Mastodon @ schleuss.online

0 posts0 participants0 posts today

Maxime ThiebautWe're still discovering further ramifications to <a href="https://infosec.exchange/tags/Ivanti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ivanti</a>'s <a href="https://infosec.exchange/tags/PulseSecure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PulseSecure</a> vulnerabilities (<a href="https://infosec.exchange/tags/CVE_2023_46805" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2023_46805</a> & <a href="https://infosec.exchange/tags/CVE_2024_21887" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2024_21887</a>). In February, we identified two new backdoors: <a href="https://infosec.exchange/tags/SparkCockpit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SparkCockpit</a> & <a href="https://infosec.exchange/tags/SparkTar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SparkTar</a>. Both backdoors employ selective interception of TLS communication, offer multiple degrees of persistence and access possibilities into the victim network (e.g., traffic tunneling through SOCKS proxy).👀 Analysis & detection rules at <a href="https://blog.nviso.eu/2024/03/01/covert-tls-n-day-backdoors-sparkcockpit-sparktar/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.nviso.eu/2024/03/01/covert-tls-n-day-backdoors-sparkcockpit-sparktar/</a>The findings of our investigation have been independently corroborated by the research performed by Mandiant and have partially been observed by Fortinet.<a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatintel</a> <a href="https://infosec.exchange/tags/forensics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#forensics</a> <a href="https://infosec.exchange/tags/reverseengineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reverseengineering</a>

IT NewsHackers are exploiting a Pulse Secure 0day to breach orgs around the world - Enlarge (credit: CHUYN / Getty Images) Hackers backed by nation-states are expl... - <a href="https://arstechnica.com/?p=1758789" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://arstechnica.com/?p=1758789</a> <a href="https://schleuss.online/tags/vulnerabilities" class="mention hashtag" rel="tag">#vulnerabilities</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/exploits" class="mention hashtag" rel="tag">#exploits</a> <a href="https://schleuss.online/tags/biz" class="mention hashtag" rel="tag">#biz</a>&it <a href="https://schleuss.online/tags/policy" class="mention hashtag" rel="tag">#policy</a> <a href="https://schleuss.online/tags/tech" class="mention hashtag" rel="tag">#tech</a> <a href="https://schleuss.online/tags/vpns" class="mention hashtag" rel="tag">#vpns</a>

ITSEC NewsFeds Hit with Successful Cyberattack, Data Stolen - The attack featured a unique, multistage malware and a likely PulseSecure VPN exploit. <a href="https://threatpost.com/feds-cyberattack-data-stolen/159541/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://threatpost.com/feds-cyberattack-data-stolen/159541/</a> <a href="https://schleuss.online/tags/microsoftoffice365credentials" class="mention hashtag" rel="tag">#microsoftoffice365credentials</a> <a href="https://schleuss.online/tags/dataexfiltration" class="mention hashtag" rel="tag">#dataexfiltration</a> <a href="https://schleuss.online/tags/federalagency" class="mention hashtag" rel="tag">#federalagency</a> <a href="https://schleuss.online/tags/inetinfo" class="mention hashtag" rel="tag">#inetinfo</a>.exe <a href="https://schleuss.online/tags/cyberattack" class="mention hashtag" rel="tag">#cyberattack</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/spycampaign" class="mention hashtag" rel="tag">#spycampaign</a> <a href="https://schleuss.online/tags/government" class="mention hashtag" rel="tag">#government</a> <a href="https://schleuss.online/tags/cisaalert" class="mention hashtag" rel="tag">#cisaalert</a> <a href="https://schleuss.online/tags/espionage" class="mention hashtag" rel="tag">#espionage</a> <a href="https://schleuss.online/tags/malware" class="mention hashtag" rel="tag">#malware</a> <a href="https://schleuss.online/tags/exploit" class="mention hashtag" rel="tag">#exploit</a> <a href="https://schleuss.online/tags/hacks" class="mention hashtag" rel="tag">#hacks</a>

IT NewsCode-execution bug in Pulse Secure VPN threatens patch laggards everywhere - Enlarge (credit: Bid.in2corporate.com) Organizations that have yet to install the latest version ... - <a href="https://arstechnica.com/?p=1701334" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://arstechnica.com/?p=1701334</a> <a href="https://schleuss.online/tags/virtualprivatenetworks" class="mention hashtag" rel="tag">#virtualprivatenetworks</a> <a href="https://schleuss.online/tags/vulnerabilities" class="mention hashtag" rel="tag">#vulnerabilities</a> <a href="https://schleuss.online/tags/codeexecution" class="mention hashtag" rel="tag">#codeexecution</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/biz" class="mention hashtag" rel="tag">#biz</a>&it <a href="https://schleuss.online/tags/tech" class="mention hashtag" rel="tag">#tech</a> <a href="https://schleuss.online/tags/bugs" class="mention hashtag" rel="tag">#bugs</a> <a href="https://schleuss.online/tags/vpns" class="mention hashtag" rel="tag">#vpns</a>

