Attack Detection @AttackDetection
Attack Detection Team at @ptsecurity ptsecurity.com Joined March 2016-
Tweets195
-
Followers2K
-
Following19
-
Likes32
🚨 First summer Suricata rules update is live: rules.ptsecurity.com • Stealers: SHub, Stealc, Majanito/WeedHack, VenomStealer, DarkCloud • RATs: KongRAT, PoisonX/10FXRAT, BananaRAT/SmartRAT • Botnet: RustoBot • Loader: PowerLoader #Suricata #Malware #CyberSecurity
🔥 Yep, the hot one in React! We’ve added Suricata signatures for the CVSS 10.0 #React2Shell (#CVE-2025-55182) - a unauth RCE vulnerability in React Server Components 👉 Check it out at rules.ptsecurity.com/view/ptopen-al… Stay protected! #suricata #ids #cybersecurity
🚨Suricata Rules Update - Android Threats🚨 New Android-focused network detection rules are now live on rules.ptsecurity.com: • SpyNote • SuperCard X • Konfety • DCHSpy • RedHook • LunaSpy • ClayRAT • Brokewell • some generics #Suricata #AndroidMalware #CyberSecurity
🚨We have added a #Suricata signature for the recent #SharePoint RCE (#CVE-2025-53770, CVE-2025-49706) exploitation attributes to our open ruleset. It detects signs of successful machine key leakage. 🔗Check it out: rules.ptsecurity.com/view/ptopen-al… #cybersecurity #ids
🚨We have added #suricata signature for the recent #Fortiweb (CVE-2025-25257) vulnerability in our open ruleset. Check it out: 👉rules.ptsecurity.com/view/ptopen-al… #cybersecurity #ids #fortinet
🚨We have added new #suricata signatures for the recent #citrixBleed2 (CVE-2025-5777) vulnerability in our open ruleset. Not only for an attempt, but for detection of a successful exploitation as well Check it out: 👉rules.ptsecurity.com/view/ptopen-al… #cybersecurity #ids #citrix
🚨 Malware Suricata Rules Update Available on rules.ptsecurity.com! 🚨 🛑 Remcos, XWorm RAT 🛑 Stealc v2 Stealer 🛑 Filsh Backdoor 🛑 Andromeda Botnet 🛑 PhantomEnigma Banker (see TI Report global.ptsecurity.com/analytics/pt-e…) #Suricata
🚨 We've added a new signature to our Suricata ruleset for the critical vulnerability CVE-2025-49113 in Roundcube, previously reproduced by @ptswarm. This RCE vulnerability potentially exposes millions of hosts worldwide. Update your rules now: rules.ptsecurity.com #Suricata
🐍 Suricata rules update ! We’ve added detections for newly disclosed RCE vulns: - Apache Tomcat (CVE-2025-24813) - Ingress NGINX (CVE-2025-1974) 🆕 Detects for tunnel services (tunnelto, Telebit, Pinggy), Rclone and AdaptixC2 activity. See full list → rules.ptsecurity.com
We're dropping a massive malware signature update 🎭 Highlights: RustyNet loader, WorldWind stealer, Slam RAT, nasty XWorm, SpyNote, Hydra, Zanubis ...and plenty more! 🔗 rules.ptsecurity.com
Guess who's back? 🎉 Our Suricata ruleset has found a new home at rules.ptsecurity.com! Enable source ptrules/open in Suricata-Update to stay ahead of threats.
@Xqy1005 @missdiog Hi, due to unknown reason our repo was blocked and then unblocked🤨
Spring Core RCE 0day aka Spring4Shell came out recently. Detect exploitation attempts with our #suricata rule: github.com/ptresearch/Att…
One can get #Zabbix panel admin rights in one request with CVE-2022-23131. But you can detect it easily with our #suricata rule. We worked on possible rule bypasses and false positive rate github.com/ptresearch/Att…
Rule updates: our #suricata rules detect all known Log4Shell CVE-2021-44228 bypasses for now. Also added a rule to detect a successful log4j exploitation!
