Picture

Immanuel Chavoya @FullM3talPacket

Founder of RiskHorizon AI | Former @NASA SOC Lead | Product Security Leader | Threat Researcher | #GCIH | #GCSA | #CISM | @ISSA Board Member | riskhorizon.ai San Francisco Bay Area Joined December 2018
  • Tweets
    4K
  • Followers
    1K
  • Following
    2K
  • Likes
    11K
Immanuel Chavoya retweeted
Risk_Horizon Profile Picture

RiskHorizon @Risk_Horizon

a year ago

🚀Exciting Breaking News! Our CEO, Immanuel Chavoya, the founder and CEO of RiskHorizon AI, was highlighted in a recent InfoSec piece from #RSAC that clarified the serious issues raised by the #NVDbacklog. Read full article : infosecurity-magazine.com/news/nist-cve-…

Immanuel Chavoya retweeted
vxunderground Profile Picture

vx-underground @vxunderground

2 years ago

Because nerds keep asking us about alleged Sony ransomware incident tl;dr Threat Actors did not deploy ransomware, no corporate data was stolen, services not impacted. Data was exfiltrated from Jenkins, SVN, SonarQube, and Creator Cloud Development. They're extorting Sony

Immanuel Chavoya retweeted
vxunderground Profile Picture

vx-underground @vxunderground

2 years ago

All ALPHV ransomware group did to compromise MGM Resorts was hop on LinkedIn, find an employee, then call the Help Desk. A company valued at $33,900,000,000 was defeated by a 10-minute conversation.

FullM3talPacket Profile Picture

Immanuel Chavoya @FullM3talPacket

2 years ago

Malicious LLM's are on the rise, sparking AI Threat concerns👀. Many articles lack real context and countermeasures. I've tried to provide both in my guide. Read the guide: linkedin.com/pulse/maliciou… #AI #Cybersecurity #StayInformed

FullM3talPacket Profile Picture

Immanuel Chavoya @FullM3talPacket

2 years ago

🚨Actively Exploited #ZeroDay Vulnerability in Zimbra Collaboration Suite (ZCS)🚨 ➡️A XSS vulnerability has been discovered by Google TAG & is actively exploited in ZCS email servers ➡️ Apply the manual workaround provided by Zimbra to stop the bleeding securityaffairs.com/148429/hacking…

Zimbra Profile Picture

Zimbra @Zimbra

2 years ago

🚨Actively Exploited #ZeroDay Vulnerability in Zimbra Collaboration Suite (ZCS)🚨 ➡️A XSS vulnerability has been discovered by Google TAG & is actively exploited in ZCS email servers ➡️ Apply the manual workaround provided by Zimbra to stop the bleeding securityaffairs.com/148429/hacking…

FullM3talPacket Profile Picture

Immanuel Chavoya @FullM3talPacket

2 years ago

Is the difference between us cyber defenders and threat actors simply how we chose to be paid? grahamcluley.com/rogue-it-secur…

Immanuel Chavoya retweeted
tomough Profile Picture

Tom Ough @tomough

3 years ago

North Korea test-fired 10+ missiles last month. Expensive stuff for a country cut off from the global economy. How do they do it? Via the world's most successful crypto hacking programme. My piece 👇 dlnews.com/articles/regul…

Immanuel Chavoya retweeted
uuallan Profile Picture

Allan “Ransomware Sommelier🍷” Liska @uuallan

3 years ago

Two things are true: 1. Better firewalls alone are not going to stop ransomware attacks against schools. 2. Jesus Christ, we don’t even allocate enough funding to schools to buy next generation firewalls? WTF? @johnnysaks130 or @samsabin923 am I reading this correctly?

