Cobra Cyber Security (@CobraCyberSec) header
Cobra Cyber Security (@CobraCyberSec) profile picture

Cobra Cyber Security

@CobraCyberSec

Cyber Security and Threat Intelligence Share.

 127.0.0.1-127.255.255.255
Joined March 2014
  • Tweets6.6K
  • Following4K
  • Followers790
32Media
Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)Photo by Cobra Cyber Security (@CobraCyberSec)
Cobra Cyber Security retweeted
Philadelphia Eagles (@Eagles) profile picture
Philadelphia Eagles
@Eagles3 Jan 2025
RT for a chance to win this signed football by @brandongraham55! Every RT is worth 2️⃣ votes for BG today❗️ #WPMOYChallenge  Rules: bit.ly/4gpsDBC
Image from Philadelphia Eagles (@Eagles)
73
4,396
29
2,176
169,815
Dole production plants crippled by ransomware, stores run short • The Register theregister.com/2023/02/23/d…
Dole plants crippled by ransomware attack, stores run short

Dole plants crippled by ransomware attack, stores run short

Yes, we have no bananas, and things aren't looking peachy on the salad front

theregister.com
1
91
FBI says it has 'contained' cyber incident on bureau's computer network | CNN Politics cnn.com/2023/02/17/politics/…
Exclusive: FBI says it has ‘contained’ cyber incident on bureau’s computer network | CNN Politics

Exclusive: FBI says it has ‘contained’ cyber incident on bureau’s computer network | CNN Politics

The FBI has been investigating and working to contain a malicious cyber incident on part of its computer network in recent days, according to people briefed on the matter.

cnn.com
1
72
GoDaddy: Hackers stole source code, installed malware in multi-year breach bleepingcomputer.com/news/se…
62
Oakland Issues State of Emergency After Ransomware Attack heimdalsecurity.com/blog/oak…

Cybersecurity News - Heimdal Security

The latest cybersecurity news about threat actors, industry developments, technology news relevant to security, cyberattacks, data breaches, and so on.

heimdalsecurity.com
2
110
CISA releases recovery script for ESXiArgs ransomware victims bleepingcomputer.com/news/se…

CISA releases recovery script for ESXiArgs ransomware victims

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a script to recover VMware ESXi servers encrypted by the recent widespread ESXiArgs ransomware attacks.

bleepingcomputer.com
30
Cobra Cyber Security retweeted
Kostas (@Kostastsale) profile picture
Kostas
@Kostastsale6 Feb 2023
There are so many opportunities to detect and evict the threat actor in almost all stages of the intrusion from our latest report. Execution might happen and it might not be detected for a long time as we saw here with the custom PowerShell implant. Detection in depth is key…
Image from Kostas (@Kostastsale)
The DFIR Report (@TheDFIRReport) profile pictureThe DFIR Report
@TheDFIRReport6 Feb 2023
Collect, Exfiltrate, Sleep, Repeat ➡️Initial Access: Job App VBA Maldoc ➡️Discovery: PS Cmdlets, net, tzutil, etc. ➡️Persistence: Scheduled Tasks ➡️Collection: AutoHotkey Keylogger, Compress-Archive, makecab.exe ➡️C2: Custom PowerShell Framework thedfirreport.com/2023/02/06… 1/X
Collect, Exfiltrate, Sleep, Repeat - The DFIR Report

Collect, Exfiltrate, Sleep, Repeat - The DFIR Report

In this intrusion from August 2022, we observed a compromise that was initiated with a Word document containing a malicious VBA macro, which established persistence and communication to a command and...

thedfirreport.com
3
25
2
123
38,826
GoTo revealed that threat actors stole customers' backups and encryption key for some of themSecurity Affairs securityaffairs.com/141278/d…
GoTo revealed that threat actors stole customers' backups and encryption key for some of them

GoTo revealed that threat actors stole customers' backups and encryption key for some of them

