Jonas Schneidewind

Anatomy Lesson from the Perspective of a Pentester - Guest Lecture at Johannes Gutenberg University Mainz 🎓 Our colleague Matthias Göhring was once again invited to give a guest lecture at Johannes Gutenberg-Universität Mainz. This time, the topic was “Professional Penetration Testing”. The question arose: What characterizes a good #PenetrationTest and how should it be structured? The lecture also covered topics such as the different types of technical security analyses and the management of #vulnerabilities. Thank you very much for the great event. We look forward to the next one! 📰👉 https://lnkd.in/eTbXTyRi #Pentesting #CyberSecurity #JGUMainz #moresecurity

2

Finding security vulnerabilities in TLS-Libraries automatically using TLS-Anvil. Check out our new german article in the "IT-SICHERHEIT magazine" or on our cybersecurity blog.  🌐 Hackmanit Blog https://lnkd.in/eYW-VN4E ✅ German magazine article by IT-SICHERHEIT https://lnkd.in/ea-yU_eE 🛠️ TLS-Anvil https://tls-anvil.com/ 🔑 KoTeBi https://www.kotebi.de/en/ #TLS #itsecurity #itsicherheit #cybersicherheit #cybersecurity

3

#AI is the double-edged sword in #cybersecurity ⚔️ What happens when this innovation becomes a vulnerability? Jasmin Landry, Security Researcher and HackerOne Pentester put it together quite nicely (check out the quote in the post ⬇️) Two key fronts to consider here: 1️⃣ Security for AI: managing the risks that come with AI deployments. 2️⃣ AI for Security: leveraging AI to detect and manage vulnerabilities faster than ever before. But here’s the kicker: even with cutting-edge AI tools, human expertise is still critical to ensuring trustworthy, secure innovation. In our recent deep dive into AI and vulnerability management, we highlight how security teams are adapting to stay ahead of threats—and what it means for the future. 💬 What’s your take?

8

🚀 DevSecCon Germany Sebastian Roth and Ardit Beu present “Using Threat Modeling to Create a DevSecOps Plan” with Mohamed AboElKheir! 🚀 Join us to learn practical approaches and best practices for embedding robust security measures into your workflow from the outset. 🗓 Event Details: • Date: 30th July • Time: 12pm CEST • Location: Virtual (Join from anywhere!) In this session, we will illustrate the importance of initiating the security planning process with a comprehensive threat model. This foundational step is essential for devising a strategic plan to select, implement, and configure the most suitable security tools. By proactively identifying potential threats and vulnerabilities, we can ensure that these tools effectively mitigate identified risks. Furthermore, we will discuss the integration of these tools into various stages of the development pipeline, thereby enhancing the overall security and resilience of your systems. Key Takeaways: • Foundational Importance of Threat Modeling: Understand why starting with a thorough threat model is critical for strategic security planning. • Early Identification of Threats and Vulnerabilities: Learn how early detection ensures that security tools are effectively aligned with identified risks. • Strategic Selection and Implementation of Security Tools: Gain insights into selecting, implementing, and configuring the most appropriate security tools based on the threat model. • Seamless Integration into Development Pipeline: Discover best practices for integrating security tools into different stages of the development pipeline. • Enhancing Security and Resilience: Explore methods to bolster the overall security and resilience of your systems through strategic planning and tool integration. Don’t miss this opportunity to learn from an expert in the field and network with fellow professionals! 🔗 Register now to secure your spot and be part of this insightful event. We look forward to seeing you there!

37

3 Kommentare

Bundesamt für Sicherheit in der Informationstechnik (BSI)'s 20th German IT Security Congress kicked off today, highlighting the growing issue of cyberattacks. According to the IBM X-Force Threat Intelligence Index 2024, hacks via stolen or compromised credentials have surged by 71% year-over-year. The manufacturing industry, at 28%, bears the brunt of attacks in Europe. To gain an edge in the cat-and-mouse game against hackers, cybersecurity experts increasingly leverage #blockchain for its immutability and tamper-proofing features. Other #CyberSecurityTrends2024 gaining traction include #ZeroTrust frameworks, the Secure Access Service Edge (#SASE), and proactive AI risk mitigation. Additionally, alliances form to foster resilient IT infrastructures. And who better to speak on #IndustrialSecurity strategies than the renowned K5 chief detective inspector Daniel Lorch? Mark your calendar for 23 May 2024, when the expert will share insider knowledge at our "SPS Technology Talk". Register for free (German only): sps.digital.mesago.com #SPS_live #BringingAutomationToLife

