Cyber Threat Intelligence @ https://xitter.cf/t.co/fC73RSevWP, journalist, OSINT | Responsible disclosures | Security consultancy | Contact me: [email protected]
Germany/Ukraine 🇺🇦
Joined February 2016
- Tweets1.7K
- Following530
- Followers18K
- Likes897
Is anyone still here? please reply to this thread to let me know if it is still worth publishing reports/news on this platform as I have almost migrated to linkedin.
This is NOT a single source. It's not about the number (scary!), but the scale and raise of infostealers infections today. What this number reflects is the size of of different infostealers logs exposed publicly since the beginning of this year alone. cybernews.com/security/billi…
China is leaking data like no other country in the world recently. We register it all and analyze thoroughly. Read more about our latest find, if you missed it: cybernews.com/security/chine…
It's been more than 3 years ago but this post keeps popping up and my DM is full of requests from people who think they are on this list. Let me assure you are not. There's been a development since then regarding the owner of this list.
Apparently, it was very limited and was part of The Kingdom of Bahrain's Joint Counter Terrorism Centre (JCTC) responsible for gathering and analysing information regarding terrorist organisations and affiliated individuals.
Interesting. Here is the list of recommended websites configuration sent by russian "Center for Monitoring and Managing the Public Telecommunications Network" to the critical infrastructure enterprises. In total, 653 search bots and crawlers are to be blocked.
Recently I reported very interesting leak related to Raysharp (a Chinese manufacturer of video cameras, recorders, and other surveillance products). While it may not be a household name in every corner of the world, it has established itself as a reputable provider of security surveillance solutions in certain regions or markets. Such as Russia, for example. Thread below:
Raysharp also provided a really weird comment when asked about the exposure which I would like to bring up here:
“Elasticsearch is an open-source log service system, with port 9500 only used for log queries during product development. Under normal circumstances, it is not necessary to use it. Only when there is an abnormality in the product, it is necessary to query the product log through port 9500 to assist in locating the problem. At present, the service on port 9500 is temporarily suspended. After resolving the issue of this vulnerability, it can be opened again”.
Lost in translation maybe? :) Anyway, read the full story here: cybernews.com/security/chine…
We are working with @cybersecdawg and @4353_37 on a project that should help companies quickly respond to the fast-growing issue with API keys leaks. Unfortunately, @Shopify, @stripe, @PayPal and other industry players underestimate this problem and prefer not to mention numerous exposures (and not all of them re-surface on greyweb forums, most are privately sold).
This quoted post is unavailable.
Proud and excited to be part of Mind The Sec once again, one of the most important events in the region!
Palestrante confirmado! Bob é Pesquisador de segurança e jornalista, ganhando reputação como um dos mais respeitáveis analistas de segurança da atualidade. Garanta seu ingresso para a edição de 10 anos do Mind The Sec! Link: bit.ly/3V70pRx
[NEW REPORT] Still a lot of UA entities and persons use uCoz resources to host sites. Now we know for sure, and a lot more to investigate... cybernews.com/security/web-h…
Will add a few details about this one.
- Reported it to Football Australia on Nov 22, 2023
- At least one bucket was public
- A couple of screenshots with proofs below
▪️@CyberNews research▪️ Football Australia leak exposes players’ details⤵️
#Australia #FootballAustralia #dataleak #data #cybersecurity #infosec
cybernews.com/security/footb…
Bob Diachenko 🇺🇦 retweeted
▪️@CyberNews research▪️ Football Australia leak exposes players’ details⤵️
#Australia #FootballAustralia #dataleak #data #cybersecurity #infosec
cybernews.com/security/footb…
Some random 'Mother of All Breaches' #MOAB stats / interesting info, FYI:
1) the total number of datasets in MOAB = 4145
2) out of it = 1448 have more than 100k records
3) out of it = 601 have more than 1M recs
4) 203 datasets have less than 100 recs
5) instance was updated in real-time, so the total count of records was even more after the initial report.
See below the final count shortly before it was taken down.
Every single data breach ever reported or sold was carefully collected by an unknown actor and left in a misconfigured instance. I'd say it is even bigger than @troyhunt's HIBP.
‼️@CyberNews research team, together with #cybersecurity researcher @MayhemDayOne, have discovered billions upon billions of exposed records on an open instance whose owner is unlikely ever to be identified.⤵️
#MOAB #databreach #dataleak #infosecurity
cybernews.com/security/billi…
