyhunt @haveibeenpwned Will you be sharing a new template for stickers with the new logo?

[abuse.ch @abuse_ch]

No more platform-hopping! 🕵️‍♂️ Hunt across all https://t.co/x0TWKNn9PP platforms with just  1️⃣ simple query. 🔎 Search for any IPv4, domain, URL, or file hash, and instantly see if it’s been identified on any https://t.co/x0TWKNn9PP platform!

Start your hunt now 👉 https://t.co/nzbnsNfWS4

[Tom @Tom_From_The_UK]

@UK_Daniel_Card Thanks for sharing, never really bothered with a profile photo but made me realise I should have one set 👍

[Red Canary, a Zscaler company @redcanary]

At first, detecting malicious activity in the billions of cloud telemetry logs we ingest every day felt like searching for a needle in a haystack. Here's how we shrunk that haystack down. https://t.co/rv0IEocakU

[vx-underground @vxunderground]

Hello,

Today it came to our attention @marcwrogers — old school nerd and head of security at DEFCON, was injured badly in a car accident. His neck is broken.

Donate so this old head can get back to hacking
https://t.co/ZwTv3wVbjf

[Cybersecurity and Infrastructure Security Agency @CISAgov]

🚨 PRC-affiliated threat actors are targeting telecom infrastructure to steal call records & compromise communications of highly targeted individuals. Protect yourself: Use end-to-end encrypted communications, such as Signal or similar apps. More info 👉 https://t.co/4sCwkKSYrG

[Tom @Tom_From_The_UK]

@malwrhunterteam Just to give you some context. The only reason I saw the post was due to the reply by @vxunderground :/

[Tom @Tom_From_The_UK]

@malwrhunterteam As a lurker I’ve always found your tweets useful, my biggest issue is getting the correct info on my timeline. It has been terrible & all over the place.

I appreciate how you might feel but from one random person to another please know the information has been useful, thank you.

[Rob Joyce @RGB_Lights]

For anyone interested in detection and prevention methods against Salt Typhoon intrusions targeting communication providers, here is a comprehensive guide:

https://t.co/SSPd5YbIax

[NCSC UK @NCSC]

Today we’ve published our 2024 Annual Review – our roundup of this past year’s cyber security threats and trends, and a look to the road ahead.

Check out the highlights 🧵or read the full report 👇
https://t.co/vFWUMaW2hd

[Tom @Tom_From_The_UK]

@UK_Daniel_Card Is that the DomainTools Iris platform that you’re using? Not had any hands on with it but interested in hearing your thoughts.

[Tom @Tom_From_The_UK]

RT @abuse_ch: Developments to all https://t.co/b7WQ1Ihzpw platforms - coming this February, 2025! 📅

🔍 More threat-hunting features ➡️Authe…

[BleepingComputer @BleepinComputer]

Microsoft will disable ActiveX by default in Word, Excel, PowerPoint, and Visio documents after Office 2024 launches in October.
https://t.co/hsRGfazFFE

[Tom @Tom_From_The_UK]

@mythdude @HackingLZ Any chance you could share the design or have it for sale anywhere? 😀