Peter Robards @PeterRobards

IT Professional. Entertainer. Filmmaker. Writer. PeterRobards.com United States Joined July 2009

Tweets

3K
Followers

324
Following

730
Likes

10K

Peter Robards @PeterRobards

2 years ago

CVE-2023-27997 tracks a RCE flaw in Fortigate SSL-VPN devices and reports suggest it is likely already being actively exploited. Update your devices asap! Patches released in FortiOS firmware versions 6.0.17, 6.2.15, 6.4.13, 7.0.12, & 7.2.5. #xortigate bleepingcomputer.com/news/security/…

0 0 2 419 0

Moose @LitMoose

2 years ago

NEW PATCH FOR MOVEIT! If you patched before, please patch again. This mitigates a new cloud vuln. CVE is pending. progress.com/security/movei…

2 24 45 7K 2

Rachel Tobac @RachelTobac

3 years ago

Some say they feel nervous to use a password manager -- if that feeling is leading you to be less safe & reuse passwords (which btw is the easiest way for me to hack you bc that pw gets breached), then try this trick: 🧂Salt your password manager passwords🧂 Here's the trick:

CNN @CNN

3 years ago

27 97 330 513K 90

Download Video

25 180 784 268K 370

Will @BushidoToken

3 years ago

⚠️ Patch now: CVSS 9.8 (Critical) SQLi in QNAP NAS, likely to be exploited by threat actors such as the operators of Deadbolt Ransomware as well as RaspberryRobin qnap.com/en/security-ad… Scans report by @censysio censys.io/cve-2022-27596/

0 23 28 5K 4

Moose @LitMoose

3 years ago

Strong opinion: with so many people working from home, normalize little black notebooks as password managers. Ransomware gangs and access brokers aren't crawling into your spare bedroom at night reading your sticky note passwords. We're not at threat-level Babadook yet.

46 46 489 61K 10

MG @_MG_

3 years ago

Seeing lots of confusion about LastPass breach of encrypted vaults. The biggest risks for actually unlocking the vaults are: - phishing your master password - you having an ultra weak password, or something already known (ex: cred reuse or in a wordlist) 🧵1/n

3 14 56 18K 8

Rachel Tobac @RachelTobac

3 years ago

DraftKings users saying accounts are hacked & stealing large sums from bank accounts. Many claim 2FA enabled so while it's possible this hack was cred stuffing + 2FA code stealing or SIM swap, could also mean DraftKings themselves are dealing w/ compromise.actionnetwork.com/legal-online-s…

9 41 80 0 7

Peter Robards @PeterRobards

3 years ago

Get out and #vote! vote.org/polling-place-…

0 0 0 0 0

Peter Robards @PeterRobards

3 years ago

Excellent write-up about the recently patched #bufferoverflow vulnerability (CVE-2022-3602 & CVE-2022-3786) in #OpenSSL! Affects clients using OpenSSL 3.0.0 - 3.0.6. “Note: OpenSSL 3 is not the same as SSLv3. This vulnerability exists only in OpenSSL Version 3 and not SSLv3.”

0 0 0 0 0

Peter Robards @PeterRobards

3 years ago

Interesting write up dissecting the behavior of multiple #malware operations after exploiting CVE-2022-22954 (a RCE vulnerability in #VMware Workspace ONE Access) to gain access! This was patched back in April, but it’s still being actively probed for… fortinet.com/blog/threat-re…

0 0 0 0 0

Peter Robards @PeterRobards

3 years ago

"Fortinet is aware of an instance where this vulnerability [CVE-2022-40684] was exploited, and recommends immediately validating your systems against the following indicator of compromise in the device's logs: user="Local_Process_Access"..." #patchnow bleepingcomputer.com/news/security/…

0 0 0 0 0

Peter Robards @PeterRobards

3 years ago

"For years, macOS allowed any root certicate when checking code signatures, making code signing completely useless." 👀

[email protected] @0xdea

3 years ago

"For years, macOS allowed any root certicate when checking code signatures, making code signing completely useless." 👀

12 434 1K 0 169

Download Image

0 0 0 0 0

Peter Robards @PeterRobards

3 years ago

If you rely on Fortinet’s FortiGate firewall or FortiProxy then you need to update ASAP! A critical authentication bypass vulnerability was discovered (CVE-2022-40684) allowing attackers to gain administrative control via malicious HTTP/HTTPS requests… bleepingcomputer.com/news/security/…

0 0 0 0 0

Peter Robards @PeterRobards

3 years ago

Excellent 🧵 discussing the two recently discovered zero-day vulnerabilities in Microsoft’s Exchange Server: CVE-2022-41040 (server-side request forgery), and CVE-2022-41082 (remote-code execution). Read the equally excellent more in-depth write-up here: doublepulsar.com/proxynotshell-…

0 0 1 0 0

Peter Robards @PeterRobards

3 years ago

Good article discussing the recent successful #phishing attack against Uber. Key takeaway: “So far, the only forms of MFA that are phishing-resistant are those that comply with an industry standard known as FIDO2. It remains the MFA gold standard.” arstechnica.com/information-te…

0 1 1 0 0

Peter Robards @PeterRobards

3 years ago

Great thread 🧵 about enabling MFA Number Matching for Azure and Office 365 environments. For organizations that are stuck relying on push notifications this is a good first step towards hampering MFA fatigue attacks that recently compromised companies like Uber, Cisco, et al.

Sean Metcalf @PyroTek3

3 years ago

17 283 961 0 271

Download Image

0 0 0 0 0

Tabletop Scenarios @badthingsdaily

3 years ago

An employee is repeatedly receiving MFA push notifications.

21 69 560 0 16

Rachel Tobac @RachelTobac

3 years ago

🚨ATTENTION🚨 Apple found two 0-days actively in use that could effectively give attackers full access to device. For most folks: update software by end of day If threat model is elevated (journalist, activist, targeted by nation states, etc): update now techcrunch.com/2022/08/17/iph…

87 2K 3K 0 373

Peter Robards @PeterRobards

3 years ago

Some fallout from the recent successful #phishing attack against #twilio… If you rely on Signal, today is a great day to consider enabling registration lock on your account!

Signal @signalapp

3 years ago

Some fallout from the recent successful #phishing attack against #twilio… If you rely on Signal, today is a great day to consider enabling registration lock on your account!