ITSEC NewsTop 10 most exploited vulnerabilities list released by FBI, DHS CISA - The agencies say it's vital to prioritize patching. Otherwise, we're making it easy for attackers ... more: <a href="https://nakedsecurity.sophos.com/2020/05/15/top-10-most-exploited-vulnerabilities-list-released-by-fbi-dhs-cisa/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://nakedsecurity.sophos.com/2020/05/15/top-10-most-exploited-vulnerabilities-list-released-by-fbi-dhs-cisa/</a> <a href="https://schleuss.online/tags/objectlinkingandembedding" class="mention hashtag" rel="tag">#objectlinkingandembedding</a> <a href="https://schleuss.online/tags/vulnerabilitylist" class="mention hashtag" rel="tag">#vulnerabilitylist</a> <a href="https://schleuss.online/tags/securitythreats" class="mention hashtag" rel="tag">#securitythreats</a> <a href="https://schleuss.online/tags/vulnerability" class="mention hashtag" rel="tag">#vulnerability</a> <a href="https://schleuss.online/tags/apachestruts" class="mention hashtag" rel="tag">#apachestruts</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/adobeflash" class="mention hashtag" rel="tag">#adobeflash</a> <a href="https://schleuss.online/tags/sharepoint" class="mention hashtag" rel="tag">#sharepoint</a> <a href="https://schleuss.online/tags/office365" class="mention hashtag" rel="tag">#office365</a> <a href="https://schleuss.online/tags/exploits" class="mention hashtag" rel="tag">#exploits</a> <a href="https://schleuss.online/tags/malware" class="mention hashtag" rel="tag">#malware</a> <a href="https://schleuss.online/tags/citrix" class="mention hashtag" rel="tag">#citrix</a> <a href="https://schleuss.online/tags/drupal" class="mention hashtag" rel="tag">#drupal</a> #.net <a href="https://schleuss.online/tags/cisa" class="mention hashtag" rel="tag">#cisa</a> <a href="https://schleuss.online/tags/ole" class="mention hashtag" rel="tag">#ole</a> <a href="https://schleuss.online/tags/vpn" class="mention hashtag" rel="tag">#vpn</a>

ITSEC NewsDHS Urges Pulse Secure VPN Users To Update Passwords - The DHS urged organizations to update their passwords and make sure that a critical Pulse Secure V... more: <a href="https://threatpost.com/dhs-urges-pulse-secure-vpn-users-to-update-passwords/154925/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://threatpost.com/dhs-urges-pulse-secure-vpn-users-to-update-passwords/154925/</a> <a href="https://schleuss.online/tags/credentialpassword" class="mention hashtag" rel="tag">#credentialpassword</a> <a href="https://schleuss.online/tags/vulnerabilities" class="mention hashtag" rel="tag">#vulnerabilities</a> <a href="https://schleuss.online/tags/pulsesecurevpn" class="mention hashtag" rel="tag">#pulsesecurevpn</a> <a href="https://schleuss.online/tags/criticalflaw" class="mention hashtag" rel="tag">#criticalflaw</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/password" class="mention hashtag" rel="tag">#password</a> <a href="https://schleuss.online/tags/hacks" class="mention hashtag" rel="tag">#hacks</a> <a href="https://schleuss.online/tags/cisa" class="mention hashtag" rel="tag">#cisa</a> <a href="https://schleuss.online/tags/dhs" class="mention hashtag" rel="tag">#dhs</a>

IT NewsAs attacks begin, Citrix ships patch for VPN vulnerability - Enlarge (credit: Igor Golovniov/SOPA Images/LightRocket via Getty Images) On January 19, Citrix r... more: <a href="https://arstechnica.com/?p=1645999" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://arstechnica.com/?p=1645999</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/ransomware" class="mention hashtag" rel="tag">#ransomware</a> <a href="https://schleuss.online/tags/biz" class="mention hashtag" rel="tag">#biz</a>&it <a href="https://schleuss.online/tags/policy" class="mention hashtag" rel="tag">#policy</a> <a href="https://schleuss.online/tags/citrix" class="mention hashtag" rel="tag">#citrix</a>

IT NewsUnpatched Citrix vulnerability now exploited, patch weeks away - Enlarge / Citrix's ADC and Gateway products have a vulnerability that now has several exploits wide... more: <a href="https://arstechnica.com/?p=1643051" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://arstechnica.com/?p=1643051</a> <a href="https://schleuss.online/tags/virtualprivatenetworksvpns" class="mention hashtag" rel="tag">#virtualprivatenetworksvpns</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/webhack" class="mention hashtag" rel="tag">#webhack</a> <a href="https://schleuss.online/tags/biz" class="mention hashtag" rel="tag">#biz</a>&it <a href="https://schleuss.online/tags/citrix" class="mention hashtag" rel="tag">#citrix</a>