4

We found several vulnerabilities in the Open Source Content Management System Bludit, which is used to create websites and blogs. This advisory explains the vulnerabilities and proposes possible fixes and mitigations: https://lnkd.in/diUxkrXc

9

🚨 #Cybersecurity Alert: The German Federal Office for Information Security (BSI) has uncovered serious vulnerabilities in the social media platform Mastodon and some minor ones in the messenger service Matrix. 🛡️ Key findings: - Mastodon v4.1.6 had two high-risk vulnerabilities, CVE-2023-46950 & CVE-2023-46951, allowing potential compromise of user data. - Matrix's issues were less severe but included unprotected uploaded files and session management concerns. The BSI's proactive approach to identifying and informing developers of these issues underscores the importance of regular code audits and vulnerability management. As we rely more on open-source software, such initiatives are crucial for maintaining trust and security in digital communication tools. Are you keeping your platforms secure? Share your best practices for software security below! 🔐 #InfoSec #OpenSource #DigitalSecurity #Mastodon #Matrix #VulnerabilityManagement [Original source in the comments 👇]

We are very proud to introduce our #BSidesMunich2024 closing keynote speaker, Bettina Haas! She coordinates cybersecurity assessments and cybersecurity projects in a global organization, driving red teaming, penetration testing and process assessments at strategic and operational levels. In her closing keynote, she will explore the following questions: How to keep penetration testers motivated in a fast-changing environment, continuously increasing technological complexity and high pressure due to limited time and budget? How to cultivate trust, collaboration and professional growth within pentesting teams? How to foster appropriate communication of findings in a “top secret world”? Learn more under: https://lnkd.in/dNDMx_CH BSidesMunich 8-Bit :: Forged by HI

12

We open the issue with an interview with Magda Chelly, who will tell you about how she got started in cybersecurity and how she got to the top. https://lnkd.in/d2-QwCpr #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

2

Are you new to cybersecurity? Ever heard of penetration tests? Our colleague Jonas will share some valuable insights on October 10th! In cooperation with our friends at DInO | Digital Innovation Ostbayern, Jonas will introduce you into the realms of cybersecurity. Learn about penetration tests and how they will help making your products safer! Best part about it? It's totally free to join! So what are you waiting for?

6

Splunk Enterprise Directory Traversal (CVE-2024-36991) Snort rules are now available to detect directory traversal attempts. https://lnkd.in/eXiWm8cg Idappcom's existing rules customers will receive this update automatically. #cybersecurity #security #cyberattack #exploits

1

🚨 Security Advisory: Important CVEs Disclosed 🚨 Hi Envoy Community, We would like to inform you about the following Common Vulnerabilities and Exposures (CVEs) identified in Envoy: 🔒 CVE-2024-45807: oghttp2 crash on OnBeginHeadersForStream 🔒 CVE-2024-45808: Malicious log injection via access logs 🔒 CVE-2024-45806: Potential manipulation of x-envoy headers from external sources 🔒 CVE-2024-45809: JWT filter crash in the clear route cache with remote JWKs 🔒 CVE-2024-45810: Envoy crashes for LocalReply in HTTP async client 🔧 Resolutions Coming Soon: These issues will be addressed in the following Envoy releases: - v1.31.2 - v1.30.6 - v1.29.9 - v1.28.7 🔗 Release Information: The updates will be available on our Releases Page starting today. 📖 Documentation: For detailed guidance, please refer to our Envoy Documentation. 🔄 Upgrade Recommendation: We strongly encourage all users to update to the latest versions of Envoy to ensure security and stability. 🔍 Ongoing Improvements: A pull request addressing these vulnerabilities has been initiated on the main branch. Thank you for your attention and continued support. ♻ REPOST this to help other Envoy users stay on top of Envoy News. #EnvoyProxy #Kubernetes #Security #CVE #DevOps #CloudNative #OpenSource #CyberSecurity

6

🚨 The recent hacker attack on the IT system at the University of Dusseldorf, resulting in the theft and downloading of data, sadly mirrors a troubling trend in the German academic sector. Leveraging intrusion detection systems proved pivotal in uncovering the breach, underscoring the importance of deploying comprehensive security measures. To preempt such incidents, it's imperative for institutions to actively and continuously assess and validate their IT security infrastructure, ensuring a thorough understanding of actual exploitable vulnerabilities rather than relying on assumptions. What do you think? What could be done in order to prevent this? Read the post 👇 https://lnkd.in/dcytnAtf

5

2 Kommentare