‼️ Just in: FortiBleed attackers rented 36 enterprise GPUs from an AI cloud provider to crack stolen FortiGate configuration hashes at industrial scale.
Cheap, on-demand GPU compute has quietly made mass password cracking easy, while tens of thousands of organisations still run VPN firewalls with no MFA. The threat is now less likely a nation-state and more like a financially motivated crew with a credit card and rented hardware in the cloud.
A write-up by Kevin Beaumont shines a light on the campaign that cracked credentials for tens of thousands of Fortinet firewalls.
He disputes Fortinet's public line that the data is just old breaches and bruteforcing, noting it contains freshly cracked passwords and that every organisation he helped had its config exported in the past month. In those cases the attacker went well beyond collecting credentials, adding admin accounts, opening SSH and RDP firewall rules, and logging into IPsec tunnels, with CloudSEK assessing around a thousand organisations breached internally and the attacker reaching internal Active Directory at a number of telcos and managed service providers.
We’ve updated our Active Shooter Response Poster for public areas! Learn to recognize warning signs, identify escape routes, and follow safety protocols. Displaying this can reduce panic, empower decisions, and save lives. 👉 go.dhs.gov/i86
🚨We released an ESXiArgs ransomware recovery script on GitHub to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks: github.com/cisagov/ESXiAr…#StopRansomware
With our partners @FBI, we published a cybersecurity advisory about the ESXiARgs ransomware campaign and guidance to use a script to help victims attempt to recover access to files. Reduce your risk to ransomware: go.dhs.gov/Zjm#StopRansomware
Tomorrow is Data Privacy Day. Protect your data when you're online.
📱 Keep your tech safe with strong passwords
💳 Shop only on secure and trusted sites.
🧑 Don’t click on links asking for personal info.
More info at cisa.gov
Here is our technical deep dive for the #Fortinet CVE-2022-40684 Auth Bypass. POC within.
This year has been filled with interesting HTTP header abuse!
horizon3.ai/fortios-fortip…
We’re celebrating 40 years of service for the President's National Security Telecommunications Advisory Committee: CISA.gov/NSTAC
NSTAC has advised 7 presidents since its inception & provides invaluable expertise on national security & emergency preparedness.
Check out the new 2023–2025 CISA Strategic Plan and see how we plan to reduce risk and build resilience by driving change in four key areas. Learn more at cisa.gov/strategy
FortiOS 7.2 el cual trae nuevas funcionalidades. A continuación un vídeo de 3 minutos en donde hablamos de las key features más interesantes en este nuevo release de FortiOS:
youtube.com/watch?v=5iG5KI…
Actualiza Chrome de inmediato: Google lanzó una actualización de seguridad de emergencia por un bug crítico genbeta.com/p/309681?utm_s… a través de @genbeta
We understand cyber threats can be a scary thing. That’s why we should be educating every American on cybersecurity. Click to learn more on how we can use the $1 billion infrastructure grant money to bolster our cyber defenses through education. upi.com/Top_News/US/20…
ICYMI – last week we published a Joint Cybersecurity Advisory on Log4j with our US, Canada, UK, New Zealand, and Australia partners. Take steps to protect your networks: go.usa.gov/xeuaf
109 Followers 505 FollowingHelping companies from Energy/Defense/Materials/Cyber/Hi-tech access a $161.5 Billion dollar investment fund: The U.S. Federal Government.
22K Followers 0 FollowingOur mission is to make the Internet more secure by bringing to light vulnerabilities, malicious activity and emerging threats. Join our Alliance!
16K Followers 272 FollowingOfficial account for U.S. Marine Corps Forces Cyberspace Command.
#PeopleIdeasThings
Following, retweets & links do not constitute endorsement.
18K Followers 421 FollowingOfficial page for U.S. Fleet Cyber Command / Navy Space Command / U.S. TENTH Fleet. Follows, retweets and links ≠ endorsement. #NavyCyber #NavySpace #TENTHFleet
62K Followers 323 FollowingPresident SANS Technology Institute College. SANS Fellow. CEO @CounterHackSec. @RSAConference Keynoter. IANS Faculty. BoD @manasquanbank & https://t.co/WD7vkoH5lH.
69K Followers 81 FollowingThe latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
21K Followers 2K FollowingDelivering the latest in #cybersecurity news, trends, insights, and top #infosec blogs for the cybersecurity community. Stay informed, stay secure!
23K Followers 537 FollowingInfosec Institute delivers cybersecurity boot camps, skills training, awareness and human risk management. Trusted by 70%+ of the Fortune 500.
99K Followers 9K FollowingAn international nonprofit membership association focused on inspiring a safe and secure cyber world. Become an ISC2 Candidate today!
43K Followers 2K FollowingCIS makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation.
35K Followers 106 Following@ICEgov HSI protects the U.S. by investigating global crimes that impact local communities. Privacy: https://t.co/aORjC5RLnf
131K Followers 3K FollowingCuenta oficial de Huawei en Latinoamérica y el Caribe.
Huawei es un proveedor mundial líder de infraestructura TIC y dispositivos inteligentes.
2K Followers 814 FollowingSomos la primera asociación mexicana dedicada al Derecho de las Tecnologías de Información, y la segunda más antigua en Iberoamérica.
86K Followers 186 FollowingCuenta oficial del Instituto Federal de Telecomunicaciones, órgano encargado de regular, promover y supervisar la radiodifusión y las telecomunicaciones.
14K Followers 66 Following@CISAgov’s Industrial Control Systems Cyber Emergency Response Team provides operational capabilities to defend control systems against cyber threats.
186K Followers 326 FollowingThe UK's intelligence, security and cyber agency, helping to keep the UK safe online and in the real world. Follow the cyber security arm of our mission @NCSC.
47K Followers 18K FollowingFirst #HACKER wrongfully sent to #PRISON in #URUGUAY, @darknetdiaries episode 25 - I changed the justice system in Latin America. Post-Traumatic Growth.
49K Followers 823 Following*Archived* Director @CISAgov. https://t.co/grTHNhI7Bf. American voters decide American elections. This account is not active.
145K Followers 451 FollowingWe are the National Cyber Security Centre – part of the UK’s intelligence & cyber agency @GCHQ. We help to make the UK the safest place to live and work online.
291K Followers 145 FollowingThe Defense Intelligence Agency is first in all-source military intelligence in support of warfighters, defense planners, & policymakers.
186K Followers 1K FollowingThe National Cybersecurity Alliance is a nonprofit that empowers people to use technology safely & securely. Co-leads Cybersecurity Awareness Month
361 Followers 851 FollowingI like figuring out how things work. I work in the infosec & privacy (cyber) insurance space as an underwriter. Views are my own and not my employer’s.
117K Followers 514 FollowingMITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt
136K Followers 457 FollowingFree and open source tool for network discovery, admin, and security auditing. Our tweetmaster is Gordon "Fyodor" Lyon. We're also on FB: https://t.co/RVkxWNikvW