Breaking news, the internet is under fire again! Releasing #suricata detection rule for log4j aka Log4Shell and CVE-2021-44228 as soon as possible. We will update the rule along with the new exploits and bypasses found. github.com/ptresearch/Att…
Good: Use our #suricata rules to detect malicious attempts of the new CVE-2021-41773 #Apache HTTP Server dir traversal. Better: Patch your apache The best: Do both! github.com/ptresearch/Att…
🔥 We have reproduced the fresh CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49. If files outside of the document root are not protected by "require all denied" these requests can succeed. Patch ASAP! httpd.apache.org/security/vulne…
How to get a system shell on any windows version? Use #SystemNightmare exploit. How to detect SystemNightmare usage in a network? Use our rules! Oh, here they are: github.com/ptresearch/Att…
SwiftOnSecurity @SwiftOnSecurity
412K Followers 9K Following computer security person. former helpdesk.
James @James_inthe_box
22K Followers 468 Following
ET Labs @ET_Labs
6K Followers 215 Following ET Labs is the research team of Emerging Threats - Bionic threat intelligence specialists from Fantasia.
Suricata IDS/IPS @Suricata_IDS
13K Followers 40 Following Suricata IDS/IPS/NSM engine developed by the @OISFoundation
Matthew @embee_research
14K Followers 2K Following Security Researcher, Creating and Sharing Educational Content.
𝙽𝙴𝚃𝚁𝙴�... @netresec
9K Followers 851 Following Creators of #NetworkMiner, #CapLoader, #PolarProxy, #FlowCarp and #RawCap. https://t.co/CZliuI7uGK https://t.co/vC5XlufvIJ
TomU | I'm still here... @c_APT_ure
8K Followers 6K Following #InfoSec professional, husband & father of two (in random order). #BlueTeam #DFIR #APT #CTI #RedTeaming #BSidesZH (RT/Likes ≠ endorsement) 👀➡️#MalwareChallenge
Shina Mashiro @ShiinaaM
383 Followers 4K Following
I S @0xHex4Fun
0 Followers 35 Following
M35Baki @M35Baki
0 Followers 41 Following
Zach Cory @zachcory666
5 Followers 330 Following
Olli-NUX @Olli_NUX
226 Followers 752 Following
C.Rocco @claudiorocco
78 Followers 344 Following Tentando fazer música, tentando escrever, tentando fazer piada, tentando viver. Falhando em todos. Mas sempre tentando!
pepepepep @ooppppp33
108 Followers 4K Following Time is #Quantum。#Rhetoric & #Neuromarketing。Stats MSc。Trade Prop & $Crypto 。#DLT,#AI,#IoT,#CRISPR hobbist。#Pentester & #Python dev ♤ 。@Gwern
0xLite@Ha @AzyzChayeb
701 Followers 7K Following
Tommaso allieri @contommaso
11 Followers 148 Following
Abdelkrim @ASn4k3y3
26 Followers 1K Following
sp1d3y.sh @sp1d3y_sh
0 Followers 37 Following
Sa9lo @S49L0
0 Followers 2K Following
会飞的鱼 @8YxRK6RFZd85810
0 Followers 15 Following
me here @mehere301
2 Followers 80 Following
Swarup Pattnaik @swaruppattnaik
57 Followers 1K Following cyber defense;frontline ir ,ex mandiant. Building a Tool for optimizing security analyst experience
Abolfazl Hayati @HayatiAbolfazl
5 Followers 524 Following و تو چه میدانی، شاید تقدیرت بهتر از آرزویت باشد…
CrazyHellPasswordMana... @CHPMApp
14 Followers 1K Following https://t.co/7jLE65KSmf $CHPMApp.AI $CHPMApp.ML $CHPMApp.pricings [email protected]
seeking wisdom @CWil1293049
5 Followers 110 Following
ᴀʙᴅᴇʟʀʜᴍ�... @aufzayed
2K Followers 407 Following Security Engineer | Hacking Systems Before Hackers Do | OSCP+ · eWPTX · eMAPT
sxxxxxxxxxxv @sxxxxxxxxxxv
5 Followers 739 Following
Alexander @fadead63
