https://january1073.xyz/rss.xml Updates from january1073 en-us Mon, 02 Nov 2026 06:00:00 GMT https://january1073.gitlab.io/sitrep.html https://january1073.gitlab.io/sitrep.html Threat level HIGH, trend stable. Confirmed PHP2Shell exploitation against PAN-OS management interfaces, exploited Ivanti Connect Secure, GitLab, Cisco ASA and VMware ESX flaws added to the KEV catalogue, and the FBI's attribution of the record Binance theft to North Korea's TraderTraitor. Mon, 02 Nov 2026 06:00:00 GMT https://january1073.xyz/sitrep/pdf/january1073_sitrep_2026-43.pdf https://january1073.gitlab.io/sitrep/pdf/january1073_sitrep_2026-43.pdf Threat level HIGH, trend stable. Emergency patches for the PHP2Shell flaws in the PHP runtime itself, exploited zero-days in Arista VeloCloud Orchestrator, Plex Media Server and the Nextcloud Collabora app, Microsoft's attribution of the ConnectWise supply-chain compromise, and a compromised LiteLLM release. Mon, 26 Oct 2026 19:00:00 GMT https://january1073.xyz/sitrep/pdf/january1073_sitrep_2026-42.pdf https://january1073.gitlab.io/sitrep/pdf/january1073_sitrep_2026-42.pdf Threat level HIGH, trend rising. Zero-day exploitation of Ivanti Connect Secure, BeyondTrust Remote Support, Cisco Secure Email Gateway and PAN-OS, a record Microsoft Patch Tuesday with an exploited Windows Shell flaw, and a ConnectWise supply-chain compromise reaching at least 173 Microsoft 365 tenants. Mon, 19 Oct 2026 23:30:00 GMT https://january1073.xyz/sitrep/pdf/january1073_sitrep_2026-41.pdf https://january1073.gitlab.io/sitrep/pdf/january1073_sitrep_2026-41.pdf Threat level HIGH, trend stable. Exploitation of a critical Atlassian Data Center flaw within hours of a public proof of concept, the FortiBleed firewall credential campaign with admin lockouts, continuing NetScaler and FortiMail exposure, and a joint advisory and takedown against China-linked Flax Typhoon. Mon, 12 Oct 2026 12:00:00 GMT https://january1073.xyz/sitrep/pdf/january1073_sitrep_2026-40.pdf https://january1073.gitlab.io/sitrep/pdf/january1073_sitrep_2026-40.pdf Threat level HIGH, trend rising. Three exploited Citrix NetScaler zero-days, now under mass exploitation, plus exploited FortiMail, Cisco SD-WAN and Zammad flaws, and continuing attacks on aviation, courts and healthcare. Mon, 05 Oct 2026 00:00:00 GMT https://january1073.medium.com/cheating-permitted-german-federal-court-of-justice-rules-on-action-replay-ii-b1e8e051107c https://january1073.medium.com/cheating-permitted-german-federal-court-of-justice-rules-on-action-replay-ii-b1e8e051107c In a landmark decision with significant implications for both the video game industry and copyright law, the German Federal Court of Justice (Bundesgerichtshof or BGH) has issued a ruling on the legality of “cheat software.” The case, known as “Action Replay II,” has established a key distinction between modifying a game’s underlying code and simply manipulating its in-game data... Fri, 01 Aug 2025 18:00:00 GMT https://january1073.medium.com/the-eu-cyber-resilience-act-raising-the-bar-for-digital-product-security-e7d643d0c897 https://january1073.medium.com/the-eu-cyber-resilience-act-raising-the-bar-for-digital-product-security-e7d643d0c897 The Cyber Resilience Act (CRA) entered into force on 10 December 2024, establishing mandatory cybersecurity requirements for all products with digital elements sold in the EU market. While the Act is now law, main obligations apply from 11 December 2027, with some requirements (like incident reporting) taking effect from 11 September 2026... Thu, 10 Jul 2025 00:00:00 GMT https://infosecwriteups.com/darkmailr-generate-realistic-context-aware-phishing-emails-air-gapped-d3cc88457dab https://infosecwriteups.com/darkmailr-generate-realistic-context-aware-phishing-emails-air-gapped-d3cc88457dab darkmailr is a self-hosted, offline phishing simulation tool that uses open-source LLMs (via Ollama) to generate realistic, context-aware phishing emails for red team exercises, security awareness training, and prompt injection testing... Sun, 06 Jul 2025 00:00:00 GMT https://january1073.medium.com/nis-2-wie-geht-es-jetzt-weiter-in-deutschland-57df71d74203 https://january1073.medium.com/nis-2-wie-geht-es-jetzt-weiter-in-deutschland-57df71d74203 Die Cybersicherheitslage in Deutschland ist angespannt, mit einem Höchststand an Cybercrime-Fällen in 2024 und astronomischen finanziellen Schäden, während viele Unternehmen unzureichend vorbereitet sind und die NIS-2-Richtlinie kaum kennen... Fri, 20 Jun 2025 00:00:00 GMT https://osintteam.blog/cleartext-protocols-101-how-to-connect-anonymously-to-ftp-telnet-and-rsync-2c1001dcbdb0 https://osintteam.blog/cleartext-protocols-101-how-to-connect-anonymously-to-ftp-telnet-and-rsync-2c1001dcbdb0 Welcome back to the "100s Series"! After mastering network reconnaissance with tcpdump, Wireshark, and Nmap, it's time to explore what happens when you find open services. While modern security practices emphasize encryption and authentication, legacy cleartext protocols still lurk in corporate networks, IoT devices, and forgotten systems. File Transport Protocol (FTP), Telnet, and rsync often expose sensitive data through misconfigured anonymous access, default credentials, and