Lawrence Abrams

@GossiTheDog@cyberplace.social Thanks...I think I got hung up the word "register," as there are Registered and Unregistered devices.

Looks like default variable allows FortiGate devices to register as an "Unregistered" (unauthenticated) device, but they can still be used to exploit the API auth bypass once connected.

I spent too much time reading FortiManager docs last night ... 🤯

Halliburton confirms data was stolen in the recent cyberattack, which was a RansomHub ransomware attack.
https://www.bleepingcomputer.com/news/security/halliburton-confirms-data-stolen-in-recent-cyberattack/

RansomHub behind the cyberattack on Halliburton.

The ransomware operation has been very busy lately after the influx of BlackCat affiliates.
https://www.bleepingcomputer.com/news/security/halliburton-cyberattack-linked-to-ransomhub-ransomware-gang/

@screaminggoat @BleepingComputer@infosec.exchange @serghei@mastodon.social Yup, we know. Thanks. Gotta love the end of day release.

@screaminggoat @BleepingComputer@infosec.exchange @serghei@mastodon.social Unpatched and known. Does not have to be exploited.

Anyone have a contact at CERT-MX?

TeamViewer disclosed their network was breached in its Trust center.

https://www.teamviewer.com/en/resources/trust-center/statement/

No one new because they added a noindex tag to their HTML.
@jtig@infosec.exchange

Rumors that Baphomet, BreachForum's admin, was arrested as part of today's seizure.

This is backed up by the FBI using his account to post the site's Telegram channel.