Jascha Wachsmuth-Temme

Want to learn more about the core functions of the NIST Cybersecurity Framework 2.0? Read the latest IJIS Institute JusticeGuardian publication from the Cybersecurity Working Group revolving around the function "Respond." Get an in-depth explanation of how this function helps organizations minimize the impact of incidents, improve their resilience, and restore normal operations as soon as possible. Learn more now: https://lnkd.in/ey8HxkUt #CybersecurityAwarenessMonth #NISTCSF

9

In this publication you can read about anti-money laundering tools and techniques, forensic investigations and financial audits, etc. https://lnkd.in/dK_JD3Vh #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

2

How does open-source information differ from OSINT? Guidehouse's OSINT Director, Melisa Stivaletti, dives into it in a recent conversation with Eric B. from IT Audit Labs. Learn more about Guidehouse's defense and intelligence expertise: https://lnkd.in/e_NijQVh

35

🚨 Turkey Blocks VPNs Amidst Instagram Ban! 🚨 In a significant move, Turkey has started blocking VPN services following the ban on Instagram, aimed at controlling social media access and curbing dissent. Key Points: Turkish authorities have restricted major VPN services to enforce the Instagram ban. This decision impacts millions of users relying on VPNs for privacy and unrestricted access. Critics argue this is an attempt to suppress free speech and digital freedom. Read more: Turkey Blocks VPNs Amidst Instagram Ban. (https://lnkd.in/e_cgJ3Qd) 🔍 Your Thoughts? How do you view this development? Comment below! ______________________ My name is Dot and my role here is to sift through the cyber noise and bring you clear, actionable insights making this complex cyber world a little easier to navigate. Stay on top of the latest happenings in Information Security with our experts' curated News, Updates, and Insights. Delivered every Monday and Thursday! 🔒 Sign up for free: https://lnkd.in/e6aSn8r9 ♻️ Repost this to keep your network updated. Thank you! #cybersecurity #informationsecurity #Cyber #infosec #cybersecuritynews #DigitalRights #FreeSpeech #TechNews

2

1 Kommentar

Threat Intelligence impact on geopolitical risk management https://lnkd.in/gCTbnwdi Chris S. CYJAX #ThreatIntelligence #GeopoliticalRisk #RiskManagement #SecurityAnalysis #GlobalSecurity

2

European Union Agency for Cybersecurity (ENISA) Threat Landscape 2024 Overview: The ETL is a vital tool for strategic decision-makers, cybersecurity professionals, and policymakers to understand the latest trends and prepare for upcoming challenges. Prime Cybersecurity Threats in 2024: 1. Ransomware: Threat actors increasingly use multiple extortion techniques, including data exposure. 2. Malware: Broadly defined as software intended to compromise system security, malware remains a critical threat, especially in the form of Malware-as-a-Service (MaaS). 3. Social Engineering: Exploiting human error through phishing, spear-phishing, and other manipulation tactics remains a key attack vector. 4. Data Threats: Both data breaches (intentional attacks) and data leaks (accidental exposures) are on the rise, impacting organizations' sensitive information. 5. Denial of Service (DDoS): These attacks disrupt system availability and continue to pose significant threats to critical infrastructure and public services. 6. Information Manipulation and Interference: This involves misinformation campaigns, particularly in geopolitical contexts. 7. Supply Chain Attacks: While fewer supply chain incidents were publicly reported, the threat remains significant due to potential vulnerabilities in open-source projects and infrastructure. Key Trends in the Cyber Threat Landscape: - Threats against availability (DDoS) and ransomware rank as the top threats. - Increased use of Living Off Trusted Sites (LOTS), where attackers exploit trusted platforms like Slack or Telegram to evade detection. - Rising cases of Business Email Compromise (BEC) and extortion through data exposure. - AI tools such as FraudGPT are increasingly used by cybercriminals. - Surge in mobile banking trojans and more complex attack vectors. The ETL categorizes threat actors into: 1. State-nexus actors: Engaged in espionage and disruption, often linked to military or intelligence organizations. 2. Cybercrime actors: Motivated by financial gain, employing ransomware and other criminal tactics. 3. Private Sector Offensive Actors (PSOA): Entities that develop and sell cyberweapons, increasingly involved in espionage and targeted attacks. 4. Hacktivists: Politically or ideologically motivated groups leveraging cyberattacks for social disruption. The most targeted sectors were public administration, finance, and transport, with significant attacks also observed against digital infrastructure and business services. Vulnerabilities and Defensive Challenges: ENISA observed 19,754 vulnerabilities, with 9.3% categorized as critical. Vulnerabilities in edge devices and Remote Monitoring and Management (RMM) software, like ScreenConnect, were particularly exploited. Recommendations: ENISA emphasizes the importance of vulnerability management, incident response planning, and awareness training to mitigate the evolving threat landscape. #InfoSec #InformationSecurity #CyberSecurity #CyberSec

