KraftCERT/InfraCERT (@KraftCERT) header
KraftCERT/InfraCERT (@KraftCERT) profile picture

KraftCERT/InfraCERT

@KraftCERT

Norwegian energy- and petroleum sector and ICS CERT

 Oslo, Norway
kraftcert.no
Joined December 2014
  • Tweets2.8K
  • Following1K
  • Followers1.7K
73Media
Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)Photo by KraftCERT/InfraCERT (@KraftCERT)
Vi anbefaler denne podcasten (kun på norsk). " During their conversation, Robby and Espen discuss KraftCERT/InfraCERT's annual threat report, the most serious threats to the constituency, techniques seen being used, push to the cloud w/trade-offs &NIS(2)" mnemonic.io/resources/podcas…

Episode 93: KraftCERT | In Norwegian only

mnemonic.io
2
1
210
KraftCERT/InfraCERT retweeted
Monta Elkins (@montaelkins) profile picture
Monta Elkins@montaelkins31 Dec 2022
An employee's credentials were found for sale on the dark web shortly before the ransomware attack occurred. bleepingcomputer.com/news/se…
Canadian mining firm shuts down mill after ransomware attack

Canadian mining firm shuts down mill after ransomware attack

The Copper Mountain Mining Corporation (CMMC), a Canadian copper mining company in British Columbia, has announced it has become the target of a ransomware attack that impacted its operations.

bleepingcomputer.com
1
1
1
732
KraftCERT/InfraCERT retweeted
Daniel Kelley (@danielmakelley) profile picture
Daniel Kelley
@danielmakelley7 Nov 2022
Here are 27 ways to learn ethical hacking for free: 1. Root Me — Challenges. 2. Stök's YouTube — Videos. 3. Hacker101 Videos — Videos. 4. InsiderPhD YouTube — Videos. 5. EchoCTF — Interactive Learning. 6. Vuln Machines — Videos and Labs. 7. Try2Hack — Interactive Learning.
44
464
14
1,616
KraftCERT/InfraCERT retweeted
Dr. Rohit Gautam (@aslicyberguy) profile picture
Dr. Rohit Gautam@aslicyberguy9 Oct 2022
I have been learning Threat hunting lately. These are 2 good resources I’ve found. 1. attack.socprime.com/ 2. threathunterplaybook.com If you know more good resources share below 👇
What Is MITRE ATT&CK® and How to Use It for Self-Advancement? | SOC Prime

What Is MITRE ATT&CK® and How to Use It for Self-Advancement? | SOC Prime

MITRE ATT&CK guidance on using the framework for self-advancement backed by time-tested best practices from the SOC Prime’s expert.

socprime.com
8
141
1
502
KraftCERT/InfraCERT retweeted
Daniel Kelley (@danielmakelley) profile picture
Daniel Kelley
@danielmakelley31 Oct 2022
Here's a list of 43 cybersecurity YouTube channels: 1. Hak5 — General cybersecurity coverage. 2. The XSS Rat — Everything bounty hunting. 3. ITProTV — General cybersecurity coverage. 4. Infosec Institute — Cybersecurity awareness. 5. Cyrill Gössi — Extensive cryptography videos.
79
899
17
2,967
KraftCERT/InfraCERT retweeted
bryan owen (@bryansowen) profile picture
bryan owen@bryansowen15 Oct 2022
Latest supply chain guidance starts well in step 1. Sadly drifts to status quo contractual ideas that haven't effectively served security objectives or tech markets at scale. Favor approaches w/ leverage: security rating services, attack surface mgmt, provenance frameworks etc.
Image from bryan owen (@bryansowen)
NCSC UK (@NCSC) profile pictureNCSC UK
@NCSC14 Oct 2022
🌪️ "Successful incidents can have a profound, long-lasting impact," says Ian McCormack, NCSC Deputy Director for Government Cyber Resilience. He's warning businesses about the risks that cyber attacks on supply chains pose. Read the blog: ncsc.gov.uk/blog-post/supply…
1
2
1
KraftCERT/InfraCERT retweeted
Roar Thon (@Secdefence) profile picture
Roar Thon@Secdefence4 Oct 2022
Litt slemt å legge ut denne i dag, men den er en allmenn kommentar som gjelder veldig mange virksomheter. Både offentlige og private... Slik har det vært i mange år! #vintagesecurity #infosec #sikkerhet #humor #ironi
Image from Roar Thon (@Secdefence)
6
14
KraftCERT/InfraCERT retweeted
Charles Rollet (@CharlesRollet1) profile picture
Charles Rollet@CharlesRollet129 Sep 2022
NEW: the Danish capital region has banned Hikvision purchases following an assessment that Hikvision constitutes a "critical threat to security" ipvm.com/reports/danish-capi… via @ipvideo
Danish Capital Region Bans Hikvision Purchases, Calls "Critical Threat To Security"

Danish Capital Region Bans Hikvision Purchases, Calls "Critical Threat To Security"

The most populous region of Denmark,which includes the nation's capital of Copenhagen, has banned Hikvision camera purchases.

ipvm.com
1
9
1
11
Microsoft warned of a consumer-facing attack that made use of rogue OAuth applications deployed on compromised cloud tenants to ultimately seize control of Exchange servers and spread spam. thehackernews.com/2022/09/ha…
Hackers Using Malicious OAuth Apps to Take Over Email Servers

