Alexander Georgiev

Heads Up, Linux Folks! Zero-Day Unauthenticated RCE Coming Soon Remember Heartbleed? Shellshock? Well, buckle up because another Linux vulnerability is about to hit the headlines. This one is a doozy - unauthenticated remote code execution (RCE). That means an attacker doesn't even need to log in to take control of your system. Mark your calendars: this zero-day is set for public release on September 30th. What could be the possible Impact? * Complete system takeover: Think of it as giving an attacker the keys to your kingdom. They can install malware, steal data, disrupt operations, and more. * Widespread exploitation: This type of vulnerability is a prime target for attackers looking to exploit large numbers of systems quickly. * Difficult to detect: Unauthenticated RCEs are often challenging to identify, allowing attackers to operate undetected for extended periods. What Can You Do? * Patch ASAP: Once patches are available, apply them immediately. This is your first and best line of defense. * Monitor for suspicious activity: Keep an eye out for any unusual behavior on your systems. * Implement defense-in-depth: Don't rely on a single security measure. Use multiple layers of protection to minimize the impact of a breach. Stay tuned for more updates as we get closer to the release date. And remember, in the world of cybersecurity, vigilance is key. #Linux #Cybersecurity #ZeroDay #RCE #Infosec

3

3 Kommentare

The progress and confirmation of SEAL for 5G and 6G network security is a key step towards protecting mobile networks. I'm delighted to be involved in this significant endeavor! #5G #6G #DeutschlandDigitalSicherBSI #InformationSecurity #CyberSecurity

3

#German major opposition party hit by #CyberAttack #InfoSec #CyberSecurity #Security #CSO #CISO #CEO #CLO #CRO #CIO #CTO #CMO #Cyber #BSI #BMI #Bund #Hacking #attribution is always hard to impossible, but would love to know who's behind this one, as the elections for the EU parliament are coming in days. #CyberWar #Infiltration #ElectionSecurity #CDU https://lnkd.in/gsCQ4Ndx

4

2 Kommentare

#Altisik Service: What It Is and Why It Matters https://lnkd.in/eJYhYgDW #malware #infosec #cybersec #cyberattack #cybersecurity #cybercrime #MalwareAttack #hackers #computersecurity

1

#AI is the double-edged sword in #cybersecurity ⚔️ What happens when this innovation becomes a vulnerability? Jasmin Landry, Security Researcher and HackerOne Pentester put it together quite nicely (check out the quote in the post ⬇️) Two key fronts to consider here: 1️⃣ Security for AI: managing the risks that come with AI deployments. 2️⃣ AI for Security: leveraging AI to detect and manage vulnerabilities faster than ever before. But here’s the kicker: even with cutting-edge AI tools, human expertise is still critical to ensuring trustworthy, secure innovation. In our recent deep dive into AI and vulnerability management, we highlight how security teams are adapting to stay ahead of threats—and what it means for the future. 💬 What’s your take?

8

Anatomy Lesson from the Perspective of a Pentester - Guest Lecture at Johannes Gutenberg University Mainz 🎓 Our colleague Matthias Göhring was once again invited to give a guest lecture at Johannes Gutenberg-Universität Mainz. This time, the topic was “Professional Penetration Testing”. The question arose: What characterizes a good #PenetrationTest and how should it be structured? The lecture also covered topics such as the different types of technical security analyses and the management of #vulnerabilities. Thank you very much for the great event. We look forward to the next one! 📰👉 https://lnkd.in/eTbXTyRi #Pentesting #CyberSecurity #JGUMainz #moresecurity

2

Researchers at Palo Alto Networks recently discovered the Swiss Army Suite, an automated vulnerability scanning tool, during routine telemetry monitoring. This tool has been used by attackers to scan web services and sites, and evade detection with patterns that bypass common traffic filtering tools. With advanced #MachineLearning models integrated into their #NGFW and Cloud-Delivered Security Services, organizations are protected against these evolving threats, effectively preventing zero-day exploit attempts and detecting SQL injection attacks. More in this report. #SOAR https://hubs.la/Q02Sq41n0

4

An interesting story (with good insights from Sarah Fluchs) about car models (VW Up and T6.1 as well as three Porsche models) discontinued by their manufacturing because they could not meet the UNECE R 155 transitional regulation. Since the core of this is to "demonstrate that cyber security was adequately considered", the moral of the story is simple: whether it's apps, cars, IoT, AI models, etc., secure by design is a must. #securebydesign #security

8

666 PhishingKit Yara rules are now available for free! How to use these, with Cisco ClamAV for example: https://lnkd.in/epWFrgzU