IT NewsUnpatched VPN makes Travelex latest victim of “REvil” ransomware - Enlarge / It may take longer to get your money changed when you travel, since Travelex is doing eve... more: <a href="https://arstechnica.com/?p=1640787" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://arstechnica.com/?p=1640787</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/ransomware" class="mention hashtag" rel="tag">#ransomware</a> <a href="https://schleuss.online/tags/biz" class="mention hashtag" rel="tag">#biz</a>&it <a href="https://schleuss.online/tags/revil" class="mention hashtag" rel="tag">#revil</a> <a href="https://schleuss.online/tags/vpn" class="mention hashtag" rel="tag">#vpn</a>

ITSEC NewsREvil ransomware exploiting VPN flaws made public last April - Researchers report flaws, vendors issue patches, organisations apply them - and everyone lives hap... more: <a href="https://nakedsecurity.sophos.com/2020/01/08/revil-ransomware-exploiting-vpn-flaws-made-public-last-april/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://nakedsecurity.sophos.com/2020/01/08/revil-ransomware-exploiting-vpn-flaws-made-public-last-april/</a> <a href="https://schleuss.online/tags/badpacketsreport" class="mention hashtag" rel="tag">#badpacketsreport</a> <a href="https://schleuss.online/tags/securitythreats" class="mention hashtag" rel="tag">#securitythreats</a> <a href="https://schleuss.online/tags/vulnerability" class="mention hashtag" rel="tag">#vulnerability</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/ransomware" class="mention hashtag" rel="tag">#ransomware</a> <a href="https://schleuss.online/tags/sodinokibi" class="mention hashtag" rel="tag">#sodinokibi</a> <a href="https://schleuss.online/tags/malware" class="mention hashtag" rel="tag">#malware</a> <a href="https://schleuss.online/tags/revil" class="mention hashtag" rel="tag">#revil</a> <a href="https://schleuss.online/tags/vpn" class="mention hashtag" rel="tag">#vpn</a>

ITSEC NewsSodinokibi Ransomware Behind Travelex Fiasco: Report - Researchers suspect the cybercriminals attacked using an unpatched critical vulnerability in the c... more: <a href="https://threatpost.com/sodinokibi-ransomware-travelex-fiasco/151600/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://threatpost.com/sodinokibi-ransomware-travelex-fiasco/151600/</a> <a href="https://schleuss.online/tags/foreigncurrencyexchange" class="mention hashtag" rel="tag">#foreigncurrencyexchange</a> <a href="https://schleuss.online/tags/unpatchedservers" class="mention hashtag" rel="tag">#unpatchedservers</a> <a href="https://schleuss.online/tags/vulnerabilities" class="mention hashtag" rel="tag">#vulnerabilities</a> <a href="https://schleuss.online/tags/cve" class="mention hashtag" rel="tag">#cve</a>-2019-11510 <a href="https://schleuss.online/tags/cve" class="mention hashtag" rel="tag">#cve</a>-2019-11539 <a href="https://schleuss.online/tags/cyberattack" class="mention hashtag" rel="tag">#cyberattack</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/ransomware" class="mention hashtag" rel="tag">#ransomware</a> <a href="https://schleuss.online/tags/sodinokibi" class="mention hashtag" rel="tag">#sodinokibi</a> <a href="https://schleuss.online/tags/travelex" class="mention hashtag" rel="tag">#travelex</a> <a href="https://schleuss.online/tags/malware" class="mention hashtag" rel="tag">#malware</a> <a href="https://schleuss.online/tags/vpn" class="mention hashtag" rel="tag">#vpn</a>

ITSEC NewsAuthentication Bypass Bug Hits Top Enterprise VPNs - Business users of Cisco, F5 Networks, Palo Alto Networks and Pulse Secure platforms are impacted, ... more: <a href="https://threatpost.com/authentication-bypass-bug-enterprise-vpns/143781/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://threatpost.com/authentication-bypass-bug-enterprise-vpns/143781/</a> <a href="https://schleuss.online/tags/authenticationbypass" class="mention hashtag" rel="tag">#authenticationbypass</a> <a href="https://schleuss.online/tags/vulnerabilities" class="mention hashtag" rel="tag">#vulnerabilities</a> <a href="https://schleuss.online/tags/cookiestorage" class="mention hashtag" rel="tag">#cookiestorage</a> <a href="https://schleuss.online/tags/vulnerability" class="mention hashtag" rel="tag">#vulnerability</a> <a href="https://schleuss.online/tags/websecurity" class="mention hashtag" rel="tag">#websecurity</a> <a href="https://schleuss.online/tags/pulsesecure" class="mention hashtag" rel="tag">#pulsesecure</a> <a href="https://schleuss.online/tags/encryption" class="mention hashtag" rel="tag">#encryption</a> <a href="https://schleuss.online/tags/paloalto" class="mention hashtag" rel="tag">#paloalto</a> <a href="https://schleuss.online/tags/patches" class="mention hashtag" rel="tag">#patches</a> <a href="https://schleuss.online/tags/cisco" class="mention hashtag" rel="tag">#cisco</a> <a href="https://schleuss.online/tags/vpns" class="mention hashtag" rel="tag">#vpns</a> <a href="https://schleuss.online/tags/f5" class="mention hashtag" rel="tag">#f5</a>

Recent searches

Search options

Administered by:

Server stats:

#pulsesecure