Vivien Bilquez

Legacy SIEM technology is out, and #AI-integrated SOC is in. Maybe we can finally realize the SIEM's dream of gathering all of the necessary information for investigations up front? As Elia Zaitsev discussed at #RSA, traditional models aren't nearly enough. Even AI-supported, though, your team's ability to think creatively and look out for unknown unknowns will continue to be necessary.

8

The Cybersecurity and Infrastructure Agency (CISA) has released a guide with updated recommendation on network access security in light of several high-profile exploitation of widely used VPN technologies in the corporate space. While this guidance is aimed at critical infrastructure it applies to all organizations using traditional VPN solutions to secure remote access. #networksecurity #vpn #zerotrust

1

#Google To Revoke Trust In #Entrust Digital Certificates. Starting around November 1, 2024, Google #Chrome will begin blocking websites that use certificates issued by Entrust. This decision has been made due to compliance issues and security concerns that Entrust has not adequately addressed in a timely manner, as outlined by Google. What This Means for You: If your website uses an Entrust certificate, visitors using Chrome will not be able to access your site once this change takes effect. To prevent this disruption, strongly recommend that you replace your current Entrust certificate with a certificate from another trusted #certificate authority (CA) as soon as possible. https://lnkd.in/dhFJFBz9

6

GPT-4 can exploit real security vulnerabilities by simply reading security advisories According to a recent study, OpenAI's GPT-4 language model is capable of autonomously exploiting vulnerabilities in real-world systems, simply by reading flaw descriptions in security advisories (CVEs). Researchers at the University of Illinois at Urbana-Champaign have demonstrated that GPT-4 can exploit 87% of the 15 critical vulnerabilities tested, while other language models fail completely. This discovery raises concerns about the safe use of AI agents combining language models and automation software. Key points: - GPT-4 can exploit real security vulnerabilities simply by reading the flaw descriptions in security advisories (CVEs).  - GPT-4 managed to exploit 87% of the 15 critical vulnerabilities tested, compared with 0% for other models. - GPT-4's ability to exploit vulnerabilities on its own is a cause for concern for the safe use of AI agents. - Other studies have also demonstrated exploitation flaws in GPT-4's assistance and personalization functionalities https://lnkd.in/dVz7FZ9m

12

LLM Tip of the Day Do you have security baselines for an application or a database that are Linux specific but you need the Windows version? Ask your favorite LLM to convert the OS guidance for you, and have an OS expert refine the changes. Saves a a good amount of time.

5

A good analysts on #crowdstrike incident. I think the lesson learnt is not only for #ciso but also for a broader group of #IT professionals. It is only the incident occurred on a security product. Any products, serving as part of the critical component of the key systems would expose similar #risk.

11

3 Kommentare

Researchers have identified several vulnerabilities, including remote code execution (RCE), full-service user takeover, AI module manipulation, sensitive data exposure, data exfiltration, and denial of service attacks.A notable attack method, termed Bucket Monopoly, exploits a configuration known as Shadow Resource. Organizations using Infrastructure as Code (IaC) architecture automatically create AWS S3 buckets with predictable names, such as "cf-templates-{Hash}-{Region}". Attackers can create buckets in unused AWS regions, waiting for legitimate users to deploy services like CloudFormation, which then grants them covert access. Successful exploitation requires the victim to deploy a new CloudFormation stack in a new region. Attackers may modify the CloudFormation template to create rogue admin users, contingent on victim IAM permissions. To reduce risk, organizations should avoid using static identifiers in bucket names. Instead, generating unique hashes or random identifiers for bucket names can help thwart early claims by attackers. https://lnkd.in/gtfUb8qi

3

A hacker group is actively exploiting a zero-day vulnerability in Microsoft software. This security vulnerability, identified as CVE-2024-38193 (with a CVSS score of7.8), is classified as a privilege escalation bug within the Windows Ancillary Function Driver (AFD.sys) for WinSock. If successfully exploited, attackers could achieve SYSTEM privileges on the affected system. Highly recommend following this link to apply the patch as soon as possible. https://lnkd.in/gH_sjHp7 #cybersecurity https://lnkd.in/gda554B2

1

Pentesting accounts for an average of 13% of total IT security budgets Credits: Security Magazine #CyberSecurity #CyberResilience #DataProtection #SwissStartUp #InfoSec #CyberCrime #DigitalTransformation #CyberResilienz #Datenschutz #Cybersécurité #RésilienceCyber #Innovation #Switzerland #CyberSicurezza https://lnkd.in/gqtd5iUv

