@rigtsec profile picture
initSoul @rigtsec

Systems Admin | Security & Automation | Real-world IT & Sec tips uit de praktijk. Shadow IT, least privilege & sysadmin life. DM voor collabs ❤️

Joined September 2024
  • Tweets 2,188
  • Following 55
  • Followers 16
34 Photos and videos
Pinned Tweet
initSoul
@rigtsec
9h
Deze maand zag ik bij meerdere bedrijven dezelfde beveiligingsfouten terugkomen. Geen exotische aanvallen gewoon vermijdbare blunders op endpoints. Hier zijn de 5 meest gemaakte fouten 👇
1
26
x.com/i/article/206696637734…
10
Deze maand zag ik bij meerdere bedrijven dezelfde beveiligingsfouten terugkomen. Geen exotische aanvallen gewoon vermijdbare blunders op endpoints. Hier zijn de 5 meest gemaakte fouten 👇
1
26
more replies
Fout #5: USB en externe apparaten zonder beleid Eén USB stick van een parkeerplaats kan genoeg zijn. Zonder beleid rond externe apparaten laat je een fysieke achterdeur wagenwijd open staan. Blokkeer wat je niet nodig hebt.
1
14
Endpoint security hoeft niet ingewikkeld te zijn. Maar het vereist wél aandacht, consistentie en een beetje gezond verstand. Welke van deze fouten herken jij?
14
Bij een klant vandaag: 8 van de 12 medewerkers hadden lokale adminrechten op hun laptop. Niemand wist het. Zo werkt shadow IT.
14
initSoul retweeted
International Cyber Digest
@IntCyberDigest
Jun 9
‼️🚨 BREAKING: ServiceNow has been breached. Customers are reporting unauthorised access to their instances. One customer states their security team reported this vulnerability to them, and they closed the case twice, saying they had already known since the 7th of April.
94
732
3,864
873,885
Spain dismantles major $4.7M manga piracy platform, arrests four bleepingcomputer.com/news/se…

Spain dismantles major $4.7M manga piracy platform, arrests four

The Spanish police have dismantled the largest Spanish-language manga piracy platform, operating since 2014, with millions of monthly users from around the globe.

bleepingcomputer.com
21
After Bluesky, Mastodon Targeted in DDoS Attack securityweek.com/after-blues…

After Bluesky, Mastodon Targeted in DDoS Attack

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.

securityweek.com
22
Inside Caller-as-a-Service Fraud: The Scam Economy Has a Hiring Process bleepingcomputer.com/news/se…

Inside Caller-as-a-Service Fraud: The Scam Economy Has a Hiring Process

Fraud operations now operate like call centers, complete with hiring, training, and performance tracking. Flare reveals how cybercriminals manage "Caller-as-a-Service" operations like a professional...

bleepingcomputer.com
8
New npm supply-chain attack self-spreads to steal auth tokens bleepingcomputer.com/news/se…

New npm supply-chain attack self-spreads to steal auth tokens

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

bleepingcomputer.com
15
Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says securityweek.com/most-seriou…

Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says

British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict.

securityweek.com
24
Microsoft Teams to get efficiency mode on PCs with limited resources bleepingcomputer.com/news/mi…

Microsoft Teams to get efficiency mode on PCs with limited resources

Microsoft is preparing to roll out a new Efficiency Mode for Microsoft Teams for systems with limited CPU and memory resources to improve app responsiveness.

bleepingcomputer.com
31
New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention  securityweek.com/new-wiper-m…

New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention 

Dubbed Lotus Wiper, the malware targets recovery mechanisms, overwrites drives, and systematically deletes files.

securityweek.com
12
Mirai Botnet Targets Flaw in Discontinued D-Link Routers securityweek.com/mirai-botne…

Mirai Botnet Targets Flaw in Discontinued D-Link Routers

The exploitation of the command injection vulnerability started one year after public disclosure and PoC exploit code publication.

securityweek.com
8
Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data securityweek.com/are-sboms-f…

Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data

Researcher says the missing piece is a governance-driven intelligence layer that turns SBOM and VEX data into explainable security decisions.

securityweek.com
Claude Mythos Finds 271 Firefox Vulnerabilities securityweek.com/claude-myth…

Claude Mythos Finds 271 Firefox Vulnerabilities

All the flaws could have also been found by an elite human researcher, according to Mozilla.

securityweek.com
22
Load more