RegLeichty Profile Picture

Reg Leichty @RegLeichty

3 years ago

Two things are true: 1. Better firewalls alone are not going to stop ransomware attacks against schools. 2. Jesus Christ, we don’t even allocate enough funding to schools to buy next generation firewalls? WTF? @johnnysaks130 or @samsabin923 am I reading this correctly? https://t.co/F8eoQGj1f6

Immanuel Chavoya retweeted
vxunderground Profile Picture

vx-underground @vxunderground

3 years ago

The administrator of BreachedForums, Pompomurin, has been arrested by the FBI. More information: bloomberg.com/news/articles/…

Immanuel Chavoya retweeted
domchell Profile Picture

Dominic Chell 👻 @domchell

3 years ago

Following some additional testing of #CVE-2023-23397 - I can confirm MS have only partially fixed this. You can still trigger auth to systems in trusted zones - ie other AD joined systems, which can then be relayed for privilege escalation 🔥vimeo.com/809084317

FullM3talPacket Profile Picture

Immanuel Chavoya @FullM3talPacket

3 years ago

🚨CVE-2023-23397 ➡️Name: #BearMail (This name is a nod to the APT28 group moniker #FancyBear. Credit goes to Cert-UA for discovering and reporting this vulnerability to Microsoft!) ❓Thoughts on an image for this vuln❓

FullM3talPacket Profile Picture

Immanuel Chavoya @FullM3talPacket

3 years ago

🚨CVE-2023-23397 ➡️Name: #BearMail (This name is a nod to the APT28 group moniker #FancyBear. Credit goes to Cert-UA for discovering and reporting this vulnerability to Microsoft!) ❓Thoughts on an image for this vuln❓ https://t.co/09PRQYyw6E

Immanuel Chavoya retweeted
MDSecLabs Profile Picture

MDSec @MDSecLabs

3 years ago

We've just published a quick write up on CVE-2023-23397, which allows a remote adversary to leak NetNTLMv2 hashes: mdsec.co.uk/2023/03/exploi… by @domchell

Immanuel Chavoya retweeted
SonicWall Profile Picture

SonicWall @SonicWall

3 years ago

What can #security teams learn from a year of cyberwarfare? @ComputerWeekly talks with SonicWall's @FullM3talPacket about the shifting #cybercriminal ecosystem and the need to continuously monitor and analyze the #cyber threat landscape to mitigate risk. bit.ly/3kWw4bB

Immanuel Chavoya retweeted
SonicWall Profile Picture

SonicWall @SonicWall

3 years ago

Using data from the 2023 SonicWall Cyber Threat Report, @CityAM looks at what's contributing to the increase in #IoT #malware attacks on UK government devices with comments from SonicWall #cybersecurity experts Terry Greer-King and @FullM3talPacket. bit.ly/3ZSHlsu

Immanuel Chavoya retweeted
SonicWall Profile Picture

SonicWall @SonicWall

3 years ago

Get the actionable cyber threat intelligence needed to adapt to the evolving tactics of bad actors. Join SonicWall #cybersecurity expert @FullM3talPacket for an insider's look at the exclusive findings from the 2023 SonicWall Cyber Threat Report. bit.ly/3xvn7Zm

Immanuel Chavoya retweeted
helpnetsecurity Profile Picture

Help Net Security @helpnetsecurity

3 years ago

Covert cyberattacks on the rise as attackers shift tactics for maximum impact - helpnetsecurity.com/2023/03/01/shi… - @SonicWall @VanKirk_Bob @FullM3talPacket #Ransomware #Malware #IoT #Cryptojacking #CyberSecurity #CISO #netsec #InfoSecurity #ITsecurity #CyberSecurityNews #SecurityNews

Immanuel Chavoya retweeted
_CERT_UA Profile Picture

CERT-UA @_CERT_UA

3 years ago

UAC-0056 to attack 20+ #UA GOV entities using backdoors planted 1-2 years ago, among them: #CredPump (SSH backdoor in a for of PAM module), HoaxPen (#backdoor, ELF), #HoaxApe (Apache module), as well as #GOST (Go Simple Tunnel) and #Ngrok. Details: cert.gov.ua/article/3947787

