Meghan Jacquot 👩‍💻💫’s Tweets

1h

Starting tomorrow, there’s a contest for a theme for #TDI2022 See 👇 for more info

@DianaInitiative

#infosec #conferences

Quote Tweet

The Diana Initiative

@DianaInitiative

· 17h

Coming up this week at The Diana Initiative, we launch our #TDI2022 theme contest on Tuesday, Feb 1st. Stay tuned for contest rules & the link to submit your ideas.

#blackgirlshack is looking 4 volunteers #giveback

Retweeted

@blackgirlshack

15h

We’re holding a diversity round table on Feb 28th to talk about (the lack of) diversity in cyber.

are coming and moderated by

@Prof_Rege

Any other orgs interested?

@BlackInCyberCo1

?

10

16

28

Duchess of Hackington

@AlyssaM_InfoSec

12h

It's 2 years since I signed the contract, but tonight I FINALLY uploaded the last revisions to my book. It took much longer than planned and COVID had everything to do with that, but I'm so thankful to have it complete! #WritingCommunity Pre-order: alyssa.link/book

46

85

664

21h

Jan 2022 Patch Tuesday, Microsoft fixed 'Win32k Elevation Privilege Vuln CVE-2022-21882, a bypass for previously patched & actively exploited CVE-2021-1732 bug Windows vulnerability with new public exploits lets you become admin bleepingcomputer.com/news/microsoft #infosec #CVE #Windows

Windows vulnerability with new public exploits lets you become admin

A security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.

1

7

This is an ongoing campaign with the following identified so far: ‘Upgrade’, ‘Document’, ‘Shared’, and ‘UserInfo’ as app names Threat Actors are taking over CEO accounts with rogue OAuth apps bleepingcomputer.com/news/security/ #tech #AccountTakeOver #OAuth #infosec #CEO

Hackers are taking over CEO accounts with rogue OAuth apps

Threat analysts have observed a new campaign named 'OiVaVoii', targeting company executives and general managers with malicious OAuth apps and custom phishing lures sent from hijacked Office 365...

1

Topics to follow

Sign up to get Tweets about the Topics you follow in your Home timeline.

Carousel

Malicious ISO Embedded in an HTML Page isc.sans.edu/diary/rss/28282 #cybersecurity #infosec #phishing

1

North Korean Hackers Return with Stealthier Variant of KONNI RAT Malware

North Korean Hackers Return with Stealthier Variant of KONNI RAT Malware thehackernews.com/2022/01/north- #cybersecurity #infosec #malware

thehackernews.com

North Korean hackers release a stealthier variant of the KONNI RAT malware.

5

3

Qubit Finance platform hacked for $80 million worth of cryptocurrency therecord.media/qubit-finance- #cybersecurity #infosec #fintech #crypto

Qubit Finance platform hacked for $80 million worth of cryptocurrency

A threat actor has used an exploit to steal approximately $80 million from Qubit Finance, a decentralized finance (DeFi) platform that allows users to loan and speculate on cryptocurrency price...

2

This is a really great book giveaway if interested comment on

@cyberkrinn

post with a gif

Quote Tweet

Cyberkrinn

@cyberkrinn

· Jan 28

#cybersecurity n00bies I'm giving away this fantastic bundle to 2 randomly chosen people. To enter, reply 1X in this thread with ONLY a gif demonstrating your need. @AlyssaM_InfoSec @hacks4pancakes @CarpeDiemT3ch @carlotasage Pls RT for reach. humblebundle.com/books/cybersec

1

2

Hackers Using Device Registration Trick to Attack Enterprises with Lateral Phishing

Make sure to use MFA Threat Actors Using Device Registration Trick to Attack Enterprises with Lateral Phishing thehackernews.com/2022/01/hacker #cybersecurity #infosec #phishing

thehackernews.com

Hackers use device registration to launch lateral phishing attacks within enterprises

1

2

Less than 30 min before I go live at

@SANSInstitute

CTI Summit... tune in at 2:55PM to discuss key insights from my "CTI Networking" report published TODAY. blog.pulsedive.com/cti-networking See you there! sans.org/cyber-security

blog.pulsedive.com

CTI Networking Report

"Is Sharing Caring? A report on current cyber threat intelligence networking practices, results, and attitudes" is now available online.

10

19

Microsoft warns of multi-stage phishing campaign leveraging Azure AD bleepingcomputer.com/news/security/ #tech #infosec #microsoft #Azure #phishing

Microsoft warns of multi-stage phishing campaign leveraging Azure AD

Microsoft's threat analysts have uncovered a large-scale, multi-phase phishing campaign that uses stolen credentials to register devices onto the target's network and use them to distribute phishing...