2

#Paloalto warnt vor aktueller kritischer #Zeroday #Schwachstelle in #Firewall, die bereits ausgenutzt wird und empfiehlt mitigierende Maßnahmen: "Palo Alto Networks has observed threat activity exploiting an unauthenticated remote command execution vulnerability against a limited number of firewall management interfaces which are exposed to the Internet. We are actively investigating this activity. We strongly recommend customers ensure access to your management interface is configured correctly in accordance with our recommended best practice deployment guidelines. In particular, we recommend that you immediately ensure that access to the management interface is possible only from trusted internal IPs and not from the Internet. The vast majority of firewalls already follow this Palo Alto Networks and industry best practice." https://lnkd.in/eU43ATvb

11

3 Kommentare

Russian Hackers Suspected in German Air Traffic Control Deutsche Flugsicherung Cyberattack https://lnkd.in/e9kwBb3X #cybersecurity #malware #zeroday #cyberattack #apt #forensic #breach #hack #threat #datasecurity #linux #ransomware #phishing #ethicalhacking #cybersecuritytraining #cybersecurityawareness #cyberattack #informationsecurity #artificialintelligence #datasecurity #threat #cybersecurityawareness #hack #ethicalhacking #splunk #informationsecurity #hubsecurity #cyberarmy #artificialintelligence #securityanalyst #google #android #cybercrime #data #network #microsoft #vulnerability #hacked

3

“What’s more important? Being compliant or being secure?”🤔 #Informationsecurity and #security professionals often debate this topic. Thorsten Pollert’s answer: “It’s best to be both - they are equally important.” Well said! But what if you can only afford to be one? I recently shared the stage with Alexandros Manakos, #CEO of Apollon Security to explore this statement. We discussed three key themes and shared real-life stories and examples to highlight the benefits. Our goal: to help others C-Y-A. What does that mean? Challenge - Your - Assumptions regarding Compliance vs Security to obtain the greatest benefits of both. We had three main themes: 👉🏻 Compliance vs Real security - Can you be secure and not compliant? - Can you be compliant and not secure? - Which of the two is easier and why? 👉🏻 Communication vs Operations - What is operational readiness? - What does it take to be secure? - How can this feed compliance - Where are the gaps? 👉🏻 Unity of purpose - How to bridge the silos: Legal, Technical, Operations, and more… - How to avoid "compliance fatigue“ - Why you need the right partners to unify the silos It was an excellent event at HEUKING centered around #DORA and #NIS2 readiness. Why is this important for you? Follow below to know. 👇 https://lnkd.in/eWBC2kvD

88

38 Kommentare

Will you be at ContainerDays Hamburg on the 03-04 September? Are you interested in cloud-native security? Drop into one of four office hours with the author of “Learn CKS + CKA Scenarios” on the Sysdig stand and take the opportunity to ask your burning questions to the expert, Saiyam Pathak. No booking necessary, just come find us on stand C4 and join a session. Plus, all attendees will get a voucher code to download a book of your choice 100% free! 𝗛𝗲𝗿𝗲’𝘀 𝘄𝗵𝗮𝘁 𝘆𝗼𝘂 𝗰𝗮𝗻 𝗲𝘅𝗽𝗲𝗰𝘁 𝗳𝗿𝗼𝗺 𝗲𝗮𝗰𝗵 𝗱𝗿𝗼𝗽 𝘀𝗲𝘀𝘀𝗶𝗼𝗻: 𝗗𝗮𝘆 𝟭 - 𝟭𝟮:𝟯𝟬 / 𝗗𝗮𝘆 𝟮: 𝟭𝟭:𝟬𝟬 - Secure multi-tenancy with vCluster and Falco: Enhancing Kubernetes security and isolation Learn how: ● vCluster provides strong tenant isolation by creating separate virtual clusters ● Falco detects and monitors real-time threats in #Kubernetes environments ● To combine vCluster and Falco to achieve secure multi-tenancy 𝗗𝗮𝘆 𝟭 - 𝟭𝟲:𝟭𝟱 / 𝗗𝗮𝘆 𝟮: 𝟭𝟯:𝟭𝟱 - Ask Me Anything: Mastering the CKS exam with Kubernetes security expert Saiyam Pathak Learn more about: ● The CKS exam structure and key scenarios ● Practical insights into real-world Kubernetes security scenarios covered in Saiyam’s book ● Effective study techniques, including hands-on practice and resource recommendations from the "Let's Learn CKS Scenarios" book

7

Quantum computers got infamous as code breakers, waiting around the corner to put encryption down to its knees. Can they also do good for cryptography? Cryptographic algorithms rely on high-quality random numbers to be secure - and quantum machines are awesome at generating them! How? That's what I'm showing in the first of my upcoming articles about quantum computing for the iX-Magazin! What's in for you? - Get your head around the fundamentals of quantum computing - Develop quantum code in Q# that drives the generation of random numbers - Compare entropy sources in classical and quantum machines - Explore different instruction sets for quantum computers Only few days away from being purchasable in print, you can already read it online at heise online . Check it out: 👉 https://lnkd.in/eytWn-U9

12

2 Kommentare