Sergiu Gatlan

Sergiu Gatlan

@serghei.bsky.social

Cybersecurity/tech reporter @BleepingComputer / serghei.ro

5.6K followers902 following127 posts

Sergiu Gatlan reposted

Raphael Satter
@raphae.li

Scoop: The Israeli company Discover-Tech -- alleged to be at the center of a vast web of ad tech surveillance -- has been heavily targeting users of Elon Musk's Starlink, sources tell me. www.reuters.com/business/med...

reuters.comEXCLUSIVE: Alleged Israeli spy company heavily targeted Starlink users, sources sayExperts at a digital defense firm recently found that an Israeli ad tech company was heavily targeting users of ​Starlink's satellite internet service in a likely effort to spy on them, according to s...

Sergiu Gatlan reposted

BleepingComputer
@bleepingcomputer.com

French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.

bleepingcomputer.comEnergy giant ENGIE discloses data breach affecting customersFrench energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.

Sergiu Gatlan reposted

BleepingComputer
@bleepingcomputer.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.

bleepingcomputer.comCISA confirms PHP2Shell vulnerabilities now exploited in attacksThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
Sergiu Gatlan
@serghei.bsky.social

Fortinet patched multiple flaws in FortiOS, FortiManager, and FortiAnalyzer today, but will publish advisories/CVEs during the November 10 Patch Tuesday. This is "part of Fortinet’s ongoing commitment to responsible transparency while balancing customer security." www.fortinet.com/blog/ciso-co...

fortinet.comFortinet Releases Security Hardening Release for Multiple Products | CISO CollectiveFortinet announces frontier AI hardening releases for a range of products including FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator.…
View full thread
Sergiu Gatlan
@serghei.bsky.social

Also, nothing builds customer trust quite like a cybersecurity company telling you 'Watch your logs for weird stuff,' while whispering 'Good luck figuring out what you're looking for!'

Sergiu Gatlan
@serghei.bsky.social

Fortinet patched multiple flaws in FortiOS, FortiManager, and FortiAnalyzer today, but will publish advisories/CVEs during the November 10 Patch Tuesday. This is "part of Fortinet’s ongoing commitment to responsible transparency while balancing customer security." www.fortinet.com/blog/ciso-co...

fortinet.comFortinet Releases Security Hardening Release for Multiple Products | CISO CollectiveFortinet announces frontier AI hardening releases for a range of products including FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator.…
Sergiu Gatlan
@serghei.bsky.social

Waiting until November 10th for CVEs and info on what was fixed is great because by the time you get the advisory, attackers who reverse-engineered today's patches will already be on vacation.

Sergiu Gatlan
@serghei.bsky.social

Waiting for Google to sue the guy for trademark infringement

Catalin Cimpanu@campuscodi.risky.biz

The developer of the StealC infostealer has returned to the cybercrime underground with a new (Stadia) RAT after Europol seized StealC infrastructure in June www.varonis.com/blog/stealc-...

varonis.comStealC Is Back, and This Time It's a RATFour months after Operation Endgame took it down, StealC's seller returns with Stadia, a remote access trojan that shares StealC's code byte for byte.
Sergiu Gatlan
@serghei.bsky.social

eMudhra says it will voluntarily exit the global SSL/TLS certificate business. They also promised a root-cause report, but "our cryptography was built on vibes and hopes" should cover it. emudhra.com/en/press-rel...

emudhra.comeMudhra to Exit global SSL/TLS Certificate BusinesseMudhra Limited (BSE: 543533 | NSE: EMUDHRA), a global digital trust company, today announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business.
Sergiu Gatlan
@serghei.bsky.social

“Social media platforms are a "silent ally" of Russia in a "digital war" and are doing nothing to curb disinformation, Polish Digital Affairs Minister Krzysztof Gawkowski ​said on Wednesday, threatening fines for firms that ignore state requests.” www.reuters.com/technology/p...

reuters.comPoland says social media firms are 'silent ally' of Russia, threatens finesSocial media platforms are a "silent ally" of Russia in a "digital war" and are doing nothing to curb disinformation, Polish Digital Affairs Minister Krzysztof Gawkowski ​said on Wednesday, threatenin...
Sergiu Gatlan
@serghei.bsky.social

"A New Mexico judge ordered Meta to pay $25 billion on Wednesday for deceiving users about its data privacy practices, one of the largest penalties levied against the tech giant." www.nytimes.com/2026/10/21/t... Meta disagrees with the ruling and plans to appeal: www.cnbc.com/2026/10/21/m...

nytimes.comMeta Ordered to Pay $25 Billion Over Cambridge Analytica Privacy ViolationsThe penalty, one of the largest levied against the tech giant, stemmed from a lawsuit by New Mexico claiming the social media company had misled users about their data privacy.

Sergiu Gatlan reposted

Raphael Satter
@raphae.li

New: Pentagon hit with class action over data breach affecting millions of military members By @mikescarcella.bsky.social www.reuters.com/legal/govern...

reuters.comPentagon hit with class action over data breach affecting millions of military membersThe US Defense Department is facing a class action lawsuit alleging it failed to protect sensitive personally identifiable information ​from a cyber breach that exposed data belonging to millions of ‌...
Sergiu Gatlan
@serghei.bsky.social

No working PoCs yet. “The PHP security team closely monitored and inspected appearing PoCs after the leak but did not identify any functional exploits at the time of release/public disclosure.”