1

105 million Android users targeted by subscription fraud campaign bleepingcomputer.com/news/security/ #tech #infosec #Andriod #fraud

105 million Android users targeted by subscription fraud campaign

A premium services subscription scam for Android has been operating for close to two years. Called 'Dark Herring', the operation used 470 Google Play Store apps and affected over 100 million users...

1

Lazarus hackers use Windows Update to deploy malware bleepingcomputer.com/news/security/ #tech #infosec #Windows #APT #LoLBins #malware

Lazarus hackers use Windows Update to deploy malware

North Korean-backed hacking group Lazarus has added the Windows Update client to its list of living-off-the-land binaries (LoLBins) and is now actively using it to execute malicious code on Windows...

Shipment-Delivery Scams Become the Favored Way to Spread Malware threatpost.com/shipment-deliv #cybersecurity #infosec #malware #scams

Shipment-Delivery Scams a Fav Way to Spread Malware

Attackers increasingly are spoofing the courier DHL and using socially engineered messages related to packages to trick users into downloading Trickbot and other malicious payloads.

8

3

2FA App Loaded with Banking Trojan Infests 10K Victims via Google Play threatpost.com/2fa-app-bankin #cybersecurity #infosec #malware #infostealer #fintech

2FA App Loaded with Banking Trojan Infests 10K Victims via Google Play

The Vultur trojan steals bank credentials but asks for permissions to do far more damage down the line.

1

"Is Sharing Caring? A report on current cyber threat intelligence networking practices, results, and attitudes" is now available online.

How cool - report drop during talk!

@euphoricfall

@pulsedive

blog.pulsedive.com/cti-networking "Do not be afraid to bring new ideas to the table. I think we are afraid of being wrong or looking incompetent... Discussing new ideas, brainstorming, and sharing only makes us stronger."

blog.pulsedive.com

CTI Networking Report

1

3

BotenaGo Botnet Code Leaked to GitHub, Impacting Millions of Devices threatpost.com/botenago-botne #cybersecurity #malware #botnet #github #infosec

BotenaGo botnet source code has been leaked to GitHub.

The BotenaGo botnet source code has been leaked to GitHub. In a Wednesday report, AT&T Alien Labs – which first discovered the difficult-to-detect malware in November 2021 – said it expects that the...

Apple Releases Security Updates for Multiple Products us-cert.cisa.gov/ncas/current-a #cybersecurity #apple #patch #iOS #infosec

Zerodium looks to buy zero-days in Outlook and Thunderbird email clients therecord.media/zerodium-looks #cybersecurity #infosec #zeroday #exploit

Zerodium looks to buy zero-days in Outlook and Thunderbird email clients

US-based exploit broker Zerodium announced plans today to pay $200,000 and $400,000 for zero-day exploits in Mozilla Thunderbird and Microsoft Outlook, respectively, two of today's most popular and...

1

A new tech standard aims to combat deepfakes therecord.media/a-new-tech-sta #infosec #cybersecurity #tech

@TheRecord_Media

A new tech standard aims to combat deepfakes

The Coalition for Content Provenance and Authenticity (C2PA) announced on Wednesday that it had partnered with tech giants including Microsoft, Intel, and Adobe to launch a new standard aimed at...

Phishing Simulation Study Shows Why These Attacks Remain Pervasive darkreading.com/threat-intelli #cybersecurity #infosec #phishing #research

Phishing Simulation Study Shows Why These Attacks Remain Pervasive

E-mail purportedly from human resources convinced more than one-fifth of recipients to click, the majority of whom did so within an hour of receiving the fraudulent message.

5

4

Today I attended and spoke at the

@SANSInstitute

#CTISummit - I was able to attend a few talks and created a video of the visuals of the other talks Subscribe for weekly videos at the CarpeDiemT3ch YouTube channel youtu.be/mI8WYuRZXqE #infosec #YouTube #SANS #conference

1

6

Recently disclosed Nobel Foundation site hit by DDoS attack on award day bleepingcomputer.com/news/security/ #tech #infosec #awards #DDoS

Nobel Foundation site hit by DDoS attack on award day

The Nobel Foundation and the Norwegian Nobel Institute have disclosed a cyber-attack that unfolded during the award ceremony on December 10, 2021.

