Stoyko Stoykov on nostr

🚨 Crypto24 uses custom RealBlindingEDR + Google Drive exfil before encrypting. EDR blind, SMB moves, VSS wipe. Defenders: tamper‑protection, app control, cloud‑egress watch. #CyberSec

Source: https://link.bitbase.bg/qEeM3X

Stoyko Stoykov

@Stoyko Stoykov 1755111670

⚡Patch Tuesday alert! Kerberos EoP flaw hits AD. Patch DCs first, block external AD ports, lock down fast. #PatchTuesday #CyberSec #Kerberos

Source: https://link.bitbase.bg/NEUfns

Stoyko Stoykov

@Stoyko Stoykov 1754998794

🚨 30k+ Exchange servers in hybrid mode still unpatched! If using Exchange 2016/2019, patch & rotate creds ASAP, switch to dedicated hybrid app. Risk tenant‑level. #CyberSec

Source: https://link.bitbase.bg/avKFgm

Stoyko Stoykov

@Stoyko Stoykov 1754901087

🚨 150+ malicious Firefox wallet extensions stole $1M+ crypto! GreedyBear weaponized Extension Hollowing: clean start → credential theft. Use hardware wallets. 🛡️ #CyberSec #Crypto

Source: https://link.bitbase.bg/qZHbSb

Stoyko Stoykov

@Stoyko Stoykov 1754815584

🚨 ShinyHunters leaked 39k Google Ads leads from hacked Salesforce. Fix: MFA, rotate API tokens, limit exports, monitor logins. #CyberSec #ZeroTrust 🚨

Source: https://link.bitbase.bg/M5oiiR

Stoyko Stoykov

@Stoyko Stoykov 1754813124

🚨 ShinyHunters hit Salesforce, spilling GoogleAds lead info (names, emails, phones). Token hygiene weak. Fix: MFA, rotate tokens, lock egress. Lead‑list phishing! #ZeroTrust #CyberSec

Source: https://link.bitbase.bg/M5oiiR

Stoyko Stoykov

@Stoyko Stoykov 1754727428

🚨 WinRAR phishing attack drops RomCom RAT via crafted ZIPs. Patch ASAP, scan archives, whitelist WinRAR startup folder. #ZeroDay #Phishing #CyberSecurity

Source: https://link.bitbase.bg/S96Bfy

Stoyko Stoykov

@Stoyko Stoykov 1754648393

⚠️ Hybrid Exchange still a soft‑spot. Attackers can silently elevate to tenant‑admin, bypass MFA & take over M365. Patch the update by Wed Aug 11, tighten OIDC, & monitor token fires. #CyberSec #ZeroTrust 🚨

Source: https://link.bitbase.bg/8OTPoq

note1q838u...

Stoyko Stoykov @Stoyko Stoykov 1754594140

It is a problem with Phoenix, soI had to switch to Wallet of Satoshi (which is not my favorite choice, but will have to wait until phoenix release a fix in the coming versions I hope)

note1wu4c6...

Stoyko Stoykov @Stoyko Stoykov 1754592681

Thank you for your information. I fixed the problem

1

Stoyko Stoykov

@Stoyko Stoykov 1754556424

SonicWall Gen7 zero-day reportedly bypasses MFA; 20+ orgs hit. Today: disable WAN mgmt, geofence VPN, audit admins/logs, rotate secrets, prep to patch fast. Assume probed. #infosec 🔥🛡️

Source: https://link.bitbase.bg/m1Hslw

2

Stoyko Stoykov

@Stoyko Stoykov 1754514376

CISA: SharePoint under active exploit. Patch now, lock uploads, watch w3wp→cmd/ps, and remove internet exposure. Assume probing today. Blue teams, move. 🛡️⚡️ #infosec #BlueTeam #SharePoint

Source: https://link.bitbase.bg/AAt3Q3

Recent Notes