This is a weird one. Customers of Delinea Secret Server Cloud had a mysterious outage on Friday due to a “security incident” – this was visible on a service status page: https://medium.com/media/624e5e85022f659c8407983a4c7fdb36/href Delinea Secret Server – also known as Thycotic Secret…
Category: DoublePulsar – Medium
Inside the failed attempt to backdoor SSH globally — that got caught by chance
Inside the failed attempt to backdoor SSH globally — that got caught by chance A few days ago, a toot on Mastodon from Andres, a Postgres developer, caught my attention: https://mastodon.social/@AndresFreundTec/112180083704606941 Wait, what?! What happened here is now well documented elsewhere, so I…
Inside the failed attempt to backdoor SSH globally — that got caught by chance
Inside the failed attempt to backdoor SSH globally — that got caught by chance A few days, a toot on Mastodon from Andres, a Postgre developer, caught my attention: https://mastodon.social/@AndresFreundTec/112180083704606941 Wait, what?! What happened here is now well documented elsewhere, so I shall…
How 50% of telco Orange Spain’s traffic got hijacked — a weak password
How 50% of telco Orange Spain’s traffic got hijacked^H^H^H^H^H^Hnull routed — a weak password So here’s a funny story. Earlier today, I noticed Orange Spain had an outage, caused by what appeared to be a BGP hijack: https://medium.com/media/86149308c6838a9cbb08d6b650510bf2/href This manifested to Orange Spain users as…
How 50% of telco Orange Spain’s traffic got hijacked — a weak password
How 50% of telco Orange Spain’s traffic got hijacked — a weak password So here’s a funny story. Earlier today, I noticed Orange Spain had an outage, caused by what appeared to be a BGP hijack: https://medium.com/media/86149308c6838a9cbb08d6b650510bf2/href This manifested to Orange Spain users as service…
Cyber Toufan goes Oprah mode, with free Linux system wipes of over 100 organisations
Photo by Nazrin Babashova on Unsplash Cyber Toufan goes Oprah mode, with free Linux system wipes of over 100 organisations For the past 6 or so weeks, I’ve been tracking Cyber Toufan on Telegram. They appeared in November, and they’ve been…
The ticking time bomb of Microsoft Exchange Server 2013
I monitor (in an amateur, clueless way) ransomware groups in my spare time, to see what intelligence can be gained from looking at victim orgs and what went wrong. Basically, I’m a giant big dork with too much free time. I’ve discovered…
Tracking Russia’s NoName057[16] attempts to DDoS UK public services
Today I noticed NoName057[16] — basically a poor man’s “Ukraine IT army” — attempting to DDoS various UK councils and transport services: They post about their exploits on Telegram, similar to those crazy Ukrainians. It’s basically Russia styled as hacktavists, with some great bear…
What it means — CitrixBleed ransom group woes grow as over 60 credit unions, hospitals…
What it means — CitrixBleed ransomware group woes grow as over 60 credit unions, hospitals, financial services and more breached in US. How CitrixBleed vulnerablity in Netscale has become the cybersecurity challenge of 2023. Credit union technology firm Trellance own Ongoing Operations LLC, and…
What it means — CitrixBleed ransom group woes grow as over 60 credit unions, hospitals…
What it means — CitrixBleed ransomware group woes grow as over 60 credit unions, hospitals, financial services and more breached in US. How CitrixBleed vulnerablity in Netscale has become the cybersecurity challenge of 2023. Credit union technology firm Trellance own Ongoing Operations LLC, and…