Sam

A modern example of how little code a #malware downloader needs: check for internet, grab a file over FTP, run it, wait for it to finish. Don't get hacked, I guess?

New tool from Censys (PHP2Shell services) It confirms that 33 MILLION web servers are still vulnerable to PHP2Shell, this is crazy. php2shell.censys.com/

Over 100k+ PHP servers are still exposed and vulnerable to PHP2shell. The total results only show servers running PHP 8.1, there are hundreds of thousands more vulnerable. shodan.io/search?query=%22X-…

Most DDoS attacks are small and over in minutes. A few are enormous. Cloudflare says the number of giant ones jumped from 130 to 805 in one quarter. The scary part is that the botnets behind them are mostly hacked home devices. Source: techrepublic.com/article/new…

The ASOS breach worked because the warning came through a channel people trust - the official app. ASOS says someone impersonated a trusted contact to get login details. Expect convincing “ASOS” emails and texts over the next few weeks. Be sceptical of all of them.

2,000+ internet-facing machines are still flagged by Shodan as vulnerable to EternalBlue (MS17-010), the flaw behind WannaCry. The patch is over 9 years old. If you run Windows and expose SMBv1 (port 445) to the internet, check it ASAP #EternalBlue #WannaCry