
Head of CSIRT @OVHcloud trying to make the Internet a better place. Now on Bluesky: smeriot
Lille, France
Joined November 2009
- Tweets431
- Following316
- Followers861
- Likes882
It's time for me to leave Twitter/X.
My Bluesky account : @smeriot.bluesky.social
We just published a guide for DFIR teams to perform forensics on Public Cloud instances in case of 🙂
Would you like to carry out an investigation within your #PublicCloud instance?
#OVHcloudsupport can help you gather the clues you need for your diagnosis.
Find our guide to recovering the data you need for your investigations 👇
help.ovhcloud.com/csm/en-gb-…
We are observing a sharp increase of #DDoS in 2024 at @OVHcloud with a new record of 840Mpps received in April. We decided to share few insights in a blog post:
blog.ovhcloud.com/the-rise-o…
In addition to the doc, Downfall support has been added to the spectre-meltdown-checker script to check your exposure:
github.com/speed47/spectre-m…
How to mitigate the Downfall vulnerability (CVE-2022-40982) ?
help.ovhcloud.com/csm/fr-ded…
When SMS MFA is a cost, just make it a paid feature 😒
It seems you can switch to another factor without getting "Blue" (actually it does fail with an unknown error 😅)
Sébastien Mériot retweeted
My new post explains how a disk image can be taken from a virtual machine running on the public cloud. The disk image can then be used with the offline forensic tools like Autopsy and Encase. blog.gaborszathmari.me/takin…
Time to patch your Exchange servers ! #tuesday
msrc.microsoft.com/update-gu…
Sébastien Mériot retweeted
🚨 Apache has disclosed an *actively exploited* Path traversal flaw in the #opensource "httpd" server. Over 112,000 exposed Apache servers run version 2.4.49, and should be upgraded now!
New fix checks for encoded path traversal characters e.g. /../.%2E/
blog.sonatype.com/apache-ser…
Sébastien Mériot retweeted
Making sense of #PrintNightmare. A flowchart to help understand exploitation of CVE-2021-34527.
Special thanks to @tiraniddo, @dez_, @gentilkiwi and @_f0rgetting_ for their test input and insights.
Très bon article qui remet en perspective la notion de gestion du risque !
Après l'incendie ayant touché OVH, voici notre analyse de risque et notre réponse à la question « Faut-il quitter OVH ? »
blog.cozy.io/fr/faut-il-quit…
Sébastien Mériot retweeted
Many thanks for all the empathy messages you sent us today ! I want to thank the teams who have been working all night/day.
It’s been the worst day for the last 22y and there is no word strong enough to say how sorry I feel today.
We keep working hard to restart SBG1/3/4 asap!
Microsoft just released 4 critical vulnerability affecting Exchange (RCE in EWS/ECP once again).
Details & IOCs can be found here:
volexity.com/blog/2021/03/02…
Great tips to deal with #phishing kit using Telegram 👍
This Post is from an account that no longer exists. Learn more
Egregor Ransom Note printed in LATAM Supermarkets... 🙄
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Sébastien Mériot retweeted
Our line up of talks is now public on the conference website and you can register to attend #Botconf2020 online
botconf.eu/botconf-2020/sche…
Sébastien Mériot retweeted
Ransomware : attention à l'extraterritorialité des sanctions américaines ! latribune.fr/opinions/ransom…


