Sergiu Gatlan
@serghei.bsky.social

Dutch NCSC-NL took its website offline until PHP2Shell security patches are available. "Due to vulnerabilities in PHP, we have temporarily taken the NCSC website offline as a precaution. We're working to get the website back up and running as quickly as possible." www.ncsc.nl/index-en.html

Sergiu Gatlan reposted

Greg Otto
@gregotto.bsky.social

So, uh, interesting, this story got banned from r/serbia

Greg Otto@gregotto.bsky.social

NEW: Spyware has been detected on devices used by some of Serbia’s most prominent figures connected to the country’s political upheaval, according to researchers who announced their findings Monday. cyberscoop.com/pegasus-spyw...

cyberscoop.comSpyware found on devices belonging to prominent Serbian critics as elections loomResearchers detect NSO Group's Pegasus spyware targeting prominent Serbian figures, including a university rector and a prosecutor, ahead of upcoming elections.
Sergiu Gatlan
@serghei.bsky.social

CISA’s job is to help federal agencies and companies fix vulnerabilities and secure their networks. Being told to find some flaws and say nothing is the cybersecurity equivalent of a fire department being asked to quietly light a few matches.

Cynthia Brumfield@metacurity.com

Holy sh*t. "A few months into President Donald Trump’s second term, political appointees at the Department of Homeland Security made an unusual request of its agency focused on cybersecurity: Secretly acquire a voting machine and hack it." www.propublica.org/article/cisa...

propublica.orgThis Cybersecurity Agency Is Supposed to Protect U.S. Elections. Officials Fear It’s Been Compromised by Trump.DHS appointees made an unusual request of its agency that protects election systems: Secretly acquire a voting machine and hack it. Though not acted on, the request shows how the Trump administration ...
Sergiu Gatlan
@serghei.bsky.social

BeyondTrust patched a Remote Support zero-day (CVE-2026-102764) exploited since August. Mandiant attributes the attacks to Armory Castle (formerly UNC5221), a China-nexus espionage group that also hit Citrix and Ivanti appliances. BeyondTrust has 20,000+ customers, including 75% of Fortune 100.

BleepingComputer@bleepingcomputer.com

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.

bleepingcomputer.comBeyondTrust patches zero-day exploited in attacks since AugustBeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
Sergiu Gatlan
@serghei.bsky.social

Google, IAB Europe, Beeswax, Vungle, and Eskimi removed Discover-Tech from their registries after Citizen Lab reached out. Funny how fast “certified” / “approved” ad vendors become “never heard of them” when a researcher calls.

Sergiu Gatlan reposted

BleepingComputer
@bleepingcomputer.com

A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack.

bleepingcomputer.comEngineer sentenced for locking over 3,000 devices on employer networkA former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack.
Sergiu Gatlan
@serghei.bsky.social

An international law enforcement operation dubbed “Operation KillSwitch” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged administrator. www.bleepingcomputer.com/news/securit... vimeo.com/1232032220?f...

vimeo.comOperation KillSwitch videoVideo created as part of Operation KillSwitch, the international law enforcement operation that took down the KillSec ransomware group.

Sergiu Gatlan reposted

BleepingComputer
@bleepingcomputer.com

The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.

bleepingcomputer.comShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksThe ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulnerable servers.

Sergiu Gatlan reposted

Catalin Cimpanu
@campuscodi.risky.biz

The Irish Presidency of the EU has proposed member states to allow AI companies unfettered access to the data of EU citizens. According to leaked docs, the proposal would effectively exempt AI companies from any of the GDPR rules and deny EU citizens data protection rights noyb.eu/en/ai-eu-mem...

noyb.euAI: EU Member States plan “digital expropriation” of Europeans in the interest of AI companiesIn a leaked document, the Irish Presidency proposes to EU Member States that the interest of AI companies to make profits should take precedence over the fundamental rights of Europeans.
Sergiu Gatlan
@serghei.bsky.social

Oil company warns coal is bad 🤦‍♂️

Bloomberg News@bloomberg.com

ExxonMobil says the world is on course for rapid global temperature increases as coal use persists, pushing emissions beyond mid-century climate goals.

bloom.bgExxon Sounds Alarm on Worsening Global Warming on Coal PollutionExxonMobil Holdings Corp. says the world is on course for rapid global temperature increases as coal use persists, pushing emissions beyond mid-century climate goals.

Sergiu Gatlan reposted

BleepingComputer
@bleepingcomputer.com

ATF, the regulatory agency that enforces federal laws governing firearms and explosives in the United States, has confirmed that one of its systems was compromised after breach claims made by the Qilin ransomware gang.

bleepingcomputer.comATF confirms “major incident” after recent Qilin breach claimsATF, the regulatory agency that enforces federal laws governing firearms and explosives in the United States, has confirmed that one of its systems was compromised after breach claims made by the Qilin ransomware gang.

Sergiu Gatlan reposted

Zack Whittaker
@zackwhittaker.com

By enabling the new Xfinity Wi-Fi motion sensing tech, Comcast says it may disclose information generated from a customer’s use of the feature to outside parties under a broad array of reasons — and Comcast also says it doesn’t have to tell you. Ad-block bypass: web.archive.org/web/20260818...

techcrunch.comComcast adds motion sensing to millions of its newer routers, with a privacy catch | TechCrunchA new feature added to Comcast's newest routers can detect if there is motion is inside your home without needing traditional motion sensors.