Attack Detection @AttackDetection
Attack Detection Team at @ptsecurity ptsecurity.com Joined March 2016-
Tweets192
-
Followers2K
-
Following19
-
Likes32
🚨We have added a #Suricata signature for the recent #SharePoint RCE (#CVE-2025-53770, CVE-2025-49706) exploitation attributes to our open ruleset. It detects signs of successful machine key leakage. 🔗Check it out: rules.ptsecurity.com/view/ptopen-al… #cybersecurity #ids
🚨We have added new #suricata signatures for the recent #citrixBleed2 (CVE-2025-5777) vulnerability in our open ruleset. Not only for an attempt, but for detection of a successful exploitation as well Check it out: 👉rules.ptsecurity.com/view/ptopen-al… #cybersecurity #ids #citrix
🚨 Malware Suricata Rules Update Available on rules.ptsecurity.com! 🚨 🛑 Remcos, XWorm RAT 🛑 Stealc v2 Stealer 🛑 Filsh Backdoor 🛑 Andromeda Botnet 🛑 PhantomEnigma Banker (see TI Report global.ptsecurity.com/analytics/pt-e…) #Suricata
🚨 We've added a new signature to our Suricata ruleset for the critical vulnerability CVE-2025-49113 in Roundcube, previously reproduced by @ptswarm. This RCE vulnerability potentially exposes millions of hosts worldwide. Update your rules now: rules.ptsecurity.com #Suricata
🐍 Suricata rules update ! We’ve added detections for newly disclosed RCE vulns: - Apache Tomcat (CVE-2025-24813) - Ingress NGINX (CVE-2025-1974) 🆕 Detects for tunnel services (tunnelto, Telebit, Pinggy), Rclone and AdaptixC2 activity. See full list → rules.ptsecurity.com
We're dropping a massive malware signature update 🎭 Highlights: RustyNet loader, WorldWind stealer, Slam RAT, nasty XWorm, SpyNote, Hydra, Zanubis ...and plenty more! 🔗 rules.ptsecurity.com
Guess who's back? 🎉 Our Suricata ruleset has found a new home at rules.ptsecurity.com! Enable source ptrules/open in Suricata-Update to stay ahead of threats.
Spring Core RCE 0day aka Spring4Shell came out recently. Detect exploitation attempts with our #suricata rule: github.com/ptresearch/Att…
One can get #Zabbix panel admin rights in one request with CVE-2022-23131. But you can detect it easily with our #suricata rule. We worked on possible rule bypasses and false positive rate github.com/ptresearch/Att…
Good: Use our #suricata rules to detect malicious attempts of the new CVE-2021-41773 #Apache HTTP Server dir traversal. Better: Patch your apache The best: Do both! github.com/ptresearch/Att…
Good: Use our #suricata rules to detect malicious attempts of the new CVE-2021-41773 #Apache HTTP Server dir traversal. Better: Patch your apache The best: Do both! github.com/ptresearch/Att…
How to get a system shell on any windows version? Use #SystemNightmare exploit. How to detect SystemNightmare usage in a network? Use our rules! Oh, here they are: github.com/ptresearch/Att…
We released rules for #suricata in order to detect exploitation of a new vuln #PetitPotam. Also detection of a successful attempt inside: github.com/ptresearch/Att…
We released rules for #suricata in order to detect exploitation of a new vuln #PetitPotam. Also detection of a successful attempt inside: github.com/ptresearch/Att…
Use our #suricata rules to detect both #PrintNightmare (CVE-2021-1675) exploits. Adding printer driver across the network is rare but still possible case, so there might be a few of false alerts. Tell us if you get some. github.com/ptresearch/Att…
xfreerdp software in your network? It might be some malicious activity! Detect it with our #suricata rule, works for security level rdp only. Good for some other open source clients as well. github.com/ptresearch/Att…
Open letter to the research community ptsecurity.com/ww-en/about/ne…
One another Oracle #WebLogic RCE vuln. It scores CVSS 9.8 and needs no authentication. We published #suricata rule to detect CVE-2020-14882 in our github: github.com/ptresearch/Att…
One another Oracle #WebLogic RCE vuln. It scores CVSS 9.8 and needs no authentication. We published #suricata rule to detect CVE-2020-14882 in our github: github.com/ptresearch/Att…
Samir @SBousseaden
25K Followers 1K Following Detection Engineering | Elastic Security Mastodon: @[email protected]
SwiftOnSecurity @SwiftOnSecurity
405K Followers 9K Following computer security person. former helpdesk.
James @James_inthe_box
22K Followers 464 Following
ET Labs @ET_Labs
6K Followers 219 Following ET Labs is the research team of Emerging Threats - Bionic threat intelligence specialists from Fantasia.
Suricata IDS/IPS @Suricata_IDS
13K Followers 43 Following Suricata IDS/IPS/NSM engine developed by the @OISFoundation
Matthew @embee_research
14K Followers 2K Following Security Researcher, Creating and Sharing Educational Content.
𝙽𝙴𝚃𝚁𝙴�... @netresec
9K Followers 815 Following Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #CapLoader, #PacketCache, #PolarProxy and #RawCap.
