Markus Cserna

Finding security vulnerabilities in TLS-Libraries automatically using TLS-Anvil. Check out our new german article in the "IT-SICHERHEIT magazine" or on our cybersecurity blog.  🌐 Hackmanit Blog https://lnkd.in/eYW-VN4E ✅ German magazine article by IT-SICHERHEIT https://lnkd.in/ea-yU_eE 🛠️ TLS-Anvil https://tls-anvil.com/ 🔑 KoTeBi https://www.kotebi.de/en/ #TLS #itsecurity #itsicherheit #cybersicherheit #cybersecurity

3

#AI is the double-edged sword in #cybersecurity ⚔️ What happens when this innovation becomes a vulnerability? Jasmin Landry, Security Researcher and HackerOne Pentester put it together quite nicely (check out the quote in the post ⬇️) Two key fronts to consider here: 1️⃣ Security for AI: managing the risks that come with AI deployments. 2️⃣ AI for Security: leveraging AI to detect and manage vulnerabilities faster than ever before. But here’s the kicker: even with cutting-edge AI tools, human expertise is still critical to ensuring trustworthy, secure innovation. In our recent deep dive into AI and vulnerability management, we highlight how security teams are adapting to stay ahead of threats—and what it means for the future. 💬 What’s your take?

8

🚀 Unleashing the Power of Network Source of Truth (#NSoT) for #Network #Automation 🚀 Network downtime is costly, and manual configurations can lead to even more risks. This is where #NetworkSourceOfTruth (NSoT) comes into play, centralizing all your network-related data for streamlined management, consistent configurations, and improved efficiency across your organization. 📊 Why It Matters: A well-organized NSoT isn't just about having data—it's about having accurate, sanitized, and up-to-date data. This foundation is crucial for successful #NetworkAutomation. Incorporating tools like Container Lab and #digitaltwins, along with #NaaS (Network as a Service), can enhance your network’s scalability and flexibility, allowing for swift responses to changing demands. 🌐 Discover more insights on our latest tech blog: https://lnkd.in/e5JQm8qn 💡 Ideas to Kickstart Your Automation Journey 🛠️ Choosing the Right Tools 🌟 Long-Term Benefits Embrace #SelfOptimizingNetworks, #AutomatedTicketing, #AuditTrails, and enhanced #NetworkSecurity. With automation, your network becomes more efficient, reliable, and scalable, positioning your business for success in a rapidly evolving tech landscape. #NetworkTransformation #SDN #NetworkManagement #DigitalTransformation #TechInnovation #AutomationStrategy Harald Dewitz Stefan Hoeltken Ben Sellwood Jürgen Hatzipantelis Gunter Heithörster Lars Brune Marius Gerling Oliver Preißler

9

Strengthening your network security is now easier with Zenarmor on OPNsense. Thanks to Security Insider for the in-depth installation and setup guide in German. This article in German is a valuable resource for anyone seeking to enhance their cybersecurity infrastructure. https://hubs.ly/Q02FyjXd0

11

Anatomy Lesson from the Perspective of a Pentester - Guest Lecture at Johannes Gutenberg University Mainz 🎓 Our colleague Matthias Göhring was once again invited to give a guest lecture at Johannes Gutenberg-Universität Mainz. This time, the topic was “Professional Penetration Testing”. The question arose: What characterizes a good #PenetrationTest and how should it be structured? The lecture also covered topics such as the different types of technical security analyses and the management of #vulnerabilities. Thank you very much for the great event. We look forward to the next one! 📰👉 https://lnkd.in/eTbXTyRi #Pentesting #CyberSecurity #JGUMainz #moresecurity

2

🚀 Exciting News for Cybersecurity Enthusiasts! Join Jan C. Wendenburg of ONEKEY at the RSA Conference 2024 in San Francisco 🌉 on May 6th for his talk on "Automated Product Cybersecurity Compliance Management." Learn how ONEKEY's Product Cybersecurity & Compliance Platform can help you navigate the upcoming EU Cyber Resilience Act. Don't miss the chance to exchange ideas and insights with Jan! #RSAC2024 #Cybersecurity #ONEKEY #TechInnovation #ProductCompliance🛡️

6

We found several vulnerabilities in the Open Source Content Management System Bludit, which is used to create websites and blogs. This advisory explains the vulnerabilities and proposes possible fixes and mitigations: https://lnkd.in/diUxkrXc

9

🚨 Security Advisory: Important CVEs Disclosed 🚨 Hi Envoy Community, We would like to inform you about the following Common Vulnerabilities and Exposures (CVEs) identified in Envoy: 🔒 CVE-2024-45807: oghttp2 crash on OnBeginHeadersForStream 🔒 CVE-2024-45808: Malicious log injection via access logs 🔒 CVE-2024-45806: Potential manipulation of x-envoy headers from external sources 🔒 CVE-2024-45809: JWT filter crash in the clear route cache with remote JWKs 🔒 CVE-2024-45810: Envoy crashes for LocalReply in HTTP async client 🔧 Resolutions Coming Soon: These issues will be addressed in the following Envoy releases: - v1.31.2 - v1.30.6 - v1.29.9 - v1.28.7 🔗 Release Information: The updates will be available on our Releases Page starting today. 📖 Documentation: For detailed guidance, please refer to our Envoy Documentation. 🔄 Upgrade Recommendation: We strongly encourage all users to update to the latest versions of Envoy to ensure security and stability. 🔍 Ongoing Improvements: A pull request addressing these vulnerabilities has been initiated on the main branch. Thank you for your attention and continued support. ♻ REPOST this to help other Envoy users stay on top of Envoy News. #EnvoyProxy #Kubernetes #Security #CVE #DevOps #CloudNative #OpenSource #CyberSecurity

