Log inSign up
Log inSign up
Deutsche Telekom CERT
241 posts
Deutsche Telekom CERT profile banner
@DTCERT

Deutsche Telekom CERT

@DTCERT
Technical tweets for technical folks by Deutsche Telekom CERT, CTI, and DFIR. #dfir #cyber #cert #cti #TelekomSecurity
Germany
telekom.com/impressum
Born January 1, 1970
Joined April 2014
44 Following
5,151 Followers
RepliesRepliesRepostsRepostsMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·US TIDA·Ads Info·© 2026 X Corp.
  • Pinned
    @DTCERT
    Deutsche Telekom CERT
    @DTCERT
    Jul 31
    We've moved! 📢 This account will no longer be actively updated. Going forward, you'll find all our latest technical security research and insights here: linkedin.com/showcase/techn… Follow us there to stay up to date. Thanks for your continued support!
    linkedin.com
    Technical Security Insights | T Security | LinkedIn
    Technical Security Insights | T Security | 334 followers on LinkedIn. Real‑world cybersecurity insights from Telekom Security - by practitioners, for practitioners. | Technical Security Insights is a...
    3
  • @DTCERT
    Deutsche Telekom CERT
    @DTCERT
    Apr 23
    🚨 Our Red Team discovered a new Linux vulnerability: “Pack2TheRoot” (CVE-2026-41651) It affects PackageKit versions 1.0.2–1.3.4 across major distros like Ubuntu, Debian, Fedora & Rocky Linux -potentially impacting servers running Cockpit. Details 👇
    github.security.telekom.com
    Pack2TheRoot (CVE-2026-41651): Cross-Distro Local Privilege Escalation Vulnerability
    Pack2TheRoot (CVE-2026-41651) is a local privilege escalation (LPE) vulnerability that affects multiple Linux distributions in default installations.
    2
  • @DTCERT
    Deutsche Telekom CERT
    @DTCERT
    Mar 6
    ⬇️ Check out our new blog post on recent exploitation of Ivanti EPMM appliances
    @lazy_daemon
    Robert Giczewski
    @lazy_daemon
    Mar 4
    For some reason, our incident response team was overwhelmed with Ivanti EPMM exploitation cases at the end of February (almost one month later after Ivanti's security advisory). Here are our findings: github.security.telekom.com/2026/03/ivanti… #ivanti
    1
  • @DTCERT
    Deutsche Telekom CERT
    @DTCERT
    Sep 19, 2025
    🚨 ALERT: Cybercriminals are sending out fake Telekom invoices via phishing emails to deliver multiple malicious RAT payloads. The activity originates from an attack cluster tracked by Telekom Security under the name "Rodent Weed". 🧵1/6
    3
  • @DTCERT
    Deutsche Telekom CERT
    @DTCERT
    Apr 25, 2025
    Fraudsters have now started using EPC QR codes in fake invoices that can be opened by many banking apps. These codes already contain all the necessary transfer information for the app to start a simple transfer action for the victim. (1/3)
    2