Damus
Kevin Beaumont profile picture
Kevin Beaumont
@Kevin Beaumont

Cybersecurity weather person and award winning shitposter. Shitposting is an anagram of Top Insights. You may be surprised to know I am not representing my employer here and these are not their opinions.

I have Direct Messages disabled - you can send them, but I will never receive them.

Relays (1)
  • wss://relay.ditto.pub – read & write

Recent Notes

Kevin Beaumont profile picture
You may be seeing a load of scary sounding headlines about cyberattacks on water facilities in the US, but know they are because - in everyday terms - nobody closed the front door to the house, let alone locked it.

It doesn’t take Iran to do those attacks. If you’re bored and you have google, you can too.
Kevin Beaumont · 19h
I’m Adform Famous on LinkedIn https://cyberplace.social/system/media_attachments/files/117/021/800/606/501/747/original/e63acfe9142479fc.jpeg
Kevin Beaumont · 19h
Adform customers publishing advisories to their customers.. will be interesting to see which companies don’t bother to tell anybody. https://cyberplace.social/system/media_attachments/files/117/021/780/845/328/147/original/7c2b34b5e64dce50.jpeg
Kevin Beaumont · 1d
Veikkaus, a Finnish government-owned betting agency which holds a monopoly in the country, has informed customers their cryptocurrency may have been stolen as they use Adform. https://www.voice.fi/ilmiot/veikkauksen-verkkosivuilla-ollut-haittakoodia-lottokansan-tulee-tehda-nyt-nain
Kevin Beaumont · 1d
The IP is getting listed too https://cyberplace.social/system/media_attachments/files/117/017/587/538/483/976/original/911d92730016f064.png https://cyberplace.social/system/media_attachments/files/117/017/589/860/022/888/original/4a6652affcac9562.png
Kevin Beaumont · 1d
Finding out which vendors read my tweets again! Somebody fix Cassandra at Microsoft. https://cyberplace.social/system/media_attachments/files/117/017/565/848/306/879/original/883aca284563b02b.png
Kevin Beaumont · 1d
Admore have finally admitted they were hacked: https://site.adform.com/resources/newsroom/security-incident-company-update/
Kevin Beaumont profile picture
To clarify a few things:

"Based on our investigation to date, we have found no evidence that the malicious code transmitted users’ IP addresses or information about the websites they visited to an external party. Technical analysis indicates that such transmission may have been possible, and this aspect remains under investigation." <- It did. The code for it is in my blog.
1
Kevin Beaumont · 1d
"Adform has informed affected clients through dedicated communications and provided them with relevant information and recommended actions." <- this only happened after I went public with it.
Kevin Beaumont · 1d
To clarify a few things: "Based on our investigation to date, we have found no evidence that the malicious code transmitted users’ IP addresses or information about the websites they visited to an external party. Technical analysis indicates that such transmission may have been possible, and this...