Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
cR0w :cascadia: (cr0w@infosec.exchange)'s status on Thursday, 09-Jan-2025 05:38:53 JST cR0w :cascadia:

Trying to get vuln details from a vendor despite it being labeled as exploited in the wild
In conversation about 4 months ago from infosec.exchange permalink
Attachments
1. A crow grabbing a person's finger with its beak, trying to get whatever is inside, and the person pulls their hand away, dropping the crow from it. Edit: Looking at it again, I believe it's a raven, not a crow. Either way, it's a black corvid.
- Embed this notice
  screaminggoat (screaminggoat@infosec.exchange)'s status on Thursday, 09-Jan-2025 05:38:52 JST screaminggoat
  in reply to
  
  @cR0w we could be talking about a different eitw. Fortinet tomorrow kthx
  
  In conversation about 4 months ago permalink
- Embed this notice
  cR0w :cascadia: (cr0w@infosec.exchange)'s status on Thursday, 09-Jan-2025 05:38:52 JST cR0w :cascadia:
  in reply to
  - screaminggoat
  @screaminggoat Is this a random guess or...
  
  In conversation about 4 months ago permalink
- Embed this notice
  screaminggoat (screaminggoat@infosec.exchange)'s status on Thursday, 09-Jan-2025 05:38:52 JST screaminggoat
  in reply to
  
  @cR0w all else fails I could just point at a random toot https://cyberplace.social/@GossiTheDog/113687025051706838
  In conversation about 4 months ago permalink
  Attachments
  1. No result found on File_thumbnail lookup.
    
    Kevin Beaumont (@GossiTheDog@cyberplace.social)
    
    from Kevin Beaumont
    
    There’s rumours flying around social media that Fortinet have another actively exploited zero day in FortiOS, which hasn’t been assigned a CVE again. Same cycle - you might want to upgrade to latest release ASAP. https://cyberplace.social/@David_Wong/113667058926011031
- Embed this notice
  Kevin Beaumont (gossithedog@cyberplace.social)'s status on Thursday, 09-Jan-2025 05:38:52 JST Kevin Beaumont
  in reply to
  - screaminggoat
  @screaminggoat @cR0w the Fortinet one will be this URL, if they ever bother to post it https://www.fortiguard.com/psirt/FG-IR-24-266
  In conversation about 4 months ago permalink
  Attachments
  1. Untitled attachment
- Embed this notice
  screaminggoat (screaminggoat@infosec.exchange)'s status on Thursday, 09-Jan-2025 05:38:53 JST screaminggoat
  in reply to
  
  @cR0w CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
  It's pretty self explanatory ¯\_(ツ)_/¯
  
  In conversation about 4 months ago permalink
- Embed this notice
  cR0w :cascadia: (cr0w@infosec.exchange)'s status on Thursday, 09-Jan-2025 05:38:53 JST cR0w :cascadia:
  in reply to
  - screaminggoat
  @screaminggoat Oh yeah, I already have that one. I saw another post about this issue and then happened across this gif for a different chat so I threw it up here because it felt relatable. Thanks though.
  
  In conversation about 4 months ago permalink

Public

Conversation

Notices

Feeds