0 Followers 24 Following
I//uS!0nS @c03rci0n
64 Followers 7K Following
LenguaDePlata @pepitogrillad0
132 Followers 946 Following
Bryan Mompremier @muster_bryan
12 Followers 96 Following
an_time @antime17
0 Followers 96 Following
Sotac @Sotac347196
0 Followers 2 Following
Moshe Farrid @WooorstOne
130 Followers 2K Following
Tamtam @Tamtam95614487
0 Followers 2 Following
Marco Pedrinazzi @pedrinazziM
190 Followers 1K Following Interested in security research, detection engineering, DFIR, threat intelligence, AI security. My blog: https://t.co/aTfNv9Uatf
Vlad Baader @BaaderVlad
3 Followers 127 Following
Mohamad Siahposh @Mohamadsp5
130 Followers 191 Following Cyber Security | Therat Hunting | SOC | Security Researcher
Berk Albayrak @brkalbyrk7
1K Followers 2K Following Security Engineer @trendyol | TI | OSINT | Cybercrime | TA2AQX 📡
Vpup @Vpup6
1 Followers 123 Following
许忱 @hong_xu69853
13 Followers 2K Following
Andrei @andreitrcv
54 Followers 3K Following
nanjin002 @nanjin00272827
12 Followers 4K Following
Bwing @Bwing4for
3 Followers 781 Following
Данила @Danila20764446
0 Followers 37 Following
ET Labs @ET_Labs
6K Followers 215 Following ET Labs is the research team of Emerging Threats - Bionic threat intelligence specialists from Fantasia.
Suricata IDS/IPS @Suricata_IDS
13K Followers 40 Following Suricata IDS/IPS/NSM engine developed by the @OISFoundation
𝙽𝙴𝚃𝚁𝙴�... @netresec
9K Followers 851 Following Creators of #NetworkMiner, #CapLoader, #PolarProxy, #FlowCarp and #RawCap. https://t.co/CZliuI7uGK https://t.co/vC5XlufvIJ
PT ESC @TI_ESC
853 Followers 13 Following Follow us for the latest malware findings and research reports from PT ESC, the Positive Technologies (@ptsecurity) Threat Intelligence Team.
immortalp0ny @immortalp0ny
926 Followers 297 Following Passionate in puzzle solving All tweets are my own https://t.co/WvGoeDGB8B
Anton Kutepov @aw350m33
38 Followers 108 Following Security Researcher @attackdetection | Threat Hunting | Network Forensics | @oscd_initiative
OSCD @oscd_initiative
1K Followers 20 Following Open international cybersecurity specialist initiative. We collaborate on common problems and share knowledge. Mirror in telegram: https://t.co/HQWeyzwPZB
ANY.RUN @anyrun_app
33K Followers 191 Following Empowering businesses with proactive security solutions: Interactive Sandbox, TI Lookup and Feeds. Sign up: https://t.co/P23ijjfXSh
ZenOpz @ZenOpz
386 Followers 2K Following ZenOpz is an MSSP dedicated to providing SMBs access to #infosec and #technology necessary to manage their data risks. Retweet/Follow is not an endorsement.
ProtectWise 401TRG @401TRG
697 Followers 150 Following Threat Research Group at @ProtectWise. Analyst to analyst content on malware, DFIR, threat intelligence and much more.
Eric Leblond @Regiteric
3K Followers 942 Following Co-founder and CTO at @StamusN, @Suricata_IDS developer, Netfilter coreteam emeritus member. Amateur photographer. @[email protected] on Mastodon
Xavier Mertens @xme@i... @xme
15K Followers 1K Following Freelance | Blogger | SANS ISC Handler | FOR610/FOR710 Instructor | BruCON co-organizer | BlueTeam | DFIR | MTB | PGP: 0xEB583912514B3E1F | Tweets are mine!
William Metcalf @node5
1K Followers 400 Following I have been recruited by the Star League to defend the Frontier against Xur and the Ko-dan Armada
Alexey Lednev @zipa_original
16 Followers 83 FollowingYou might like
