@paulmutton profile picture
Paul Mutton @paulmutton

Cyber Security Consultant at Netcraft, tech author, photographer, CREST certified web applications tester, "He is a cybercrime warrior of the very first order."

Joined February 2009
  • Tweets 6,997
  • Following 200
  • Followers 936
717 Photos and videos
Sounds a bit worse than last time! bbc.co.uk/news/av/business-1…

M&S security breach in context

Online security expert Paul Mutton explains how Marks and Spencer's customers' details have been stolen.

bbc.co.uk
2
66
A spate of phishing attacks that are certainly more convincing than average, using compromised business email accounts and signatures to propagate netcraft.com/blog/autodesk-h…

Autodesk hosting PDF files used in Microsoft phishing attacks | Netcraft

Autodesk is hosting malicious PDF files that lead phishing attack victims to have their Microsoft login credentials stolen. The elaborate phishing campaign ...

netcraft.com
143
Cor, 10 years since all those fun and games with the Heartbleed vulnerability netcraft.com/blog/heartbleed…

Heartbleed certificate revocation tsunami yet to arrive | Netcraft

Only 30,000 of the 500,000 SSL certificates affected by the Heartbleed bug have been reissued up until today, and even fewer certificates have been revoked ...

netcraft.com
103
Paul Mutton retweeted
Netcraft@Netcraft
15 Mar 2024
Cloudflare loses 22% of its domains in Freenom .tk shutdown netcraft.com/blog/cloudflare…
3
4
599
Paul Mutton retweeted
Netcraft@Netcraft
7 Dec 2023
It’s not cricket! Sri Lanka and Bangladesh co-host phishing attack netcraft.com/blog/its-not-cr…
2
1
580
Paul Mutton retweeted
PortSwigger Research@PortSwiggerRes
28 Mar 2023
curl has a little-known quirk that exposed both Google Chrome and our own @Burp_Suite. We've published the full details here: portswigger.net/research/the…

The curl quirk that exposed Burp Suite & Google Chrome

In this post, we'll explore a little-known feature in curl that led to a local-file disclosure vulnerability in both Burp Suite Pro, and Google Chrome. We patched Burp Suite a while back, but suspect

portswigger.net
4
55
151
34,144
Don't ask ChatGPT for password advice.
1
290
Interestingly broken security: My card provider won't refund my credit balance unless I give my OTP to a person over the phone, but their own security guidance says to never share your OTP with another person (no exceptions stated).
1
3
268
I'm not sure that's the answer.
187
Paul Mutton retweeted
Netcraft@Netcraft
16 Jan 2023
Many phishing kits contain hidden code that sends a copy of all stolen credentials to their authors. news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
2
1,001
Exciting Tigerfibel delivery from the @TankMuseum!
1
Honesty in politics is so refreshing
Incredible! Wordle 388 2/6 ⬜⬜⬜⬜⬜ 🟩🟩🟩🟩🟩
It's 22:22:22 22/2/22 🤯
1
3
Strike Your Own! #Jubilee 50p at @RoyalMintUK
4
Anyone fancy buying a coffee table that has over a million views on YouTube? It has a model railway inside it... ebay.co.uk/itm/165307549372
2
2
Paul Mutton retweeted
Mícheál Ó Foghlú@mofoghlu
1 Feb 2022
Funny and malicious server banners | Netcraft News <= interesting read -- you could even get a job by reading the server banners!! news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
1
1
What's the weirdest server header you've ever seen? news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
2
6
16
Guess that explains why my Hermes parcel arrived looking like this...
The Times and Sunday Times
@thetimes
16 Dec 2021
Exposed: the Hermes delivery staff throwing your parcels against the wall thetimes.co.uk/article/expos…
2
Paul Mutton retweeted
Netcraft@Netcraft
23 Nov 2021
More than 11 million Apache websites could have been vulnerable to path traversal exploits news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
1
4
Load more