PaPPy
@pappy.bsky.social
All around go to guy. Enjoy video games and cyber security
Reposted by PaPPy
Google pushing out .zip as a TLD and then divesting their registrar business is the equivalent on pooping in the punch bowl as you leave a party
https://9to5google.com/2023/06/15/google-domains-squarespace/
https://9to5google.com/2023/06/15/google-domains-squarespace/
June 15, 2023 at 10:08 PM
Google pushing out .zip as a TLD and then divesting their registrar business is the equivalent on pooping in the punch bowl as you leave a party
https://9to5google.com/2023/06/15/google-domains-squarespace/
https://9to5google.com/2023/06/15/google-domains-squarespace/
Great article on recent malvertising https://www.malwarebytes.com/blog/threat-intelligence/2023/05/malvertising-its-a-jungle-out-there
Malvertising via brand impersonation is back again
Ads containing the official website of an impersonated brand are running again, allowing fraudsters to scam users.
www.malwarebytes.com
May 23, 2023 at 3:35 PM
Great article on recent malvertising https://www.malwarebytes.com/blog/threat-intelligence/2023/05/malvertising-its-a-jungle-out-there
Really cool initial access and malware graph https://onodo.org/visualizations/235067
Onodo
onodo.org
May 13, 2023 at 12:53 AM
Really cool initial access and malware graph https://onodo.org/visualizations/235067
@support.bsky.team how are the weekly invites granted? As I’m a week and an hour into this account and I do not have any invites. Thanks!
May 12, 2023 at 3:23 PM
@support.bsky.team how are the weekly invites granted? As I’m a week and an hour into this account and I do not have any invites. Thanks!
It was trivial to come up with a POC for #CVE-2023-32243 thanks to @patchstackapp detailed write up. Already seeing it abused in the wild. #wordpress owners need to upgrade Essential Addons for Elementor plugin now and check for signs of intrusion.
May 12, 2023 at 3:47 AM
It was trivial to come up with a POC for #CVE-2023-32243 thanks to @patchstackapp detailed write up. Already seeing it abused in the wild. #wordpress owners need to upgrade Essential Addons for Elementor plugin now and check for signs of intrusion.
This will lead to a lot of hacked WordPress sites I wonder if any of the link pits are running this plugin https://www.bleepingcomputer.com/news/security/wordpress-elementor-plugin-bug-let-attackers-hijack-accounts-on-1m-sites/
WordPress Elementor plugin bug let attackers hijack accounts on 1M sites
One of WordPress's most popular Elementor plugins, "Essential Addons for Elementor," was found to be vulnerable to an unauthenticated privilege escalation that could allow remote attacks to gain administrator rights on the site.
www.bleepingcomputer.com
May 11, 2023 at 5:23 PM
This will lead to a lot of hacked WordPress sites I wonder if any of the link pits are running this plugin https://www.bleepingcomputer.com/news/security/wordpress-elementor-plugin-bug-let-attackers-hijack-accounts-on-1m-sites/
Great research on the Vidar Stealer https://www.esentire.com/blog/esentire-threat-intelligence-malware-analysis-vidar-stealer
eSentire Threat Intelligence Malware Analysis: Vidar Stealer
Dive deeper into the technical details gathered during eSentire’s Threat Response Unit (TRU) team’s research and threat analysis of the Vidar Stealer malware.
www.esentire.com
May 11, 2023 at 5:19 PM
Great research on the Vidar Stealer https://www.esentire.com/blog/esentire-threat-intelligence-malware-analysis-vidar-stealer
Looking forward to seeing the POC on Monday for this LPE on Linux https://www.bleepingcomputer.com/news/security/new-linux-kernel-netfilter-flaw-gives-attackers-root-privileges/
New Linux kernel NetFilter flaw gives attackers root privileges
A new Linux NetFilter kernel flaw has been discovered, allowing unprivileged local users to escalate their privileges to root level, allowing complete control over a system.
www.bleepingcomputer.com
May 10, 2023 at 7:47 PM
Looking forward to seeing the POC on Monday for this LPE on Linux https://www.bleepingcomputer.com/news/security/new-linux-kernel-netfilter-flaw-gives-attackers-root-privileges/
Reposted by PaPPy
Note that the update for CVE-2023-24932 does NOT actually fix anything. It gives you the option of applying the fix yourself. Read through ALL of https://tinyurl.com/mprmsext if you want to consider applying the protection. Feel free to cry a bit and/or consider a career change.
