@paulmutton

Cyber Security Consultant at Netcraft, tech author, photographer, CREST certified web applications tester, "He is a cybercrime warrior of the very first order."

 Wiltshire, UK
highseverity.com
Joined February 2009
  • Tweets7K
  • Following199
  • Followers930
717Media
Sounds a bit worse than last time! bbc.co.uk/news/av/business-1…

M&S security breach in context

Online security expert Paul Mutton explains how Marks and Spencer's customers' details have been stolen.

bbc.co.uk
2
70
A spate of phishing attacks that are certainly more convincing than average, using compromised business email accounts and signatures to propagate netcraft.com/blog/autodesk-h…

Autodesk hosting PDF files used in Microsoft phishing attacks | Netcraft

Autodesk is hosting malicious PDF files that lead phishing attack victims to have their Microsoft login credentials stolen. The elaborate phishing campaign ...

netcraft.com
145
Cor, 10 years since all those fun and games with the Heartbleed vulnerability netcraft.com/blog/heartbleed…

Heartbleed certificate revocation tsunami yet to arrive | Netcraft

Only 30,000 of the 500,000+ SSL certificates affected by the Heartbleed bug have been reissued up until today, and even fewer certificates have been revoked ...

netcraft.com
105
Paul Mutton retweeted
Netcraft@Netcraft15 Mar 2024
Cloudflare loses 22% of its domains in Freenom .tk shutdown netcraft.com/blog/cloudflare…
3
4
601
Paul Mutton retweeted
Netcraft@Netcraft7 Dec 2023
It’s not cricket! Sri Lanka and Bangladesh co-host phishing attack netcraft.com/blog/its-not-cr…
2
1
581
curl has a little-known quirk that exposed both Google Chrome and our own @Burp_Suite. We've published the full details here: portswigger.net/research/the…

The curl quirk that exposed Burp Suite & Google Chrome

In this post, we'll explore a little-known feature in curl that led to a local-file disclosure vulnerability in both Burp Suite Pro, and Google Chrome. We patched Burp Suite a while back, but suspect

portswigger.net
4
55
2
150
34,370
Don't ask ChatGPT for password advice.
1
292
Interestingly broken security: My card provider won't refund my credit balance unless I give my OTP to a person over the phone, but their own security guidance says to never share your OTP with another person (no exceptions stated).
1
3
269
I'm not sure that's the answer.
188
Paul Mutton retweeted
Netcraft@Netcraft16 Jan 2023
Many phishing kits contain hidden code that sends a copy of all stolen credentials to their authors. news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
2
1
1,001
Exciting Tigerfibel delivery from the @TankMuseum!
1
Honesty in politics is so refreshing
Incredible! Wordle 388 2/6 ⬜⬜⬜⬜⬜ 🟩🟩🟩🟩🟩
It's 22:22:22 22/2/22 🤯
2
Strike Your Own! #Jubilee 50p at @RoyalMintUK
3
Anyone fancy buying a coffee table that has over a million views on YouTube? It has a model railway inside it... ebay.co.uk/itm/165307549372
2
1
2
Funny and malicious server banners | Netcraft News <= interesting read -- you could even get a job by reading the server banners!! news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
1
1
What's the weirdest server header you've ever seen? news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
2
6
16
Guess that explains why my Hermes parcel arrived looking like this...
The Times and Sunday Times
@thetimes16 Dec 2021
Exposed: the Hermes delivery staff throwing your parcels against the wall thetimes.co.uk/article/expos…
2
Paul Mutton retweeted
Netcraft@Netcraft23 Nov 2021
More than 11 million Apache websites could have been vulnerable to path traversal exploits news.netcraft.com/archives/2…

Resources – Netcraft

Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.

netcraft.com
1
4
Load more