2

David Bowie’s The Man Who Fell to Earth is becoming a new graphic novel

David Bowie’s The Man Who Fell to Earth is becoming a new graphic novel theverge.com/2022/1/26/2290 #books #DavidBowie #graphicnovel

theverge.com

Titan Comics’ is bringing The Man Who Fell to Earth back as a graphic novel

Breaking Barriers Women In CyberSecurity (BBWIC)

Retweeted

@barriers_in

We are extremely excited to announce that

@therealcyberken

has joined our

@barriers_in

Advisory Board! He will be taking care of 𝐒𝐩𝐨𝐧𝐬𝐨𝐫𝐬𝐡𝐢𝐩 & 𝐂𝐨𝐥𝐥𝐚𝐛𝐨𝐫𝐚𝐭𝐢𝐨𝐧 and we just can't wait to work with him! #boardmembers #leadership #maleally #maleallies

5

10

On pages 94-95, David Braue talks about why women prefer to work from home , why they feel more comfortable working in a hybrid environment, and importance of everyone speaking up against toxic behaviour. Check it out now: womeninsecuritymagazine.com #womeninsecuritymagazine

1

CVE-2021-40539 – Zoho Manage Engine ADSelfService Plus CVE-2021-26855 –Microsoft Exc. CVE-2021-26857 –Microsoft Exc. CVE-2021-26858 –Microsoft Exc. CVE-2021-27065 –Microsoft Exc. German gov. warns of APT27 activity targeting local companies therecord.media/german-governm #CVE #infosec

German government warns of APT27 activity targeting local companies

The German government said on Tuesday that a Chinese cyberespionage group known as APT27 has repeatedly attacked German companies over the past few months using vulnerabilities in software like...

‘Dark Herring’ Billing Malware Swims onto 105M Android Devices threatpost.com/dark-herring-b #cybersecurity #infosec #malware #fintech #Andriod

‘Dark Herring’ Billing Malware Swims onto 105M Android Devices

The mobile malware heisted hundreds of millions of dollars from unsuspecting users, thanks to 470 different well-crafted malicious app in Google Play.

30 vulnerabilities in multiple vendor products found and used by Mirai botnet malware Millions of Routers, IoT Devices at Risk as Malware Source Code Surfaces on GitHub darkreading.com/vulnerabilitie #cybersecurity #infosec #vulnerability #malware

Millions of Routers, IoT Devices at Risk as Malware Source Code Surfaces on GitHub

"BotenaGo" contains exploits for more than 30 vulnerabilities in multiple vendor products and is being used to spread Mirai botnet malware, security vendor says.

JFrog's New Tools Flag Malicious JavaScript Packages darkreading.com/dr-tech/jfrog- #cybersecurity #infosec #JavaScript #npm

JFrog's New Tools Flag Malicious JavaScript Packages

The three open source tools flag malicious JavaScript packages before they are downloaded and installed from the npm package manager.

3

iOS 15.3 is out now, and it fixes a nasty Safari bug

iOS 15.3 is out now, and it fixes a nasty Safari bug theverge.com/2022/1/26/2289 #cybersecurity #feedly

theverge.com

Update now to avoid potential privacy issues.

White House releases final zero-trust strategy for federal government therecord.media/white-house-re #cybersecurity #feedly

White House releases final zero-trust strategy for federal government

The White House on Wednesday issued finalized plans for its strategy to move the federal government to a “zero-trust” cybersecurity strategy by 2024.

800 compromised WordPress websites spreading banking trojans that target the credentials of Brazilian e-banking users Chaes banking trojan hijacks Chrome with malicious extensions bleepingcomputer.com/news/security/ #tech #chrome #infosec #fintech #Brazil #trojan

Chaes banking trojan hijacks Chrome with malicious extensions

A large-scale campaign involving over 800 compromised WordPress websites is spreading banking trojans that target the credentials of Brazilian e-banking users.

1

Currently attending this live! I encourage you, if you can to attend live online youtu.be/R2RGHSAA0Uo Register for free: sans.org/cyber-security

1

Attempt to shake down Linux users for Netfilter code use resolved | ZDNet

Quite the shakedown - smh! Attempt to shakedown Linux users for Netfilter code use resolved zdnet.com/article/attemp #tech #Linux #infosec #shady

zdnet.com

For years, one-time Linux Netfilter developer Patrick McHardy made money by threatening users with legal action for using "his" open-source code. That won't happen again.

On pages 26-27, Alana Maurushat discusses her career journey, the high points in her career, researching human factors in cybersecurity and advice for anyone who wants to pursue a similar academic path. Check it out now: womeninsecuritymagazine.com #womeninsecuritymagazine

1

Jan 26

Tales from the Dark Web, Part 2: Ransomware Stacked With Distribution Services Creates the Perfect Storm darkreading.com/crowdstrike/ta #infosec #cybersecurity #TheMoreYouKnow