Rickard Carlsson

There are only two types of companies: those that know they’ve been compromised, and those that don’t know.

[Sean Metcalf @PyroTek3]

In today's WTF?!?!? moment

When a ESXi server is domain-joined, it assumes any "ESX Admins" group & its members should have full admin rights.

So.... anyone who can create & manage a group in AD, can get full admin rights to the VMware ESX hypervisors!
https://t.co/U3DiXHWQMR

[rootsecdev @rootsecdev]

If you own an iPhone. Update now to protect yourself from an active 0 day.

After updating….activate stolen device protection. Here is how you can do that 👇

About Stolen Device Protection for iPhone - Apple Support https://t.co/P9CwanKaU5

[Karl Emil Nikka @KarlEmilNikka]

Igår avslöjade SVT att Cert-SE hade informerat Svenska kyrkan om sårbarheten innan attacken inträffade. Kom ihåg att rapportera era organisationers IP-adresser, domännamn och AS-nummer till Cert-SE:s kostnadsfria tjänst Ants.

https://t.co/ll3pLFd824

[Cybergibbons 🚲🚲🚲 @cybergibbons]

After the #FlipperZero threads, there's been a few people questioning the ethics and legality of these devices, particularly with respect to NFC cloning.

I think explaining some of the history of NFC security - particularly Mifare Classic - attacks might help.

[Rickard Carlsson @tzusec]

@KarlEmilNikka @YlvaJohansson Tack! Mycket bra genomgång.

[Karl Emil Nikka @KarlEmilNikka]

Igår intervjuades @YlvaJohansson om massövervakningsförslaget Chat Control 2.0. Precis som vanligt framförde hon flera lögner. Precis som vanligt avslöjar jag lögnerna i en faktagranskningsartikel: https://t.co/Hv1BTDQgGl

#chatcontrol #svpol #eupol #EUvsChildSexualAbuse

[Karl Emil Nikka @KarlEmilNikka]

All projects have bugs in them. Far from all projects handle security related bugs the way Curl’s creator @bagder does. https://t.co/LTz5bh0TWP

#curl #transparency #cve2023_38545

[daniel:// stenberg:// @bagder]

curl 8.4.0 is here.

https://t.co/WebF0NhbUN

[Rickard Carlsson @tzusec]

@DeanColpitts Amazing... :D

[Rickard Carlsson @tzusec]

Why are there always issues related to Citrix CVEs?! Today they released a new for Citrix ADC (CVE-2023-4966, CVSS 9.4) and a few minutes later their download site crashes. The site is still down 6 hours later = you cannot download new firmware.. #Netscaler #CitrixADC #Shitrix

[JS0N Haddix @Jhaddix]

🧙‍♀️ CISO Story Time

This is not exaggeration.

I have a good friend. He's a CISO of a multinational organization in the technology sector. We talk often.

Market trends, sales, and business regulations had the business decide to open an facility in China.

a 🧵 👇

[Rickard Carlsson @tzusec]

@Deyda84 @maartendamen @citrix @NetScaler haha, sweet. I was a few minutes late and have been trying for almost 4 hours now.. So frustrating. 😅

[Rickard Carlsson @tzusec]

@Deyda84 @maartendamen @citrix @NetScaler Do you have access to firmware now? How!?😀

[daniel:// stenberg:// @bagder]

This week. This kind. On repeat.

[j0hnWixk @J0hnWixk]

@bagder @cyb3rops

[Florian Roth ⚡️ @cyb3rops]

they're basically saying "threat actors are exploiting it for a while" and "patch your systems and you'll be fine" ... which is a lie

We've seen this so often in the past: customers installed the patches but the appliances were already compromised

[Malcolm @malkoegler]

CVE-2023-3519 #CitrixADC #Netscaler

Here are some "Best Practice" checks you can do to check for compromise or unauthorized changes.

Commands in the ALT Text

[Florian Roth ⚡️ @cyb3rops]

Finally! Someone put the two IP IOCs related to the #Citrix Netscaler ADC vuln CVE-2023-3519 in a Virustotal Graph, which allows me to share them

216[.]41[.]162[.]172
216[.]51[.]171[.]17

https://t.co/gmZaVnzkC6

[Sami Laiho @samilaiho]

Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege
Vulnerability
https://t.co/fWx9plYk1q

[Jackson Greathouse Fall @JazzFall]

I gave GPT-4 a budget of $100 and told it to make as much money as possible.

I'm acting as its human liaison, buying anything it says to.

Do you think it'll be able to make smart investments and build an online business?

Follow along 👀