Mike Räder
Blatzheim, Nordrhein-Westfalen, Deutschland
285 Follower:innen
283 Kontakte
Aktivitäten
-
I'm excited to be attending Trimble Dimensions 2024, November 11-13 in Las Vegas, where I'll connect with like-minded peers, pros, customers and…
I'm excited to be attending Trimble Dimensions 2024, November 11-13 in Las Vegas, where I'll connect with like-minded peers, pros, customers and…
Beliebt bei Mike Räder
-
Ich möchte „Danke“ sagen… Im Frühjahr 2018, ich weis es noch ganz genau, kam mein älterer Bruder zu mir und fragte mich, ob ich Lust hätte, noch…
Ich möchte „Danke“ sagen… Im Frühjahr 2018, ich weis es noch ganz genau, kam mein älterer Bruder zu mir und fragte mich, ob ich Lust hätte, noch…
Beliebt bei Mike Räder
-
I quit my job. It was the biggest salary I ever made in my life. My personal income went to $0. I threw away 66% of my belongings. My wife did…
I quit my job. It was the biggest salary I ever made in my life. My personal income went to $0. I threw away 66% of my belongings. My wife did…
Beliebt bei Mike Räder
Berufserfahrung
Ausbildung
Bescheinigungen und Zertifikate
Sprachen
-
Deutsch
Muttersprache oder zweisprachig
-
Englisch
Verhandlungssicher
-
Französisch
Grundkenntnisse
-
Spanisch
Grundkenntnisse
Weitere ähnliche Profile
Weitere Beiträge entdecken
-
Christoph Puppe
Heads Up, Linux Folks! Zero-Day Unauthenticated RCE Coming Soon Remember Heartbleed? Shellshock? Well, buckle up because another Linux vulnerability is about to hit the headlines. This one is a doozy - unauthenticated remote code execution (RCE). That means an attacker doesn't even need to log in to take control of your system. Mark your calendars: this zero-day is set for public release on September 30th. What could be the possible Impact? * Complete system takeover: Think of it as giving an attacker the keys to your kingdom. They can install malware, steal data, disrupt operations, and more. * Widespread exploitation: This type of vulnerability is a prime target for attackers looking to exploit large numbers of systems quickly. * Difficult to detect: Unauthenticated RCEs are often challenging to identify, allowing attackers to operate undetected for extended periods. What Can You Do? * Patch ASAP: Once patches are available, apply them immediately. This is your first and best line of defense. * Monitor for suspicious activity: Keep an eye out for any unusual behavior on your systems. * Implement defense-in-depth: Don't rely on a single security measure. Use multiple layers of protection to minimize the impact of a breach. Stay tuned for more updates as we get closer to the release date. And remember, in the world of cybersecurity, vigilance is key. #Linux #Cybersecurity #ZeroDay #RCE #Infosec
3 Kommentare -
Prof. Dr. Dennis-Kenji Kipker
CVE-2024-9191: #Sicherheitslücke bei #Okta #Gerätezugangssteuerungssoftware "Verify Agent for Windows" ermöglicht Abgriff von #Passwörtern - #Update verfügbar: "The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop MFA passwordless logins. The vulnerability was discovered via routine penetration testing." https://lnkd.in/eAJwP3zk
-
Adrian Sameli
🔐 Fortinet at Area41: Unlocking Cybersecurity Excellence! 🔐 🗓️ When: June 6-7, 2024 📍 Where: Komplex457, Zürich 🎟️ Tickets: On sale April 26th, 16:00 CEST 🚀 Fortinet, a global leader in cybersecurity solutions, is thrilled to be part of Area41. Here’s why you should swing by our booth: 1) Portfolio Insights: Dive into our cutting-edge portfolio. Discover how Fortinet’s solutions can safeguard your organization against evolving threats. 2) Win Cool Swag: Participate in our giveaway and walk away with exclusive Fortinet gear. 🎁 3) Meet Our Experts: Chat with our cybersecurity experts. Whether you’re curious about network security, threat intelligence, or zero-trust architecture, we’ve got answers. 4) Live Demos: Witness our solutions in action. From secure SD-WAN to advanced threat detection, we’ve got demos that’ll leave you impressed. 🔗 Learn more and register: https://a41con.ch/ See you at Area41! 🕶️🔐👾 Laurent Cohn Roger Christen Lukas Hofer Ruedi Kubli
-
William Collins
Tageszusammenfassung - 16.08.2024 by CERT.at via CERT.at - Tagesberichte ([Global] Data Breach) URL: https://ift.tt/wAjQZT0 End-of-Day report Timeframe: Mittwoch 14-08-2024 18:00 - Freitag 16-08-2024 18:00 Handler: Alexander Riepl Co-Handler: n/a News Opinion: More layers in malware campaigns are not a sign of sophistication Ten infection and protection layers to deploy malware sounds impressive and very hard to deal with. However, adding more layers counterintuitively does the opposite for antivirus evasion and is not a sign of sophistication. Why is that so? https://lnkd.in/g9RmBUaU Ailurophile: New Infostealer sighted in the wild We discovered a new stealer in the wild called "Ailurophile Stealer-. The stealer is coded in PHP and the source code indicates potential Vietnamese origins. It is available for purchase through a subscription model via its own webpage. Through the .. https://lnkd.in/gRXERDVm Tusk: unraveling a complex infostealer campaign Kaspersky researchers discovered Tusk campaign with ongoing activity that uses Danabot and StealC infostealers and clippers to obtain cryptowallet credentials and system data. https://lnkd.in/gv-uMFnE PrestaShop GTAG Websocket Skimmer During a recent investigation we uncovered another credit card skimmer leveraging a web socket connection to steal credit card details from an infected PrestaShop website.While PrestaShop is not the most popular eCommerce solution for online stores it is still in the top 10 most common ecommerce platforms in use on the web, and clocks in at just .. https://lnkd.in/gRWzinBk Ransomware Attacks on Industrial Firms Surged in Q2 2024 Dragos has seen a significant increase in ransomware attacks on industrial organizations in Q2 2024 compared to the previous quarter. https://lnkd.in/g38TJYmp Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments We recount an extensive cloud extortion campaign leveraging exposed .env files of at least 110k domains to compromise organizations AWS environments. https://lnkd.in/gW2EQaPH New infostealer targets macOS devices, appears to have Russian links Researchers have discovered new information-stealing malware labeled Banshee Stealer that is designed to breach Apple computers. https://lnkd.in/gYZRV2XD Iranian backed group steps up phishing campaigns against Israel, U.S. Google-s Threat Analysis Group shares insights on APT42, an Iranian government-backed threat actor. https://lnkd.in/gKpjcGWv Ransomware Prevention Guide for Mana...
