Security4all

@security4all

Cyber security specialist, based in APAC. My tweets are my own.

Airports

Joined April 2008

35KPosts 12KFollowers 1KFollowing

You might like

@SecurityBSides

@_CoreImpact

@helpnetsecurity

@RonGula

@brucon

@SecBarbie

@secureideas

@ethicalhack3r

@OpenMalware

@DrInfoSec

@WebSecurityNews

@indi303

@joswr1ght

@securityshell

@edskoudis

Security4all reposted

JPCERT/CC

@jpcert_en

Sep 30

2nd round of #JSAC2026 Call for Presentations and Workshops is now open until 17 Nov 2025. We look forward to your submissions. ^YU jsac.jpcert.or.jp/en/cfp.html

jpcert_en's tweet card. JSAC is an annual event for security analysts held by JPCERT/CC.

JSAC2026 – Tokyo, January 21-23, 2026

Source: jsac.jpcert.or.jp

Security4all reposted

After a long hiatus into the world of ITWs, I present my research on Mangyongdae and its importance to the #DPRK Cyber-Warfare machine. Included are new ITW indicators, alongside analysis of recent developments within the district. We also found Unit 91. cyberbladesecurity.com/the-pyongyang-…

Security4all reposted

Andy Piazza

@klrgrz

Jul 31

We’re excited to share how we do attribution within @Unit42_Intel and I’m extremely proud of the team for putting in the work behind the scenes to make this happen. unit42.paloaltonetworks.com/unit-42-attrib…

klrgrz's tweet card. Peel back the layers on Unit 42's Attribution Framework. We offer a rare inside view into the system used to ultimately assign attribution to threat groups.

Introducing Unit 42’s Attribution Framework

Source: unit42.paloaltonetworks.com

Security4all reposted

Kawaii-Jong-UwUn

@KawaiiJongUwUn

Jul 24

Hopefully yall enjoy small charts of #NorthKorean IT worker accounts. Today, it's a post-minions assessment.

Security4all reposted

Cookie Connoisseur

@browsercookies

Jul 23

🇰🇵Kim Pyong Hyok🇰🇵 Works blockchain. Has Japanese clients. Uses Freelancer[.]com. Has the scariest email ever. Tags with Hermes. Emai: seatiger9847 @ gmail Hermes000000 Tanaka Brandon Maxim Isayev

browsercookies's tweet image. 🇰🇵Kim Pyong Hyok🇰🇵

Works blockchain. Has Japanese clients. Uses Freelancer[.]com. Has the scariest email ever. Tags with Hermes.

Emai: seatiger9847 @ gmail

Hermes000000
Tanaka Brandon
Maxim Isayev

Security4all reposted

Microsoft Threat Intelligence

@MsftSecIntel

Jul 22

Microsoft is sharing details from ongoing investigations of threat actors exploiting vulnerabilities targeting on-premises SharePoint servers. Linen Typhoon, Violet Typhoon, and Storm-2603 have been observed exploiting the vulnerabilities: msft.it/6015sE1p5

Security4all reposted

Chi-en (Ashley) Shen (@ashl3y-shen.bsky.social)

@ashl3y_shen

Jul 15

Excited to see another threat intel focused conference taking place in Europe, and it’s organized by threat analyst in the field! The CFP is opened until Sept 1st. Looking forward to see your amazing research! #What_is_SOS #StateOfStatecraft

State of Statecraft Conference

@what_is_sos

Jul 8

State of Statecraft (SOS) is a new security and intelligence conference purposed to bring together observers of espionage, sabotage, influence, and other unique forms of covert statecraft to share their work with a community hyper-focused on tackling state-sponsored ops.

what_is_sos's tweet image. State of Statecraft (SOS) is a new security and intelligence conference purposed to bring together observers of espionage, sabotage, influence, and other unique forms of covert statecraft to share their work with a community hyper-focused on tackling state-sponsored ops.

