Goupil retweeted
The display you’re reading this on sucks. Your brain is just too slow to notice.
For decades, panel manufacturers have used an optical-illusion to expand the perceived color depth.
If you look closely, the artifacts (on cheaper displays) are easy to spot.
Goupil retweeted
New publication by ANSSI: "Cyber Threat Overview 2024".
CERTFR-2025-CTI-004
cert.ssi.gouv.fr/uploads/CER…
Goupil retweeted
🆕We publish today the result of a deep-dive investigation into a malicious campaign leveraging #ShadowPad and #PlugX to distribute a previously-undocumented ransomware, dubbed #NailaoLocker.
This campaign targeted 🇪🇺 organizations during S2 2024 and is tied to Chinese TA 🇨🇳. /🧵
Goupil retweeted
Qubes OS 4.2.4 has been released!
qubes-os.org/news/2025/02/18…
Goupil retweeted
.@GaryMarcus discusses AI's technical problems, and explains why he thinks Large Language Models have reached a "point of diminishing returns,” in an #interview with @LeahHoffmann. bit.ly/4jUzLZ3
Goupil retweeted
This joint advisory is in response to exploitation disclosed by #Ivanti in Sept. 2024 and is intended to share historical analysis and indicators that remain a threat to unpatched appliances.
In response to active exploitation, we published an advisory with @FBI: Threat Actors Chain Vulnerabilities in Ivanti Cloud Service Applications. Read the advisory for recommended actions and mitigations to protect your networks: cisa.gov/news-events/cyberse…
Goupil retweeted
Seashell Blizzard, a Russia-based threat actor that has been linked to destructive attacks since the start of the war in Ukraine, has been observed conducting spear-phishing campaigns against the European energy sector. msft.it/6017UKvaW
Goupil retweeted
I'm not sure people fully grasp the severity of this #Fortigate config dump - Kevin breaks it down in his Mastodon posts :
cyberplace.social/@GossiTheD…
Goupil retweeted
⚠️ Vulnérabilité Fortinet.
📢 Le @CERT_FR a publié une alerte de sécurité relatif à une vulnérabilité critique affectant FortiOS et FortiProxy.
➡️Informations et recommandations sur :
cert.ssi.gouv.fr/alerte/CERT…
ALT Alerte de sécurité
⚠️Alerte CERT-FR⚠️
CERTFR-2025-ALE-002 : La vulnérabilité CVE-2024-55591 affecte les équipements Fortinet et permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance.
Elle est activement exploitée.
cert.ssi.gouv.fr/alerte/CERT…
Goupil retweeted
Due to U.S. telco networks being compromised, today CISA is recommending:
1. Use only end-to-end encrypted communications
2. Enable Fast Identity Online (FIDO) phishing-resistant authentication
3. Migrate away from Short Message Service (SMS)-based MFA
4. Use a password manager to store all passwords
5. Set a Telco PIN
6. Regularly update software
7. Opt for the latest hardware version from your cell phone manufacturer
8. Do not use a personal virtual private network (VPN)
Goupil retweeted
🚨 BREAKING: Amnesty’s latest report on digital surveillance in Serbia: new *NoviSpy* spyware discovered; zero days identified and patched; and first evidence showing use of Cellebrite UFED forensic products to unlock phones to then infect with spyware. 🧵
Goupil retweeted
Very cool research, with IOCs, describing a previously unknown gov spyware, NoviSpy. Full report: securitylab.amnesty.org/late…
Goupil retweeted
Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
cert.ssi.gouv.fr/actualite/C…
Goupil retweeted
#Podcast #Cybersécurité
Épisode #483 consacré au fonctionnement d'un antivirus, avec Renaud Tabary (@malcat4ever)
nolimitsecu.fr/fonctionnemen…
Goupil retweeted
#VisadeSécurité | ✅Les référentiels PASSI et PRIS évoluent afin de :
🔹 préparer les schémas de qualification des prestataires aux enjeux européens,
🔹 prendre en compte les contraintes opérationnelles.
Plus d'informations sur :
🔗 cyber.gouv.fr/actualites/lan…
ALT Qualification PRIS - Prestataires de réponse aux incidents de sécurité (version 3.0) Qualification PASSI - Prestataires d’audit (version 2.2)
