Ludger Peters

#AI is the double-edged sword in #cybersecurity ⚔️ What happens when this innovation becomes a vulnerability? Jasmin Landry, Security Researcher and HackerOne Pentester put it together quite nicely (check out the quote in the post ⬇️) Two key fronts to consider here: 1️⃣ Security for AI: managing the risks that come with AI deployments. 2️⃣ AI for Security: leveraging AI to detect and manage vulnerabilities faster than ever before. But here’s the kicker: even with cutting-edge AI tools, human expertise is still critical to ensuring trustworthy, secure innovation. In our recent deep dive into AI and vulnerability management, we highlight how security teams are adapting to stay ahead of threats—and what it means for the future. 💬 What’s your take?

8

Finding security vulnerabilities in TLS-Libraries automatically using TLS-Anvil. Check out our new german article in the "IT-SICHERHEIT magazine" or on our cybersecurity blog.  🌐 Hackmanit Blog https://lnkd.in/eYW-VN4E ✅ German magazine article by IT-SICHERHEIT https://lnkd.in/ea-yU_eE 🛠️ TLS-Anvil https://tls-anvil.com/ 🔑 KoTeBi https://www.kotebi.de/en/ #TLS #itsecurity #itsicherheit #cybersicherheit #cybersecurity

3

Anatomy Lesson from the Perspective of a Pentester - Guest Lecture at Johannes Gutenberg University Mainz 🎓 Our colleague Matthias Göhring was once again invited to give a guest lecture at Johannes Gutenberg-Universität Mainz. This time, the topic was “Professional Penetration Testing”. The question arose: What characterizes a good #PenetrationTest and how should it be structured? The lecture also covered topics such as the different types of technical security analyses and the management of #vulnerabilities. Thank you very much for the great event. We look forward to the next one! 📰👉 https://lnkd.in/eTbXTyRi #Pentesting #CyberSecurity #JGUMainz #moresecurity

2

#OTSecurity - Many companies are trying to adapt the concepts of IT security to operational technology - are IT security approaches at all effective or rather counterproductive for the manufacturing industry? Statement von Kai Thomsen, SANS Institute #OperationalTechnology #Cybersecurity #Security #ITSecurity #Fertigung #Industrie SANS Institute #Betriebssicherheit #ITOTKonvergenz #Latency #Manufactoring #Legacy #Compliance Kafka Kommunikation GmbH & Co KG

4

An interesting story (with good insights from Sarah Fluchs) about car models (VW Up and T6.1 as well as three Porsche models) discontinued by their manufacturing because they could not meet the UNECE R 155 transitional regulation. Since the core of this is to "demonstrate that cyber security was adequately considered", the moral of the story is simple: whether it's apps, cars, IoT, AI models, etc., secure by design is a must. #securebydesign #security

8

CVE-2024-9191: #Sicherheitslücke bei #Okta #Gerätezugangssteuerungssoftware "Verify Agent for Windows" ermöglicht Abgriff von #Passwörtern - #Update verfügbar: "The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop MFA passwordless logins. The vulnerability was discovered via routine penetration testing." https://lnkd.in/eAJwP3zk

4

You should know these threats for your #ICS systems. The Bundesamt für Sicherheit in der Informationstechnik (BSI) publishes a list of the top 10 threats every year 🚨 What is your top threat to your #ICS system? You always want to be 💡 up to date 💡 in the field of #automation #technology?  Then activate the 🔔 in my profile and don't miss any posts. Learn more about the Siemens #TIAPortal from experts at GROLLMUS #automatisierungstechnik  #automation  #Grollmus #Cybersecurity

7

Some interesting thoughts on regulation and its actual effects on security in a real world case. Both in the OP and some of the discussion below.

1

Very interesting scenario. This case clearly underlines the growing impact of security regulation in product developement lifecycle and market dynamics. It also highlights a need for clearer and timely communication of such regulatory impacts by the governing body. Thanks for sharing Sarah Fluchs #securitybydesign

1

Researchers at Palo Alto Networks recently discovered the Swiss Army Suite, an automated vulnerability scanning tool, during routine telemetry monitoring. This tool has been used by attackers to scan web services and sites, and evade detection with patterns that bypass common traffic filtering tools. With advanced #MachineLearning models integrated into their #NGFW and Cloud-Delivered Security Services, organizations are protected against these evolving threats, effectively preventing zero-day exploit attempts and detecting SQL injection attacks. More in this report. #SOAR https://hubs.la/Q02Sq41n0

4

🗣️ Attention Linux developers, researchers, and end-users! The Linux Security Summit in Vienna, Austria, 16-17 September is looking for speakers! We need you if you are an expert on: 🔧Security Tools 🔧Security UX 🔧Open Source Supply Chain for the Linux OS 🔧Emerging Technologies, Threats & Techniques 🔧AND MORE 💻 Submit to speak by 19 May: https://hubs.la/Q02rkWBc0. #LinuxSecuritySummit #OpenSource #OSS #CallForProposals #CallForPapers #CFP #CallForSpeakers #LinuxFoundation #events #OpenSourceDevelopment #OpenSourceCommunity #linux #security #UXSecurity #EmbeddedSecurity #IoTSecurity #OpenSourceSecurity #LinuxSecurity

38

We found several vulnerabilities in the Open Source Content Management System Bludit, which is used to create websites and blogs. This advisory explains the vulnerabilities and proposes possible fixes and mitigations: https://lnkd.in/diUxkrXc

9

This post summarizes a lot of the other posts I’ve written about setting up pfSense in one place with limited screenshots. Will test more with UDM Pro in upcoming posts. If you are trying to improve the security of your home network check it out. https://lnkd.in/dsecikqG

3

1 Kommentar

666 PhishingKit Yara rules are now available for free! How to use these, with Cisco ClamAV for example: https://lnkd.in/epWFrgzU

2

😃check out what security consultants and the business, can do to revise approaches, promote better engagement, build better rapport, bring greater value to the process, along with avoiding some of the common mistakes that we’ve all been known to make! 👀😎

2

‘Serious hacker attack’ forces Frankfurt university to shut down IT systems. Why it matters: 1. The recent cyber attack on the Frankfurt University of Applied Sciences affirms Germany's universities, particularly those offering courses in applied sciences, as targets for hacking attempts - potentially disrupting education and research. 2. The attack reveals cybercriminals' growing capability to infiltrate even well-protected systems; the university's inability to estimate its extent suggests hackers may have accessed critical parts of its infrastructure, impacting services and communication. 3. Ongoing attacks against universities not only threaten institutional operations but also disrupt students' lives, emphasizing the need for increased cybersecurity measures. Recent incidents show hackers' potential to affect a broad range of services, from enrollment to building access, underscoring the urgent need for comprehensive and robust cyber defenses. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/eMvwyPvV

6