Immanuel Chavoya retweeted
catc0n Profile Picture

Caitlin Condon @catc0n

3 years ago

If you're a GoAnywhere MFT customer, heads up — exploited zero-day vuln, no CVE, no patch (that we can tell). Mitigation available, has to be applied to every node. rapid7.com/blog/post/2023…

Trends for United States

Mac Jones
17,5 B posts
Rams
38,5 B posts
49ers
36,7 B posts
Cubs
65,2 B posts
Cam Schlittler
5.624 posts
Niners
6.351 posts
Red Sox
9.990 posts
Kyle Shanahan
2.054 posts
#FTTB
5.135 posts
#FlyTheW
10,5 B posts
Purdy
7.812 posts
Duran
23 B posts
Al Michaels
Kendrick Bourne
2.093 posts
#RHOM
1.679 posts
#Peacemaker
12,7 B posts
#TSTheLifeofaShowgirl
55 B posts
Yankees
54,1 B posts
Stanton
4.669 posts
Connelly
8.050 posts

You might like

Author/Operator of @ScumBots. Blue Team by day, Blue Team by night. Opinions, typos, and bad grammar do not represent my employer. He/Him
Paul Melson
@pmelson
14K Followers
cyber go brrr PGP: 0x04ED1E328E543133
pancak3
@pancak3lullz
13K Followers
| #Hacker | #Speaker | #Mentor | #BlindGuy | #LHON | #a11y | #988 | 💀🧪⚗️ | @DeadPixelSec @NovaHackers @hacknotcrime Advocate @_MentorVillage @NextGenRedTeam
Joe B. - BlindHacker ...
@TheBlindHacker
13K Followers
yes i'm a hater, but i hate with ethics, nuance, and critical analysis
DaBanker
@Banker69
1K Followers
just a human with a thing for chaos. polyamorous, pansexual 🏳️‍🌈 he/him
Wes
@wesleytb13
4K Followers
🏳️‍🌈 Founder @_OpenSecurity_ // Former @BHInfoSecurity // Former SANS // Former USAF / Former me… #RedTeamFit /https://t.co/TkCZZSc4xA
Matthew Toussain
@0sm0s1z
6K Followers
PARITY ACCT | infosec professional | hacker | positive influence on the butterfly effect | #alwayslearning | #nevergiveup | #actuallyautistic | she/her
puzzles
@puzzlesforpyros
4K Followers
#CTI • #PurpleTeam • Latina 🇲🇽 • Opinions are my own
Dr. Ch33r10
@Ch33r10
12K Followers
#SOCMINT #OSINF #OSINT | #crisis awareness | #suicide prevention | #atheist | ~statements are my own opinion and do not reflect the views of my employer~
командирги�...
@illyrian598
4K Followers
Mumblings of a perpetual n00b| Xoogler/mandiant| #Hacker @binaryhansolo == ❤️| mama of THE amazing #actuallyautistic Bubbs| @infosecwhiskey @hackerhaussec
Ushi
@ush1c
16K Followers
#SecKC | #FSD 🦆 | Not @jfug_ | Hunt, CTI, SecOps | Ultrarunning and powerlfiting | tweets != employers
LP
@jotunvillur
3K Followers
He/Him. Threat Analyst II by day, father and husband at night. NQ Cowboys supporter and TTRPG player/DM. My opinions are my own.
Alastair Horne
@althepcman
771 Followers
Friendly Neighborhood Intel Analyst | Children’s Book Author | Lego | Hufflepuff
Nicole Hoffman
@threathuntergrl
9K Followers
Curator of Chaos Security Weekly Director of Operations (Studio Mom).
Wandering Star
@SW_Samii
5K Followers
Threat Intelligence Lead @SentinelOne / PhD. Tweets and opinions are my own.
Antonio Pirozzi
@_antoniopirozzi
793 Followers