Manuel D'Orso @cirku17@infosec.exchange
- Keybase
- cirku17
Ⓐ INTJ • Infosec Analyst • DevSecOps • Crypto-anarchism enthusiast
Italy
Joined May 2019
RT @twcitalia
📅 Sabato 15:00
📍Hackmeeting | Ponticelli, Bologna
🎯 https://hackmeeting.org/hackit21/arrivare/
Questo sabato saremo ad HackMeeting per far conoscere TWC Italia e discutere di lavoro tecnologico e di come questo si lega ai temi della tecno-politica.
Per maggiori info: https://hackmeeting.org/hackit21/talks/58b7fa33-527b-40d6-a238-deb38430441b/
RT @carolafrediani
Su Regione Lazio, quanto uscito da fonti ufficiali/ufficiose è:
- son criminali/son terroristi
- è ransomware/non c'è riscatto
- attacco via fornitori IT/fornitori IT estranei
- entrati con phishing/no phish
- no backup/c'è(recuperato)
Appello a istituzioni: dateci + info,+chiare
Amazon Echo Dot Does Not Wipe Personal Content After Factory Reset
https://www.reddit.com/r/technology/comments/on1dxf/amazon_echo_dot_does_not_wipe_personal_content/?utm_medium=android_app&utm_source=share
Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases
https://threatpost.com/zero-day-attacks-woocommerce-databases/167846/
#wordpress
7 Places to do Automated Security Tests
https://wehackpurple.com/7-places-to-do-automated-security-tests/
How to Analyze Code for Vulnerabilities with Vickie Li
https://www.addevent.com/event/xG6776528
Manuel D'Orso
boosted
HTTP/3 needs us (and other people) to make firewall changes
https://utcc.utoronto.ca/~cks/space/blog/sysadmin/HTTP3AndOurFirewalls
This is not a drill: VMware vuln with 9.8 severity rating is under attack | Ars Technica
https://arstechnica.com/gadgets/2021/06/under-exploit-vmware-vulnerability-with-severity-rating-of-9-8-out-of-10/
Shining a Light on DARKSIDE Ransomware Operations
Tracking and measuring ATT&CK coverage with attack2jira
https://medium.com/@mvelazco/tracking-and-measuring-att-ck-coverage-with-attack2jira-fe700e2a1654
Manuel D'Orso
boosted
Backdoored developer tool that stole credentials escaped notice for 3 months https://arstechnica.com/gadgets/2021/04/backdoored-developer-tool-that-stole-credentials-escaped-notice-for-3-months/
Manuel D'Orso
boosted
[Event] DataSecOps: Solving Global Data Security Challenges
https://adevait.com/events/datasecops-solving-global-data-security-challenges
Universal “netmask” npm package, used by 270,000+ projects, vulnerable to octal input data: server-side request forgery, remote file inclusion, local file inclusion, and more (CVE-2021-28918)
https://sick.codes/universal-netmask-npm-package-used-by-270000-projects-vulnerable-to-octal-input-data-server-side-request-forgery-remote-file-inclusion-local-file-inclusion-and-more-cve-2021-28918/
RT @BlueLabsOnline
🪓Logger & 🧠Total Recall have been released! 🐻Grizzly releases tomorrow evening. Enjoy Defenders!
https://blueteamlabs.online #blueteam #dfir #soc
Blue Team Labs
Online
A gamified platform for defenders to practice their skills in security investigations and challenges covering; Incident Response, Digital Forensics, Security Operations, Reverse Engineering, and Threat Hunting.
RT @FDezeure
7th EU ATT&CK Workshop on 1-2 June. https://attack-community.org/event/. Updates from @MITREattack, launching @CycatP, exciting news from @sigma_hq and best practices presented by peers. Participation free but registration required. @circl_lu @CERTEU @MITREengenuity
RT @unmaskparasites
WordPress "Smilodon" malware (decoded) that steals payment details and user credentials. Exfil domains redorn[.]space and predator[.]host. Found in the _vp_ai_ping_11669596 option in WP database
Thanks @_jamsec
Manuel D'Orso
boosted
Why hot new social app Clubhouse spells nothing but trouble
"Clubhouse makes unencrypted recordings of the conversations.... Agora, the company that supplies back-end infrastructure to the Clubhouse app, is based in Shanghai. This means...'a user’s unique Clubhouse ID number and chatroom ID are transmitted in plaintext, and Agora would likely have access to users’ raw audio, potentially providing access to the Chinese government.'"
Manuel D'Orso
boosted
There is a Postman API conference and it is free to attend on Thursday and Friday
https://hopin.com/events/galaxy
Quiet a lot of API security talks
Manuel D'Orso
boosted
Spotify secures horrifying patent to monitor users' speech - frollo
#privacy
Link: https://consequenceofsound.net/2021/01/spotify-patent-monitor-users-speech/
Discussione: https://gambe.ro/s/gtdsvf
- Keybase
- cirku17
Ⓐ INTJ • Infosec Analyst • DevSecOps • Crypto-anarchism enthusiast
Italy
Joined May 2019