May 9, 2023 at 7:15 PM
Note that the update for CVE-2023-24932 does NOT actually fix anything. It gives you the option of applying the fix yourself. Read through ALL of https://tinyurl.com/mprmsext if you want to consider applying the protection. Feel free to cry a bit and/or consider a career change.
Great work by the spanish police https://www.bleepingcomputer.com/news/security/spanish-police-dismantle-phishing-operation-linked-to-crime-ring/
Spanish police dismantle phishing operation linked to crime ring
The National Police of Spain have arrested two hackers, 15 members of a criminal organization, and another 23 people involved in illegal financial operations in Madrid and Seville for alleged bank scams.
www.bleepingcomputer.com
May 9, 2023 at 9:32 PM
Great work by the spanish police https://www.bleepingcomputer.com/news/security/spanish-police-dismantle-phishing-operation-linked-to-crime-ring/
Great work taking down DDoS services https://arstechnica.com/information-technology/2023/05/feds-seize-13-more-ddos-for-hire-platforms-in-ongoing-international-crackdown/
Feds seize 13 more DDoS-for-hire platforms in ongoing international crackdown
The DDoS whack-a-mole game between law enforcement and miscreants continues.
arstechnica.com
May 9, 2023 at 3:42 PM
Great work taking down DDoS services https://arstechnica.com/information-technology/2023/05/feds-seize-13-more-ddos-for-hire-platforms-in-ongoing-international-crackdown/
Nice article from CISA https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-129a
Hunting Russian Intelligence “Snake” Malware | CISA
www.cisa.gov
May 9, 2023 at 3:16 PM
Nice article from CISA https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-129a
That’s pretty funny #Microsoft #clippy
May 8, 2023 at 9:53 PM
That’s pretty funny #Microsoft #clippy
Seems legit… https://www.reddit.com/r/techsupport/comments/9gwwcj/windowsdefendervbs_on_cuserspubliclibraries_is/
Reddit - Dive into anything
www.reddit.com
May 8, 2023 at 3:41 PM
Please educate y’all’s older folks https://www.malwarebytes.com/blog/threat-intelligence/2023/04/massive-malvertising-campaign-targets-seniors-via-fake-weebly-sites
Massive malvertising campaign targets seniors via fake Weebly sites
Scammers are buying ads on for the most common Google searches made by seniors and defrauding them with tech support scams.
www.malwarebytes.com
May 7, 2023 at 3:07 AM
Please educate y’all’s older folks https://www.malwarebytes.com/blog/threat-intelligence/2023/04/massive-malvertising-campaign-targets-seniors-via-fake-weebly-sites
Stuff like this and the satellite network keep me up and employed https://www.darkreading.com/ics-ot/2-years-after-colonial-pipeline-attack-us-critical-infrastructure-remains-as-vulnerable-to-ransomware
May 6, 2023 at 2:41 AM
Stuff like this and the satellite network keep me up and employed https://www.darkreading.com/ics-ot/2-years-after-colonial-pipeline-attack-us-critical-infrastructure-remains-as-vulnerable-to-ransomware
Great post on bad practices in cyber security from CISA https://www.cisa.gov/news-events/news/bad-practices-0
May 5, 2023 at 4:44 PM
Great post on bad practices in cyber security from CISA https://www.cisa.gov/news-events/news/bad-practices-0
If people haven’t upgraded their Papercut software now, this seems pretty bad https://thehackernews.com/2023/05/researchers-uncover-new-exploit-for.html
May 5, 2023 at 3:23 PM
If people haven’t upgraded their Papercut software now, this seems pretty bad https://thehackernews.com/2023/05/researchers-uncover-new-exploit-for.html
What prevents this individual from just starting a new domain and running the same business again? #infosec https://krebsonsecurity.com/2023/05/10m-is-yours-if-you-can-get-this-guy-to-leave-russia/
May 5, 2023 at 3:19 PM
What prevents this individual from just starting a new domain and running the same business again? #infosec https://krebsonsecurity.com/2023/05/10m-is-yours-if-you-can-get-this-guy-to-leave-russia/
Hello World! Happy to be here on #BlueSky instead of the dumpster fire!
May 5, 2023 at 3:11 PM
Hello World! Happy to be here on #BlueSky instead of the dumpster fire!