TomU | I'm still here... @c_APT_ure
8K Followers 6K Following #InfoSec professional, husband & father of two (in random order). #BlueTeam #DFIR #APT #CTI #RedTeaming #BSidesZH (RT/Likes ≠ endorsement) 👀➡️#MalwareChallenge
会飞的鱼 @8YxRK6RFZd85810
0 Followers 11 Following
me here @mehere301
3 Followers 66 Following
Pogo @moviephon3
5 Followers 122 Following
Swarup Pattnaik @swaruppattnaik
56 Followers 1K Following cyber defense;frontline ir ,ex mandiant. Building a Tool for optimizing security analyst experience
Abolfazl Hayati @HayatiAbolfazl
6 Followers 377 Following و تو چه میدانی، شاید تقدیرت بهتر از آرزویت باشد…
CrazyHellPasswordMana... @CHPMApp
31 Followers 1K Following https://t.co/7jLE65KSmf $CHPMApp.AI $CHPMApp.ML $CHPMApp.pricings [email protected]
seeking wisdom @CWil1293049
6 Followers 84 Following
ᴀʙᴅᴇʟʀʜᴍ�... @aufzayed
2K Followers 381 Following Offensive Security Engineer | OSCP+ | eWPTX | eMAPT
k.Kr4ftman @aliass_kr4ftman
47 Followers 1K Following
sxxxxxxxxxxv @sxxxxxxxxxxv
7 Followers 557 Following
Alexander @fadead63
0 Followers 17 Following
I//uS!0nS @c03rci0n
177 Followers 7K Following
LenguaDePlata @pepitogrillad0
125 Followers 888 Following
Bryan Mompremier @muster_bryan
12 Followers 99 Following
an_time @antime17
0 Followers 94 Following
Sotac @Sotac347196
0 Followers 2 Following
Moshe Farrid @WooorstOne
145 Followers 2K Following
Tamtam @Tamtam95614487
0 Followers 2 Following
Vlad Baader @BaaderVlad
3 Followers 115 Following
Mohamad Siahposh @Mohamadsp5
134 Followers 196 Following Cyber Security | Therat Hunting | SOC | Security Researcher
Berk Albayrak @brkalbyrk7
1K Followers 2K Following Cyber Threat Intelligence Analyst @PRODAFT | TI | OSINT | Cybercrime | TA2AQX 📡
Vpup @Vpup6
2 Followers 126 Following
许忱 @hong_xu69853
3 Followers 406 Following
TRCV/7/ @andreitrcv
47 Followers 3K Following
nanjin002 @nanjin00272827
21 Followers 4K Following
Bwing @Bwing4for
4 Followers 788 Following
Данила @Danila20764446
0 Followers 38 Following
Prince @iamprincehyd
16 Followers 130 Following
Julio Lira @julioliraup
608 Followers 874 Following Cd a imagem cyberpunk aê? C conhece a UP já? Vulgo Caranguejo - Goiamum 🦀
Security Ticks @SecTicks
984 Followers 6K Following Cybersecurity and other IT News aggregator Visit our website to get the latest industry headlines
helloworld/ @hellodebug8
255 Followers 6K Following
Gilvanio Moura @gilvaniomoura
72 Followers 433 Following
Cyber Noob @ahciannn
0 Followers 167 Following
jun00r @jun00r82917
0 Followers 19 Following
Illusion31 @Keshavan3107
15 Followers 3K Following Security Researcher | Bug Hunter | VAPT | Pentest | Red Teaming | Liverpool FC | CR7 |
qhitx @qhitx18536
11 Followers 268 Following
Dmitrii Burdin @dvburdin
0 Followers 29 Following
Defender Ciprian Davi... @CiprianDefender
41 Followers 3K Following
Intel_overview @IntelOverv35804
6 Followers 75 Following
ET Labs @ET_Labs
6K Followers 219 Following ET Labs is the research team of Emerging Threats - Bionic threat intelligence specialists from Fantasia.
Suricata IDS/IPS @Suricata_IDS
13K Followers 43 Following Suricata IDS/IPS/NSM engine developed by the @OISFoundation
𝙽𝙴𝚃𝚁𝙴�... @netresec
9K Followers 815 Following Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #CapLoader, #PacketCache, #PolarProxy and #RawCap.
PT ESC @TI_ESC
849 Followers 13 Following Follow us for the latest malware findings and research reports from PT ESC, the Positive Technologies (@ptsecurity) Threat Intelligence Team.
immortalp0ny @immortalp0ny
876 Followers 274 Following Passionate in puzzle solving All tweets are my own https://t.co/WvGoeDGB8B
Anton Kutepov @aw350m33
38 Followers 109 Following Security Researcher @attackdetection | Threat Hunting | Network Forensics | @oscd_initiative
OSCD @oscd_initiative
1K Followers 20 Following Open international cybersecurity specialist initiative. We collaborate on common problems and share knowledge. Mirror in telegram: https://t.co/HQWeyzwPZB
ANY.RUN @anyrun_app
30K Followers 192 Following Empowering businesses with proactive security solutions: Interactive Sandbox, TI Lookup and Feeds. Sign up for free: https://t.co/8hIX0Qh5ME
ZenOpz @ZenOpz
399 Followers 2K Following ZenOpz is an MSSP dedicated to providing SMBs access to #infosec and #technology necessary to manage their data risks. Retweet/Follow is not an endorsement.
ProtectWise 401TRG @401TRG
709 Followers 150 Following Threat Research Group at @ProtectWise. Analyst to analyst content on malware, DFIR, threat intelligence and much more.
Eric Leblond @Regiteric
3K Followers 951 Following Co-founder and CTO at @StamusN, @Suricata_IDS developer, Netfilter coreteam emeritus member. Amateur photographer. @[email protected] on Mastodon
Xavier Mertens @xme@i... @xme
15K Followers 1K Following Freelance | Blogger | SANS ISC Handler | FOR610/FOR710 Instructor | BruCON co-organizer | BlueTeam | DFIR | MTB | PGP: 0xEB583912514B3E1F | Tweets are mine!
William Metcalf @node5
1K Followers 392 Following I have been recruited by the Star League to defend the Frontier against Xur and the Ko-dan Armada
Alexey Lednev @zipa_original
16 Followers 84 FollowingTrends for United States
You might like