GoTo is notifying customers that its development environment was breached in November 2022, their' backups have been stolen.

securityaffairs.com
20
Ransomware Gang Steals Data From KFC, Taco Bell, and Pizza Hut Brand Owner bleepingcomputer.com/news/se… --via Cyware Social
Ransomware gang steals data from KFC, Taco Bell, and Pizza Hut brand owner

Ransomware gang steals data from KFC, Taco Bell, and Pizza Hut brand owner

Yum! Brands, the fast food brand operator of KFC, Pizza Hut, Taco Bell, and The Habit Burger Grill fast-food restaurant chains, has been targeted by a ransomware attack that forced the closure of 300...

bleepingcomputer.com
25
Ugh! Norton LifeLock password manager accounts accessed by hackers (via @CSecurityAlerts #Cybersecurity News) go.newsfusion.com/security/i…
23
Scattered Spider hackers use old Intel driver to bypass security bleepingcomputer.com/news/se…
Scattered Spider hackers use old Intel driver to bypass security

Scattered Spider hackers use old Intel driver to bypass security

A financially motivated threat actor tracked as Scattered Spider was observed attempting to deploy Intel Ethernet diagnostics drivers in a BYOVD (Bring Your Own Vulnerable Driver) attack to evade...

bleepingcomputer.com
19
Ransomware gang apologizes, gives SickKids hospital free decryptor bleepingcomputer.com/news/se…
Ransomware gang apologizes, gives SickKids hospital free decryptor

Ransomware gang apologizes, gives SickKids hospital free decryptor

The LockBit ransomware gang has released a free decryptor for the Hospital for Sick Children (SickKids), saying one of its members violated rules by attacking the healthcare organization.

bleepingcomputer.com
47
LastPass admits attackers copied password vaults • The Register theregister.com/2022/12/23/l…
LastPass admits attackers copied password vaults

LastPass admits attackers copied password vaults

Thankfully a well encrypted copy that could take an eon to crack, unless users practiced bad password hygiene

theregister.com
41
McGraw Hill's S3 buckets exposed 100,000 students' grades and personal info • The Register theregister.com/2022/12/20/m…
McGraw Hill's S3 buckets exposed 100,000 students' grades

McGraw Hill's S3 buckets exposed 100,000 students' grades

Educator gets an F for security

theregister.com
33
Zoom Whiteboard patches XSS bug | The Daily Swig portswigger.net/daily-swig/z…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
31
OWASSRF: CrowdStrike Identifies New Method for Bypassing ProxyNotShell Mitigations crowdstrike.com/blog/owassrf…

OWASSRF: CrowdStrike Identifies New Exploit Method for Exchange Bypassing ProxyNotShell Mitigations

Learn how CrowdStrike recently discovered a new exploit method using CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution (RCE) through Outlook Web Access.

crowdstrike.com
30
FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape thehackernews.com/2022/12/fi… via @TheHackersNews

FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape

An analysis of the FIN7 cybercrime syndicate has revealed its organizational hierarchy and role as a partner in various ransomware attacks.

thehackernews.com
33
Top 14 ransomware targets in 2023 and beyond bit.ly/3EqzDLJ via @SearchSecurity
19
Lastpass: Hackers stole customer vault data in cloud storage breach bleepingcomputer.com/news/se…
Lastpass: Hackers stole customer vault data in cloud storage breach

Lastpass: Hackers stole customer vault data in cloud storage breach

LastPass revealed today that attackers stole customer vault data after breaching its cloud storage earlier this year using information stolen during an August 2022 incident.

bleepingcomputer.com
32
Ghost CMS vulnerable to critical authentication bypass flaw bleepingcomputer.com/news/se…

Ghost CMS vulnerable to critical authentication bypass flaw

A critical vulnerability in the Ghost CMS newsletter subscription system could allow external users to create newsletters or modify existing ones so that they contain malicious JavaScript.

bleepingcomputer.com
23
Load more