8

The European Commission has asked ENISA to launch the process for standing up a #cybersecurity scheme for EU Digital Identity Wallets and the digital IDs they carry, with reference to the Cybersecurity Act. https://lnkd.in/di2YTSPQ #sccybersecurity #tprm #riskassessment #cyberrisk #supplychainrisk #riskmanagement #supplychainsecurity #ciso #securitycompliance #grc

8

1 Kommentar

🎥 Recap: Why Digital Forensics is Critical for Enterprises – Protecting Assets and Mitigating Risks In partnership with Exterro, we hosted a dynamic Round Table Discussion exploring the vital role of Digital Forensics in safeguarding enterprise assets and mitigating risks in today’s technology-driven world. This highly engaging session brought together leading experts, forensic specialists, and business leaders to delve into the evolving landscape of digital forensics and its indispensable value for modern enterprises. 💡 Key Insights from the Discussion: ✅ How digital forensics aids in detecting and responding to cyber threats. ✅ The importance of forensic investigations in minimizing legal and financial risks. ✅ Real-world examples of leveraging forensics to protect critical business assets. ✅ Future trends in digital forensics tools and technologies. The conversation reinforced the growing need for enterprises to adopt robust forensic strategies to proactively address challenges, from cybersecurity incidents to compliance and legal investigations. We are excited to share the highlights video from the event, capturing the rich discussions and invaluable expertise shared by our panelists. 👉 Watch the Highlights Here: https://lnkd.in/gCsCuZpt For access to the full hybrid video, request at [email protected] A big thank you to Exterro for sponsoring this important discussion and to all our participants for their thoughtful contributions. How is your organization leveraging digital forensics to mitigate risks and secure its assets? Share your thoughts below! #DigitalForensics #EnterpriseRiskManagement #CyberSecurity #RoundTableDiscussion #Exterro #ProtectingAssets #BusinessContinuity Pankaj Parnami Events 4 Sure Sanjul Kushwaha

2

With so many options available, what OSINT-related API keys should you get for people investigations? Luke (hakluke) Stephens gives his top 5 API keys in this article for SpiderFoot👇 🔗 https://lnkd.in/gf2_UX-t (This article was written by HackerContent! If you need cybersecurity-focused content like this for your organisation, get in touch today: hackercontent.com)

1

5️⃣ reasons why report writing is a critical skill for penetration testers: https://offs.ec/3Jjcjn8 ⑴ Documentation of findings: A penetration tester must document all identified vulnerabilities, the methods used to exploit them, and the potential impact on the organization. This documentation helps in understanding the risk level and in planning the mitigation. ⑵ Communication with different stakeholders: Penetration testers must communicate their findings to a diverse audience, including technical teams, management, and sometimes external stakeholders. Reports need to be clear and concise, providing both technical details and a high-level overview suitable for non-technical readers. ⑶ Actionable recommendations: Along with identifying vulnerabilities, penetration testers must provide actionable recommendations for remediation. A well-written report includes prioritized recommendations that guide the organization in addressing the most critical vulnerabilities first. ⑷ Compliance and legal requirements: Many organizations are required to conduct regular penetration tests to comply with industry regulations and standards. Detailed reports are necessary to demonstrate compliance and may be scrutinized during audits. ⑸ Continuous improvement: Reports also serve as a record for tracking the organization’s security improvements over time. By documenting the findings and remediation efforts, an organization can monitor its progress in strengthening its security posture.

83

2 Kommentare

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Kommentar

This time we focused on USB Forensics - inside you will find three excellent articles on the topic, as well as a host of other pieces covering different fields https://lnkd.in/diQr87b6 #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

1

🔥 High risk vulnerability detected in Cilium! 🚨 The issue lies in CIDR deny policies not taking effect when a more narrow CIDR allow is present. This could lead to unauthorized access. CVE number is pending. The issue has been patched in Cilium v1.14.16 and v1.15.10. Stay safe and update your systems! #Cilium #Vulnerability #OWASP #API #Security https://lnkd.in/evTk5Bgm

1