unprotected file shares. This article will teach you to identify, access, and extract intelligence from such cleartext protocol implementations... Fri, 13 Jun 2025 00:00:00 GMT https://january1073.medium.com/your-clients-data-is-not-safe-with-microsoft-and-you-know-it-1fa88fdbdcbb https://january1073.medium.com/your-clients-data-is-not-safe-with-microsoft-and-you-know-it-1fa88fdbdcbb EU lawyers are bound not only by the law, but by strict professional duties of confidentiality. Continuing to use the Microsoft ecosystem — which is subject to U.S. surveillance laws and known for opaque data handling practices — may violate core tenets of GDPR, EU Court rulings, and professional codes. The legal profession must move toward self-hosted, open-source, and EU-based services to protect client data and uphold the integrity of their work... Sat, 07 Jun 2025 00:00:00 GMT https://osintteam.blog/nmap-101-mapping-your-targets-attack-surface-5bae9735c60d https://osintteam.blog/nmap-101-mapping-your-targets-attack-surface-5bae9735c60d Welcome back to the “100s Series”! After exploring network traffic analysis with tcpdump and Wireshark, it’s time to shift from passive observation to active reconnaissance. Nmap (short for “Network Mapper”) remains a cornerstone tool for network discovery and security auditing, turning hidden network infrastructures into comprehensive maps of potential attack surfaces. This comprehensive walkthrough will teach you to discover, enumerate, and analyze network targets with surgical precision... Sun, 25 May 2025 00:00:00 GMT https://january1073.medium.com/der-pentesting-vertrag-961e19c5860e https://january1073.medium.com/der-pentesting-vertrag-961e19c5860e Für IT-Sicherheitsunternehmen, die Penetrationstests anbieten oder in Auftrag geben, sind gut strukturierte Verträge essenziell für erfolgreiche Geschäftsbeziehungen. Ein präzise formulierter Pentesting-Vertrag schützt beide Parteien, definiert klare Erwartungen und minimiert rechtliche sowie betriebliche Risiken... Tue, 13 May 2025 00:00:00 GMT https://osintteam.blog/wireshark-101-extracting-secrets-from-captured-network-data-8f40bd3252f9 https://osintteam.blog/wireshark-101-extracting-secrets-from-captured-network-data-8f40bd3252f9 Welcome back to the “100s Series”! After our deep dive into the command-line wizardry of tcpdump, it’s time to level up our network analysis game. Wireshark offers a user-friendly graphical approach to network analysis, providing a detailed look at the conversations happening on your network. This walkthrough will equip you with the skills to capture, filter, and analyze data with ease. Get ready to see your network traffic in a whole new light... Tue, 13 May 2025 00:00:00 GMT https://infosecwriteups.com/how-i-flooded-myself-hping3-against-apache-c518cbab639f https://infosecwriteups.com/how-i-flooded-myself-hping3-against-apache-c518cbab639f A denial of service (DoS) attack floods a target system with malicious traffic, overwhelming it, and preventing legitimate users from accessing network resources. This I wanted to try at home — attacking my own machine, of course... Sun, 11 May 2025 00:00:00 GMT https://infosecwriteups.com/dora-has-entered-the-chat-eus-new-cyber-rulebook-reshaping-financial-security-e2ce7dd95c5d https://infosecwriteups.com/dora-has-entered-the-chat-eus-new-cyber-rulebook-reshaping-financial-security-e2ce7dd95c5d The EU’s Digital Operational Resilience Act became applicable in January 2025, and it’s changing the game for security professionals in the financial sector. Here’s what you need to know... Fri, 02 May 2025 00:00:00 GMT https://osintteam.blog/tcpdump-101-silently-capturing-your-targets-network-traffic-76b839e64232 https://osintteam.blog/tcpdump-101-silently-capturing-your-targets-network-traffic-76b839e64232 If you can see the packets, you can understand the system — and if you can silently capture them, you’re already halfway in. tcpdump is one of the most precise tools in an attacker’s toolkit, and it’s just as useful for defenders who want to think like one. This article launches my “100s Series,” where I will walk you through key cybersecurity tools and strategies that sharpen your skills for both offense and defense. First up: tcpdump —your entry point to silent monitoring and powerful packet analysis... Tue, 29 Apr 2025 00:00:00 GMT https://january1073.medium.com/respond-and-recover-from-a-data-breach-in-google-cloud-capstone-project-of-the-google-cloud-634e1976fc88 https://january1073.medium.com/respond-and-recover-from-a-data-breach-in-google-cloud-capstone-project-of-the-google-cloud-634e1976fc88 For the Google Cloud Cybersecurity Certificate capstone project, in addition to video lectures and multiple-choice questions, I had to complete practical tasks in a Google Cloud lab and create a security incident report... Mon, 21 Apr 2025 00:00:00 GMT https://january1073.medium.com/unmasking-metasploitable2-988d2ed3fe67 https://january1073.medium.com/unmasking-metasploitable2-988d2ed3fe67 This write-up outlines the setup and execution of vulnerability scans using Nessus Professional against a Metasploitable2 virtual machine (VM) to demonstrate vulnerability assessment procedures... Mon, 14 Apr 2025 00:00:00 GMT