Sign in

Rodrigue Le Bayon

@rodriguelebayon.bsky.social
49 followers 52 following 0 posts

Head of CERT @OrangeCyberdefense research.cert.orangecyberdefense.com

PostsRepliesMedia
Reposted by Rodrigue Le Bayon
BleepingComputer @bleepingcomputer.com · 25/04/2025
Two vulnerabilities impacting Craft CMS were chained together in zero-day attacks to breach servers and steal data, with exploitation ongoing, according to CERT Orange Cyberdefense.
bleepingcomputer.com
Craft CMS RCE exploit chain used in zero-day attacks to steal data
Two vulnerabilities impacting Craft CMS were chained together in zero-day attacks to breach servers and steal data, with exploitation ongoing, according to CERT Orange Cyberdefense.
043
Reposted by Rodrigue Le Bayon
ONYPHE @onyphe.io · 25/04/2025
#CVE-2025-32432 #0day #CraftCMS discovered by Orange Cyberdefense 💥Unauthenticated Remote Code Execution. No CVSS yet, we suggest to give it a 10 📌40,000 IP addresses representing over 37,000 domain names exposed, 12,168 unique domains vulnerable Blog: blog.onyphe.io/en/cve-2025-...
blog.onyphe.io
CVE-2025-32432 – 0day Craft CMS discovered by Orange Cyberdefense – Blog | Big Data for Cyber Defense
122
Reposted by Rodrigue Le Bayon
ONYPHE @onyphe.io · 21/04/2025
💥Detection method for #symlink #backdoor on #fortinet "we are willing to share it, privately" More than 18k devices compromised Read more: blog.onyphe.io/en/symlink-b...
blog.onyphe.io
Symlink backdoor on Fortinet SSL-VPN devices – Blog | Big Data for Cyber Defense
052
Reposted by Rodrigue Le Bayon
Eric Geller @ericjgeller.com · 09/04/2025
Trump going after his former CISA director @thekrebscycle.bsky.social, who debunked his 2020 lies. He just ordered a probe of Krebs' leadership of CISA (including any "censorship"), revoked Krebs' clearances, and suspended those of his @sentinelone.com colleagues. www.whitehouse.gov/fact-sheets/...
12280120
Reposted by Rodrigue Le Bayon
Orange Cyberdefense CERT @ocd-cert.bsky.social · 17/03/2025
🆕New version of #Emmenhtal loader actively distributed worldwide since early March, leading to #Lumma or #Rhadamanthys stealers. Very low AV detection on VT for now. Similarly to V2, Emmenhtal V3 masquerades as #mp3 or #mp4 files, including relaxation songs.🧘‍♀️
131
Reposted by Rodrigue Le Bayon
Orange @orange.com · 26/03/2025
What can be done to prevent phishing attacks? We speak to cyberdefence expert @rodriguelebayon.bsky.social, Head of Global CERT at Orange Cyberdefense, who tells us more about the growing problem and what we can do to stop it. 👉See the interview: www.france24.com/en/tv-shows/...
france24.com
Entre Nous - Fighting cybercrime: What can be done to prevent phishing attacks?
Have you ever received a phone call from a number you don't know, offering you a job that's too good to be true? Or received a link to pay for a package that's supposedly in your name? In many of thos...
042
Reposted by Rodrigue Le Bayon
Catalin Cimpanu @campuscodi.risky.biz · 01/02/2025
Silent Push has discovered a Chinese CDN that rents IPs from major could providers and makes them available to various cybercrime operations. FUNNULL has hosted phishing portals, online romance scams, and gambling sites linked to money laundering operations. www.silentpush.com/blog/infrast...
silentpush.com
Infrastructure Laundering: Silent Push Exposes Cloudy Behavior Around FUNNULL CDN Renting IPs from Big Tech
Infrastructure Laundering is a criminal practice of intermediaries enabling threat actors to hide infrastructure with major cloud providers.
0237
Reposted by Rodrigue Le Bayon
Gabriel Thierry @gabrielthierry.eurosky.social · 27/01/2025
Celui qui est considéré comme le père de Babar: la fin de cet épisode de Pwned sur la "Ferme des animaux". pwned.substack.com/p/celui-qui-...
pwned.substack.com
Celui qui est considéré comme le père de Babar
Où l'on découvre que le choix du nom Babar a peut-être un deuxième sens.
042
Reposted by Rodrigue Le Bayon
ANSSI @anssi-fr.bsky.social · 27/01/2025
Désormais, l'ANSSI est également sur 🦋 #Bluesky ! Retrouvez-nous ici pour suivre toute notre actualité #cyber.
78552
Reposted by Rodrigue Le Bayon
Cedric Pernet @cedricpernet.bsky.social · 24/12/2024
#CIRCL announces the release of new and updated open-source training materials for #digitalforensics , over 340 updated and comprehensive slides designed to empower your learning journey. www.circl.lu/services/for... #DFIR
0137