Cisco happily announcing that they use outdated software throughout their portfolio: tools.cisco.com/security/cente… #patchnow #apache #httpd

URLhaus adds more pressure on threat actors that are abusing the domain name space for distributing malware 👮 Today, we started to notify domain registrars and registries about domains that have been setup by threat actors for the sole purpose of distributing malware 📩🛑

When the dust settles, subscribing to comments on SwitHak (👁)'s BlueTeam CheatSheet * Log4Shell* is gold. 🛎️ #log4j #Log4Shell gist.github.com/SwitHak/b66db3…

Looking into #Log4j attacks before mass scanning atm. Matthew Prince 🌥 and Cisco Talos Intelligence Group saw things, but did not share early IOCs afaik. Is there more to do than scan Logs for ${jndi:*} ? Did anyone see pre 12/9 attempts? x.com/eastdakota/sta… blog.talosintelligence.com/2021/12/apache… #Log4Shell

Verifying myself: I am bynt on Keybase.io. QD_feUOH7CUZvVNdftrVnRwcACJYRztLLbNK / keybase.io/bynt/sigs/QD_f…

TIL confirmed exploitation of vulns in the product portfolio is just another marketing opportunity at VMware. Joining the band wagon: please patch #vmware #vIDM #vRealize #Access vmware.com/security/advis… (CVE-2022-22954)

Today we've published Intel Microcode decryptor! It gives you an amazing opportunity for researching x86 platforms. You can understand how Intel mitigated spectre vulnerability, explore the implementation of Intel TXT, SGX,VT-x technologies! Enjoy it! github.com/chip-red-pill/…