4

Cyber resilience is more than just a strategy—it's a shared journey. As we face increasingly sophisticated cyber threats, the ability to bounce back and thrive is essential for every organization. Please join our session to cover how you can start to address your DORA risks with our security frameworks and solutions. It's about being prepared for whatever comes next and emerging stronger. Let us share our insights and support each other in this vital endeavor. https://lnkd.in/etCj3tNF #CyberResilience #Kyndryl #RegulatoryReadiness #Cybersecurity #ZeroTrust

13

“What’s more important? Being compliant or being secure?”🤔 #Informationsecurity and #security professionals often debate this topic. Thorsten Pollert’s answer: “It’s best to be both - they are equally important.” Well said! But what if you can only afford to be one? I recently shared the stage with Alexandros Manakos, #CEO of Apollon Security to explore this statement. We discussed three key themes and shared real-life stories and examples to highlight the benefits. Our goal: to help others C-Y-A. What does that mean? Challenge - Your - Assumptions regarding Compliance vs Security to obtain the greatest benefits of both. We had three main themes: 👉🏻 Compliance vs Real security - Can you be secure and not compliant? - Can you be compliant and not secure? - Which of the two is easier and why? 👉🏻 Communication vs Operations - What is operational readiness? - What does it take to be secure? - How can this feed compliance - Where are the gaps? 👉🏻 Unity of purpose - How to bridge the silos: Legal, Technical, Operations, and more… - How to avoid "compliance fatigue“ - Why you need the right partners to unify the silos It was an excellent event at HEUKING centered around #DORA and #NIS2 readiness. Why is this important for you? Follow below to know. 👇 https://lnkd.in/eWBC2kvD

88

38 Kommentare

This New Microsoft 365 Attack Can Break Through Your #2FA: Here's How | #cybersecurity #MFA #Hacking

4

1 Kommentar

Much is spoken about application security strategy in technical terms, but few discuss the importance of mastering oneself and building high-performance teams as key steps to achieving that strategy. In this regard, I strongly recommend reading "The Leading Brain" by Friederike Fabritius and Dr. Hans W. Hagemann. The book shares a lot of extremely useful concepts, like the relationship between arousal and performance and how to spot you optimum level of arousal, what is emotional imbalance and how can be mastered with exercise, good sleep and eating well, why is focus so difficult to our brain and which are the best strategies to stay focused, why good habits are absolutely necessary to avoid decision fatigue and that learning is an emotional process, so there are better ways to learn than others. In terms of team performance there are very powerful insights too, like the importance of team diversity (in terms of skills and personalities) and how like-minded teams can fool our brain into a state of complacency, the difference between introverts and extroverts, the 4 archetypes (explorer, builder, negotiator and director) and how to combine them, the importance of trust (and how to measure it with frameworks like SCARF) and why hiring always trumps training.

48

4 Kommentare

Exciting webinar with KuppingerCole Analysts AG on June 13, 2024, 4:00 pm CEST: Unveiling 2024's Identity Landscape: Real-World Tactics, Top Risks, and Cybersecurity Best Practices Revealed! As cyberattacks increase in volume and sophistication, it is not a matter of if but when your organization will have an incident. Join Martin Kuppinger and Morey Haber to learn about the risks of poor identity security, techniques used by threat actors, and best practices for protecting against identity theft. Your Key Takeaways: 🔸Hear examples of tactics used in real-world identity attacks 🔸Discover The Top Five Identity Risks in 2024 🔸Learn about Operational best practices to protect Identities & Access Register: https://lnkd.in/e8jc4k6Q #webinar #identityandaccessmanagement #IdentitySecurity

4

Exciting webinar with KuppingerCole Analysts AG on June 13, 2024, 4:00 pm CEST: Unveiling 2024's Identity Landscape: Real-World Tactics, Top Risks, and Cybersecurity Best Practices Revealed! As cyberattacks increase in volume and sophistication, it is not a matter of if but when your organization will have an incident. Join Martin Kuppinger and Morey Haber to learn about the risks of poor identity security, techniques used by threat actors, and best practices for protecting against identity theft. Your Key Takeaways: 🔸Hear examples of tactics used in real-world identity attacks 🔸Discover The Top Five Identity Risks in 2024 🔸Learn about Operational best practices to protect Identities & Access Register: https://lnkd.in/e8jc4k6Q #webinar #identityandaccessmanagement #IdentitySecurity

5