Security professional interested in Threat Intelligence, OSINT and anything related. Views are my own
Joined September 2015
- Tweets170
- Following241
- Followers97
- Likes116
Dave Markham retweeted
This is CrowdStrike's Director of Overwatch, so I hope to help spread the word. I believe CS stopped these changes from being pushed out so machines late to the party wont get the faulty driver.
Command in Safe Mode:
del "C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys"
This Post is from an account that no longer exists. Learn more
Dave Markham retweeted
If you are adventurous, the branch for version 5.0 is the following github.com/ail-project/ail-f… feedback is welcome. It will be merged in the next days after some test with the migration process for existing users.
Dave Markham retweeted
Lockbit ransomware group issued a public apology to SickKids. SickKids is a Canadian based hospital and ranked #1 for Pediatric healthcare.
December 29th, 2022, the pediatric hospital was ransomed. Lockbit has issued the decryptor for free and has allegedly fired the affiliate.
Unpacking Black Basta: A Practical Look at the Newest Ransomware’s Attack Actions and Mitigations ultimatewindowssecurity.com/… via @randyfsmith
Dave Markham retweeted
🚨Emotet back in Distro Mode🚨 - As of 0800 UTC E4 began spamming and as of 0930 UTC E5 began spamming again. Looks like Ivan is in need of some cash again so he went back to work. Be on the lookout for direct attached XLS files and zipped and password protected XLS. 1/x
Dave Markham retweeted
There is no opt-out to having your car tracked. So we created one. Today we're releasing notmyplate.com: a website built with the help of privacy lawyers allowing drivers to invoke their GDPR right to restrict data processing to all vendors at once. It's 100% free.(11/X)
Dave Markham retweeted
How to prevent Kerberoasting:
Kerberoasting is an incredibly powerful and reliable attack against Active Directory. In some situations it can result in an attacker becoming Domain Admin nearly instantaneously.
Here's how to prevent this attack: 🧵
Dave Markham retweeted
🚨 CRITICAL ALERT
A severe 0-day vulnerability called #Follina has been exposed (since May 27th) in MS Word Documents.
It could allow hackers to take full control of your computer, in some cases WITHOUT even opening the file. 🧵
Dave Markham retweeted
As we gear up for Monday after seeing a weekend of conflict, nothing has changed in my assessment of the likelihood of Russian government-led destructive cyberattacks against US or EU commercial infrastructure. The risk remains low.
Russian cyber operators are too busy. 1/
Dave Markham retweeted
🔊 🔊 🔊
❗.@CISAgov, in partnership with the @FBI, has released a joint cybersecurity advisory detailing destructive #malware used to target organizations in Ukraine. Learn more about #WhisperGate and #HermeticWiper at go.usa.gov/xzCGN #ShieldsUp! #BeCyberAware
Dave Markham retweeted
Here is the promised part 2 of looking into #log4j. We step through some code to learn how lookups work, we bridge the gap to format string vulnerabilities, and understand through the code why the initial mitigation was not perfect. youtube.com/watch?v=iI9Dz3zN…
With a lot of focus still on #log4j it's important to still keep abreast of other vulnerabilities. The chaining of these 2 (CVE-2021-42278 & CVE-2021-42287) could be quite dangerous, especially given #exploit POC has been released See #Microsoft alert techcommunity.microsoft.com/…
Dave Markham retweeted
NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO NO
Dave Markham retweeted
On June 1, join @proofpoint's Sr. Director of Threat Research, @sherrod_im, and other leading female cyber professionals as they celebrate women in #cybersecurity and discuss the challenges around diversity in #Infosec! @InfosecurityMag ow.ly/2wDJ50zQJat
A sterling effort by the security industry collaborating to combat the abuse of COVID19 in cyber security incidents.
Check out the report: cti-league.com/2020/04/21/ct… #ctileague