Security4all reposted

Magpie

@malwaremagpie

Jul 14

📣 Researchers, analysts, and strategists — The #StateOfStatecraft CFP is OPEN! Share your work on espionage, intelligence, and global affairs. ⏳ Submit before the deadline: stateofstatecraft.com/cfp #InternationalRelations #Strategy #OSINT

Security4all reposted

State of Statecraft Conference

@what_is_sos

Jul 8

Security4all reposted

LAB52

@LAB52io

Jul 8

Check out our new book, now available: Cyber GRU. Russian military intelligence in cyberspace lab52.io/blog/new-book-… #Russia #GRU

LAB52io's tweet image. Check out our new book, now available: Cyber GRU. Russian military intelligence in cyberspace lab52.io/blog/new-book-… #Russia #GRU

Security4all reposted

Thomas Roccia 🤘

@fr0gger_

Jun 13

⚠️ VirusTotal flagged 1,408 potentially malicious MCP servers! They ran an audit using Gemini 2.5 Flash + Code Insight: - They collected 17,845 projects via GitHub API - Scored them based on real implementation signals - Analyzed them with LLMs to detect vulnerable or malicious…

fr0gger_'s tweet image. ⚠️ VirusTotal flagged 1,408 potentially malicious MCP servers! They ran an audit using Gemini 2.5 Flash + Code Insight:

- They collected 17,845 projects via GitHub API
- Scored them based on real implementation signals
- Analyzed them with LLMs to detect vulnerable or malicious…

Security4all reposted

Cybersecurity and Infrastructure Security Agency

@CISAgov

Jun 10

Don't let your data fall into the wrong hands. Nation-Sponsored cybersecurity activity presents a real threat to organizations of all sizes. Safeguard your networks: go.dhs.gov/wzx

CISAgov's tweet image. Don't let your data fall into the wrong hands. Nation-Sponsored cybersecurity activity presents a real threat to organizations of all sizes. Safeguard your networks: go.dhs.gov/wzx

Security4all reposted

FalconFeeds.io

@FalconFeedsio

May 29

🚨 GangExposed just dropped another bomb on the ransomware world. They’ve released profile photos of 15 members of the notorious Conti ransomware group, including their lead negotiator Arkady Valentinovich Bondarenko. This follows recent leaks that exposed: •“gg” — the central…

FalconFeeds.io

@FalconFeedsio

May 26

We’ve analyzed thousands of leaked internal chats from Conti, Trickbot, and Black Basta—three of the most destructive ransomware groups to date. Key insights from our investigation: •428 hospitals targeted by Conti during the pandemic •Real-world identities of key leaders like…

Security4all reposted

Nextron Research ⚡️

@nextronresearch

May 23

=^._.^= New blog post: Katz Stealer - a credential and data stealer with everything a modern infostealer needs: process hollowing, UAC bypass, headless browser injection, and a mild dislike for CIS locales We broke it down from gzip to clipboard exfil, mapped the infection…

nextronresearch's tweet image. =^._.^=

New blog post: Katz Stealer - a credential and data stealer with everything a modern infostealer needs: process hollowing, UAC bypass, headless browser injection, and a mild dislike for CIS locales

We broke it down from gzip to clipboard exfil, mapped the infection…

Security4all reposted

Wiz

@wiz_io

Jan 29

BREAKING: Internal #DeepSeek database publicly exposed 🚨 Wiz Research has discovered "DeepLeak" - a publicly accessible ClickHouse database belonging to DeepSeek, exposing highly sensitive information, including secret keys, plain-text chat messages, backend details, and logs.

wiz_io's tweet image. BREAKING: Internal #DeepSeek database publicly exposed 🚨

Wiz Research has discovered "DeepLeak" - a publicly accessible ClickHouse database belonging to DeepSeek, exposing highly sensitive information, including secret keys, plain-text chat messages, backend details, and logs.

Security4all reposted

Florian Roth ⚡️

@cyb3rops

Jan 23

I’m not sure people realize what they actually need to do. Once a 0day goes public and at least one threat actor has used it to exploit thousands of devices - and then a list of affected systems leaks - PATCHING IS NOT ENOUGH. If you take security seriously, you must run a…

Security4all reposted

ThreatBook

@ThreatBookLabs

Jan 9

🚨New blog：APT32 used GitHub to distribute a Cobalt Strike exploit plugin containing a Trojan, targeting cybersecurity professionals. ThreatBook identified this attack event in November 2024 and located the attacker's GitHub account.threatbook.io/blog/id/1100 #APT32 #OceanLotus

ThreatBookLabs's tweet image. 🚨New blog：APT32 used GitHub to distribute a Cobalt Strike exploit plugin containing a Trojan, targeting cybersecurity professionals. ThreatBook identified this attack event in November 2024 and located the attacker's GitHub account.threatbook.io/blog/id/1100
#APT32 #OceanLotus

Security4all reposted

Will

@BushidoToken

Dec 22

Very interesting screenshot in the latest FBI arrest of the main LockBit developer “Rostislav Panev” Source code for LockBit builders for #Proxmox and #Nutanix, which have not been observed in the wild AFAIK 🧐 justice.gov/opa/media/1381…