Cc @onyphe.io

The electrical power outage in Spain and Portugal as seen from the Internet (France included for reference)

Patch management is a multi-decade failure.

VPN Vulnerabilities Emerges As The Key Tool for Threat Actors to Attack Organizations

The latest version of our cli tool has been released. Get v4.19.0 and find wrappers with sweet new APIs inside. Available here ➡️ search.onyphe.io/docs/onyphe-... or here 🐳 hub.docker.com/r/onyphe/ony... or even here 🥷 metacpan.org/dist/Onyphe

🧙‍♀️Cc @fs0c131y.com @gazlacrymo.fr @hacker0x01.bsky.social @gandalfistari.bsky.social @jnocetti.bsky.social @korben.info @tariqkrim.bsky.social @reesmarc.bsky.social @jeromenotin.bsky.social @oliviertesquet.bsky.social @patriceauffret.bsky.social @untersin.gr ça devrait t’intéresser 🪄

Mais il a bien dormi.

Oui enfin, c'est comme un moustique qui s'écrase contre le pare-brise d'une voiture.

RedMike Hackers Exploited 1000+ Cisco Devices to Gain Admin Access

📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #PaloAltoNetworks PA product: CVE-2025-0108: authentication bypass on management interface search.onyphe.io/search?q=cat... Thanks to @assetnote.io for having shared the detection method.

Yet by performing an awkward legal waltz around the subject, Talos have helpfully supported my hypothesis that compromised IOS XE devices are part of an ORB network serving multiple APTs. archive.hack.lu/hack-lu-2024...

"Command & Conquer : Red Alert" en version Open source : www.openra.net

Roughly same numbers as @onyphe.bsky.social

Back in the dayz the fake exploit did "rm -rf /" www.trendmicro.com/en_us/resear... #CTI

More than 50k *vulnerable* devices. This one is pretty bad.

Don't expose DCERPC protocol on the Internet.

Je plussoie.

FreeBSD 14.2-RELEASE now includes OCI-compatible images, and the Podman toolkit is ready to use them, on both amd64 and arm64 systems - A brief Introduction by Dave Cottlehuber #FreeBSD #BSD

répondez à vos emails putain dire que j'ai connu un temps où les gens répondaient à un FAX

Stop. Truncating. Hashes. www.phoronix.com/news/OpenWrt...

📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #Mitel MiCollab product: CVE-2024-35286: unauthenticated SQL injection on login page CVE-2024-41713: unauthenticated arbitrary file read www.onyphe.io/search?q=cat...

#Cyberattaques : une étude dévoile la porte d'#entrée préférée des #ransomwares https://www.01net.com/actualites/cyberattaques-etude-devoile-porte-entree-preferee-ransomware##Cyberattaques##entrée##ransomwarestml

Optimist: the cup is 1/2 full Pessimist: the cup is 1/2 empty Excel: the cup is January 2nd

I just reached 1k followers on #Bluesky - It has been growing pretty fast. Starting to believe the place will be as cool as the old #Twitter ! Thx everyone ! <3

I'm so ever tactful 😆

"Additionally, the vulnerability is not remotely exploitable over the open internet. This means the actor would already need to have access to the internal network" Are you serious?!?

Users urges D-Link to provide patches for their unfixed routers.

Ça commence à ressembler a quelque chose ici. Masse critique atteinte ?

📣 We have added a new #vulnerability detection to our #ASM #AttackSurfaceManagement solution for #PaloAltoNetworks PA product: CVE-2024-0012: authentication bypass on mgmt interface CVE-2024-9474: authenticated (bypassed) RCE on mgmt interface www.onyphe.io/search?q=cat...

Using @onyphe.bsky.social I count 4758 unique vCenter Servers on the Internet. onyphe -export 'category:datascan device.product:"vcenter server" | uniq ip,port,forward | addcount | output' You could also search by cpe, or by vendor, or use a full-text search dork if you really wanted to 😉

📢 notez la date ! 22 Novembre, notre célèbre rendez-vous des rencontres de la grenouille @m82.bsky.social sera une rainette (à Rennes donc...) Avec @g0ul4g.bsky.social et @patriceauffret.bsky.social ! Inscription ici ⬇️ www.helloasso.com/associations...

Un belle soirée en perspective à Rennes avec @g0ul4g.bsky.social et @patriceauffret.bsky.social www.helloasso.com/associations...

This afternoon #ONYPHE identified 71K unique IPs exposing a webui vulnerable to #CVE-2023-20198 in 201 different countries That's the Cisco ios XE vuln, CVSS 10, actively exploited with no patch. What can you say? sec.cloudapps.cisco.com/security/cen... www.onyphe.io @patriceauffret.bsky.social

Coucou les gens du ciel bleu ! Pour info, Unlock Your Brain 2023, c'est parti ! Les early birds sont en vente ! Saisissez votre ticket... 😉 pretix.eu/cantine/UYBH...

@jamesatack.bsky.social welcome James :)

Les jours passent et ne se ressemblent pas ! Merci à éric bothorel pour l’organisation de la conférence “Tech Against Terrorism” à l’Assemblée nationale Merci à RISKINTEL MEDIA et aux copains de Sesame it pour les échanges et le bon moment !

These companies are using techniques developed by NASA to capture the naturally produced CO2 and dissolve the molecules into their products.

In March 2022, temperatures near the eastern coast of Antarctica spiked at least 70 degrees Fahrenheit (39 degrees Celsius) above normal — making it the most intense recorded heat wave to occur anywhere on Earth, according to a recent study.

Et voilà, tout juste sortie de presse, la version augmentée de la bibliographie #cyber du M82 project ! C'est ici: www.m82-project.com

The rules for phone calls have changed. When is it okay to leave voice mails, call multiple times in a row or take a call in public? We spoke to an etiquette expert and people of all ages to help everyone navigate phone calls in 2023.

Hello world!