Hackers Using Malicious OAuth Apps to Take Over Email Servers

Microsoft warns that hackers are using malicious OAuth applications to gain control of Exchange email servers and spread spam to cloud tenants.

thehackernews.com
KraftCERT/InfraCERT retweeted
Patrick C Miller (@PatrickCMiller) profile picture
Patrick C Miller@PatrickCMiller22 Sep 2022
NSA shares guidance to help secure OT/ICS critical infrastructure bit.ly/3BFZkrm
NSA shares guidance to help secure OT/ICS critical infrastructure

NSA shares guidance to help secure OT/ICS critical infrastructure

The National Security Agency (NSA) and CISA have issued guidance on how to secure operational technology (OT) and industrial control systems (ICSs) part of U.S. critical infrastructure.

bleepingcomputer.com
2
3
9
KraftCERT/InfraCERT retweeted
Roar Thon (@Secdefence) profile picture
Roar Thon@Secdefence7 Sep 2022
Har skrevet noen ord om at ledere og medarbeidere IKKE er virksomhetens største sikkerhetstrussel! Jeg påstår at de som hevder at ledere og ansatte er den største trusselen umulig forstår forskjellen på trussel og risiko. dagensperspektiv.no/synspunk…
Synspunkt | Roar Thon: Ledere og ansatte er IKKE virksomhetens største sikkerhetstrussel

Synspunkt | Roar Thon: Ledere og ansatte er IKKE virksomhetens største sikkerhetstrussel

Om det er slik at ledelsen og ansatte i de fleste norske virksomheter er virksomhetens største sikkerhetstrussel, hva er da årsaken til at de hver eneste dag slipper inn på arbeidsplassen, spør Roar...

dagensperspektiv.no
1
5
10
A China-based threat actor has ramped up efforts to distribute the ScanBox reconnaissance framework to victims that include domestic Australian organizations and offshore energy firms in the South China Sea. threatpost.com/watering-hole…
Italian oil giant Eni was hit by a cyber attack, attackers compromised its computer networks, but the consequences appear to be minor. securityaffairs.co/wordpress…
Threat actors breached the network of the Italian oil company ENI

Threat actors breached the network of the Italian oil company ENI

Italian oil giant Eni was hit by a cyber attack, attackers compromised its computer networks, but the consequences appear to be minor.

securityaffairs.com
1
1
CVE-2022-34753 (RCE in Schneider Electric SpaceLogic C-Bus Home Controller) exploitation picked up in honeypot sensors, with callback to fetch malware. Exploit is public now, so if using SE home automation make sure you patch & follow SE advice: download.schneider-electric.…
4
11
1
10
Greece's largest natural gas distributor DESFA confirmed on Saturday that they suffered a limited scope data breach and IT system outage following a cyberattack. bleepingcomputer.com/news/se…
Greek natural gas operator suffers ransomware-related data breach

Greek natural gas operator suffers ransomware-related data breach

Greece's largest natural gas distributor DESFA confirmed on Saturday that they suffered a limited scope data breach and IT system outage following a cyberattack.

bleepingcomputer.com
Shadowserver does so much important work for the community!
The Shadowserver Foundation (@Shadowserver) profile pictureThe Shadowserver Foundation@Shadowserver17 Aug 2022
Two years on from our Data Center move, we would like to thank everyone who provided financial support during 2020-22: shadowserver.org/news/thanki… Stay tuned for the next chapter - the Shadowserver Alliance: coming soon! Contact us now to become a founder & help secure the Internet
Image from The Shadowserver Foundation (@Shadowserver)
4
Building trust...
ARCHIVED: Jen Easterly (@CISAJen) profile pictureARCHIVED: Jen Easterly@CISAJen14 Aug 2022
.@thedarktangent: “So, why are you here?” Me: Cuz @CISAgov’s success as America’s cyber defense agency is only possible if we can build TRUST w/all partners; & people don’t trust institutions—they trust people. Trust is built w/humility, vulnerability, transparency, & gratitude.
Image from ARCHIVED: Jen Easterly (@CISAJen)
1
Threat actors that go online with the moniker Adrastea claim to have hacked the multinational manufacturer of missiles MBDA. securityaffairs.co/wordpress…
Threat actor claims to have hacked manufacturer of missiles MBDA

Threat actor claims to have hacked manufacturer of missiles MBDA

Threat actors that go online with the moniker Adrastea claim to have hacked the multinational manufacturer of missiles MBDA.

securityaffairs.com
1
securityweek.com/european-mi…
European Missile Maker MBDA Denies Hackers Breached Systems

European Missile Maker MBDA Denies Hackers Breached Systems

European missile maker MBDA has denied that its systems have been breached after cybercriminals offered to sell data allegedly stolen from the company’s systems.

securityweek.com
Netwrix study reveals that manufacturing organizations experienced these types of attacks more often than any other industry surveyed. darkreading.com/cloud/manufa…
The ALPHV ransomware gang, aka BlackCat, claimed responsibility for a cyberattack against Creos Luxembourg S.A. last week, a natural gas pipeline and electricity network operator bleepingcomputer.com/news/se…
BlackCat ransomware claims attack on European gas pipeline

BlackCat ransomware claims attack on European gas pipeline

The ransomware group known as ALPHV (aka BlackCat) has assumed over the weekend responsibility for the cyberattack that hit Creos Luxembourg last week, a natural gas pipeline and electricity network...

bleepingcomputer.com
Load more