andsiem (@AndSiem) profile picture

andsiem

@AndSiem

Cybersecurity risk management

 United States
Joined August 2018
  • Tweets253
  • Following2.3K
  • Followers890
4Media
Photo by andsiem (@AndSiem)Photo by andsiem (@AndSiem)Photo by andsiem (@AndSiem)Photo by andsiem (@AndSiem)
andsiem retweeted
Wiz (@wiz_io) profile picture
Wiz
@wiz_io11 Jul 2023
🚨 BREAKING: History written with just 9 lines of code! We've discovered #PyLoose, the FIRST documented Python-based fileless attack targeting cloud workloads. See the power of 9 lines of Python code below 👇🏽
Image from Wiz (@wiz_io)
24
385
26
1,516
323,954
Please do the incident response team a favor, and check that the X-Forwarded-For Header is set on all your reverse proxies / load-balancers / etc. They will thank you later.
22
106
11
602
128,933
cyber360armor.com/misc/ranso… #ransomware #cybersecuritytips
20
After several weeks of work, it's finally there!🔥 Introducing PPLdump, a tool for dumping PPL processes with a Userland exploit!😈 👉Post 1: itm4n.github.io/lsass-runasp… 👉Post 2: blog.scrt.ch/2021/04/22/bypa… 👉Tool: github.com/itm4n/PPLdump Credit goes to @tiraniddo for the technique.
12
394
11
733
The Groundhog DDOS has been proliferating since 2015 and shows no signs of slowing down. Our newest blog revealed that Groundhog is still rapidly expanding and has infected at least 26K servers. lacework.com/groundhog-botne…
1
2
Stopping Serial Killer: Catching the Next Strike - Check Point Research research.checkpoint.com/2021…
1
andsiem retweeted
Bhabesh (@bh4b3sh) profile picture
Bhabesh@bh4b3sh28 Dec 2020
Just finished creating doc showing #CISBenchmark for #WindowsServer 2019 RTM Release 1809. You can see which Event IDs fall under which #AuditPolicy as well compare @CISecurity vs #Microsoft recommended settings to make things easier for #BlueTeam. docs.google.com/spreadsheets…
CIS Windows Server 2019 Audit Policy

CIS Windows Server 2019 Audit Policy

docs.google.com
1
1
Multiplatform Card Skimmers Targets Various eCommerce Sites #CardSkimmer #Magecart thelateralsecurity.com/2020/…
Image from andsiem (@AndSiem)
1
andsiem retweeted
Bhabesh (@bh4b3sh) profile picture
Bhabesh@bh4b3sh27 Dec 2020
Replying to @sigma_hq
@sigma_hq rule for #CVE-2020-10148 in #SolarWindsOrion. #RCE has been added to the menu. #SolarWindsHack storm still raging on.
Image from Bhabesh (@bh4b3sh)
CISA Cyber (@CISACyber) profile pictureCISA Cyber
@CISACyber26 Dec 2020
VU#843464: SolarWinds Orion API authentication bypass allows remote comand execution bit.ly/37NNeim

CERT/CC Vulnerability Note VU#843464

SolarWinds Orion API authentication bypass allows remote command execution

kb.cert.org
17
1
27
Attack surface analysis for Application Security. #ApplicationSecurity #AttackSurfaceAnalysis #BakedSecurity thelateralsecurity.com/2020/…
1
1
The Microsoft Patch Tuesday December #MicrosoftPatchTuesday thelateralsecurity.com/2020/…
1
Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006 #CommandInjection #CVE20204006 #VMware #Vulnerability #ZeroDay thelateralsecurity.com/2020/…
Diamond Model - Intrusion Analysis Framework #DiamondModel #IntrusionAnalysis thelateralsecurity.com/2020/…
Drupal core arbitrary PHP Code Execution Vulnerability Emergency Updates #CodeExecution #Critical #Drupal #PHP #Vulnerability thelateralsecurity.com/2020/…
Grelos, a new card skimmer malware #CardSkimmer #Grelos #Magecart thelateralsecurity.com/2020/…
The UK NCSC says cyber threat actors are targeting MobileIron RCE vulnerability, CVE 2020-15505 to compromise the networks of UK organizations #Critical #CVE202015505 #MobileIron #RCE #Vulnerability thelateralsecurity.com/2020/…
Critical zero-day vulnerability in VMWare that affects multiple products. #CommandInjection #CVE20204006 #VMware #Vulnerability #ZeroDay thelateralsecurity.com/2020/…
VMware critical and high risk vulnerabilities in various VMware products #CodeExecution #PrivilegeEscalation #Vulnerability #VMWare thelateralsecurity.com/2020/…
Microsoft Patch Tuesday October updates #Microsoft #PatchTuesday #November thelateralsecurity.com/2020/…
Image from andsiem (@AndSiem)
1
FBI security alert on misconfigured SonarQube #FBIAlert #SonarQube #Vulnerability thelateralsecurity.com/2020/…
Load more