6

🔴 Attention Developers and SysAdmins! A new #PHP flaw (CVE-2024-4577) affects all of its Windows versions, enabling #remote #code #execution via #CGI argument #injection. 🔘 The vulnerability, tracked as CVE-2024-4577, has been described as a CGI argument injection vulnerability affecting all versions of PHP installed on the #Windows operating system. 🔘 According to #DEVCORE security researcher, the shortcoming makes it possible to bypass protections put in place for another security flaw, CVE-2012-1823. 🔘 "While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system," security researcher Orange Tsai said. 🔘 “This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary code can be executed on remote PHP #servers through the argument injection attack." 🔘 Following responsible disclosure on May 7, 2024, a fix for the vulnerability has been made available in PHP versions 8.3.8, 8.2.20, and 8.1.29. 🔘 DEVCORE has warned that all #XAMPP installations on Windows are #vulnerable by default when configured to use the locales for Traditional Chinese, Simplified Chinese, or Japanese. 🔘 The Taiwanese company is also recommending that administrators move away from the outdated PHP CGI altogether and opt for a more secure solution such as #Mod-PHP, #FastCGI, or #PHP-FPM. 🔘 “This vulnerability is incredibly simple, but that's also what makes it interesting," Tsai said. "Who would have thought that a patch, which has been reviewed and proven secure for the past 12 years, could be bypassed due to a minor Windows feature?" 🔘 The Shadowserver Foundation, in a post shared on X, said it has already detected exploitation attempts involving the flaw against its honeypot servers within 24 hours of public disclosure. 🔘 watchTowr Labs said it was able to devise an exploit for CVE-2024-4577 and achieve remote code execution, making it imperative that users move quickly to apply the latest patches. 🔘 “A nasty bug with a very simple exploit," security researcher Aliz Hammond said. 🔘 “Those running in an affected configuration under one of the affected locales – Chinese (simplified, or traditional) or Japanese – are urged to do this as fast as humanely possible, as the bug has a high chance of being exploited en-mass due to the low #exploit complexity." #rcc #cybersecurity #cyberintelligence #cybercrime #cyberint #dnsc #alert #news

4

Network Security Firewall Market – Industry Trends and Forecast to 2028 https://lnkd.in/dmZRUn6V #innovation #management #technology #creativity #entrepreneurship #sustainability #inspiration #insights #outbreak #impact

3

CVE-2024-8956, CVE-2024-8957: How to Steal a 0-Day RCE (With a Little Help from an LLM) https://lnkd.in/dNEAahfu #cve #llm #cybersecurity #infosec #informationsecurity #vulnerability

5

CVE-2024-8956, CVE-2024-8957: How to Steal a 0-Day RCE (With a Little Help from an LLM) https://lnkd.in/dNEAahfu #cve #llm #cybersecurity #infosec #informationsecurity #vulnerability

5

It's an old discussion but still relevant. Should I used #SPAN ports or invest in #Network #TAPs? This #WhitePaper may provide enough insights to decide: >>> https://lnkd.in/emXWpD3T #observability #cybersecurity #networksecurity #networkforensics #incidentresponse #threatdetection #networkdetectionresponse #IT #CIO #CISO #hybridcloud #cloud #tap #networktap #bypasstap #packetbroker #packetcapture #pcap #wireshark #NPB #NDR #NOC #SOC #vtap #gigamon #ixia #netscout #viavi #liveaction #aws #azure #gcp #vmware #riverbed #cisco #profitap #arista #niagaranetworks #cpacket #cubro #garland #liveaction #napatech #aws #azure #gcp #splunk #elastic #extrahop #corelight #nozomi #rhebo

7

𝗣𝗮𝗿𝗮𝗴𝗼𝗻 𝗠𝗶𝗰𝗿𝗼 + 𝗧𝗵𝗲 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝗖𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝘃𝗶𝘁𝘆 + 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 In today's world, where information and communication are paramount, a well-functioning network infrastructure is like the unseen backbone, the silent enabler of our digital lives. 𝗧𝗵𝗲 𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝗕𝗹𝗼𝗰𝗸𝘀: Network infrastructure encompasses the hardware and software components that facilitate communication between devices and users on a network. These components can be broadly categorized as: 𝗛𝗮𝗿𝗱𝘄𝗮𝗿𝗲: This includes physical devices like routers, which direct data traffic, switches, which connect devices within a network, cables, which transmit data, and wireless access points, which enable wireless connectivity. 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲: This encompasses the operating systems running on network devices, network management tools used to monitor and troubleshoot network performance, and security software like firewalls, which protect the network from unauthorized access. Paragon Micro’s Network Infrastructure capabilities expand well beyond the basics. Network infrastructure can become quite complex, especially in larger organizations. Network infrastructure, though often invisible, plays a vital role in our daily lives and the ultimate success of your organization. Dive deeper into our capabilities and let’s connect today, https://bit.ly/3XUClWt #paragonmicro #keepsiteasy #datacenter #networkinfrastructure

7