Alexandre Borges

"Furthermore, each threat defined within the EMB3D Threat Model includes both a Threat Evidence reference and a Threat Maturity categorization." https://lnkd.in/gY59fJmG #embeddedsystems #security #cybersecurity #threatmodeling #MITRE #IndustrialCybersecurity #icssecurity #ics

1

💬 "Conducting cyber tabletop exercises is essential to assessing and strengthening cybersecurity posture." – Josh Fleming, MSITM, Senior Manager of Risk Advisory + GRC By simulating real-world attacks, teams can uncover vulnerabilities, improve response plans, and develop the problem-solving skills needed under pressure. 📖 Read the full article for more insights on enhancing your cyber preparedness: https://lnkd.in/eMVZsqtK #CybersecurityAwarenessMonth #CyberResilience #IncidentResponse #RiskManagement #TabletopExercises

23

🔴 New High-Severity Vulnerability in Apache ActiveMQ Poses Risk of Unauthorized Access: "CVE-2024-32114" A high-severity #vulnerability, CVE-2024-32114, has been discovered in #Apache ActiveMQ, potentially granting unauthorized access to the #API layers without authentication. Apache #ActiveMQ, a widely adopted #opensource #Java based message broker, serves as a vital communication conduit between various components across diverse servers and programming languages, including #Python, #C++, #JavaScript, and others. Read more 👇 https://lnkd.in/db6hatjD

5

🔥 High risk vulnerability detected in Cilium! 🚨 The issue lies in CIDR deny policies not taking effect when a more narrow CIDR allow is present. This could lead to unauthorized access. CVE number is pending. The issue has been patched in Cilium v1.14.16 and v1.15.10. Stay safe and update your systems! #Cilium #Vulnerability #OWASP #API #Security https://lnkd.in/evTk5Bgm

1

Attention all security professionals! MITRE has just released an enhanced EMB3D Threat Model, providing a comprehensive approach to identifying and mitigating threats to embedded devices This improved model incorporates tiered mitigation guidance and aligns with ISA/IEC 62443-4-2 standards [S2, S3]. Click the link to learn more about how this threat model can help you improve the security of your embedded devices: https://lnkd.in/gY59fJmG #embeddedsystems #security #cybersecurity #threatmodeling #MITRE #IndustrialCybersecurity #icssecurity #ics

3

A relationship based on trust 🤝 A new module is here to help you master Active Directory trust attacks! 🔴 Understand enumerating and attacking intra-forest and cross-forest 🔴 Learn how to explain hardening considerations to customers for risk mitigation Get started on #HTB Academy: https://okt.to/iFJCQK #HackTheBox #HTBAcademy #Pentesting #CyberSecurity

778

10 comentários

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

Navigating an Evolving Threat Landscape: Tales from the SOC https://buff.ly/4ibn77d via Chuck Brooks of Brooks Consulting International on Thinkers360 #Cybersecurity #EmergingTechnology #Security

5

1 comentário

Read our latest blog "Understanding Common Vulnerabilities in Public-Facing Applications" by Elizabeth Gildea https://lnkd.in/gn4uvPPq #cybervulnerabilities #threatintelligence

16

Gap Assessment? Mock Assessment? Certification Assessment? Conformity Assessment? Joint Surveillance Voluntary Assessment? NIST SP 800-171 Assessment? CMMC Level 1 Assessment? CMMC Level 2 Assessment? CMMC Level 3 Assessment? Control Assessment? DIBCAC Assessment? Seriously, who knew there are so many types of assessments that occur in the CMMC & NIST SP 800-171 ecosystem today!!! If you don't understand the nuanced differences between all of these types of assessments, this whitepaper, "A Greenhorn's Guide to All of the Assessment Types" may help to clear it all up. At least until DoD provides their next set of updated documents... Like all of our content Peak InfoSec, there is no marketing passthrough where we collect your information. Everything is provided free of marketing and advertising gimmicks. ================================================= Peak InfoSec Homepage: https://peakinfosec.com As the CMMC Churns Episodes: https://lnkd.in/eVGYGs3g Contact Peak InfoSec for Support: https://lnkd.in/e8sM_2Z3 Email: [email protected] ================================================= #cuicon #cmmc #cmmc2 #32cfrpart2002 #32cfrpart170 #infosec #informationsecurity #compliance #cybersecurity #cui #fci #cmmcab #thecyberab #nist800171 #defenseindustry #defensecontractors #defensecontracting #grc #manufacturing #dfars #manufacturingindustry #dib #satellite #satellitecommunications #satellitesystems #managedserviceprovider #msp #managedsecurityservices #mssp #DoD #GovCon #governmentcontracting #SmallBusiness #contracts #contractors https://lnkd.in/eFtmQ6mf

12

1 comentário