-
Amirhossein Rashidi
#crowdstrike has provided the following workaround steps for affected systems: 1️⃣ Boot Windows into Safe Mode or the Windows Recovery Environment. 2️⃣ Navigate to the C:\Windows\System32\drivers\CrowdStrike directory. 3️⃣ Locate and delete the file matching “C-00000291*.sys”. 4️⃣ Boot the host normally.
-
John Sotiropoulos
An interesting story (with good insights from Sarah Fluchs) about car models (VW Up and T6.1 as well as three Porsche models) discontinued by their manufacturing because they could not meet the UNECE R 155 transitional regulation. Since the core of this is to "demonstrate that cyber security was adequately considered", the moral of the story is simple: whether it's apps, cars, IoT, AI models, etc., secure by design is a must. #securebydesign #security
-
William Collins
Tageszusammenfassung - 16.08.2024 by CERT.at via CERT.at - Tagesberichte ([Global] Security Breach) URL: https://ift.tt/wAjQZT0 End-of-Day report Timeframe: Mittwoch 14-08-2024 18:00 - Freitag 16-08-2024 18:00 Handler: Alexander Riepl Co-Handler: n/a News Opinion: More layers in malware campaigns are not a sign of sophistication Ten infection and protection layers to deploy malware sounds impressive and very hard to deal with. However, adding more layers counterintuitively does the opposite for antivirus evasion and is not a sign of sophistication. Why is that so? https://lnkd.in/g9RmBUaU Ailurophile: New Infostealer sighted in the wild We discovered a new stealer in the wild called "Ailurophile Stealer-. The stealer is coded in PHP and the source code indicates potential Vietnamese origins. It is available for purchase through a subscription model via its own webpage. Through the .. https://lnkd.in/gRXERDVm Tusk: unraveling a complex infostealer campaign Kaspersky researchers discovered Tusk campaign with ongoing activity that uses Danabot and StealC infostealers and clippers to obtain cryptowallet credentials and system data. https://lnkd.in/gv-uMFnE PrestaShop GTAG Websocket Skimmer During a recent investigation we uncovered another credit card skimmer leveraging a web socket connection to steal credit card details from an infected PrestaShop website.While PrestaShop is not the most popular eCommerce solution for online stores it is still in the top 10 most common ecommerce platforms in use on the web, and clocks in at just .. https://lnkd.in/gRWzinBk Ransomware Attacks on Industrial Firms Surged in Q2 2024 Dragos has seen a significant increase in ransomware attacks on industrial organizations in Q2 2024 compared to the previous quarter. https://lnkd.in/g38TJYmp Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments We recount an extensive cloud extortion campaign leveraging exposed .env files of at least 110k domains to compromise organizations AWS environments. https://lnkd.in/gW2EQaPH New infostealer targets macOS devices, appears to have Russian links Researchers have discovered new information-stealing malware labeled Banshee Stealer that is designed to breach Apple computers. https://lnkd.in/gYZRV2XD Iranian backed group steps up phishing campaigns against Israel, U.S. Google-s Threat Analysis Group shares insights on APT42, an Iranian government-backed threat actor. https://lnkd.in/gKpjcGWv Ransomware Prevention Guide for ...
-
Stanislav Katran
Recommended Mitigations 1) Boot Windows into Safe Mode 2) Navigate to the directory C:\Windows\System32\drivers\CrowdStrike 3) Locate the file matching C-00000291*.sys and delete it 4) Boot the host normally Note: You can also boot in Windows Recovery Environment (WinRE) #crowdstrikefriday
-
Cyver.io
#AI is the double-edged sword in #cybersecurity ⚔️ What happens when this innovation becomes a vulnerability? Jasmin Landry, Security Researcher and HackerOne Pentester put it together quite nicely (check out the quote in the post ⬇️) Two key fronts to consider here: 1️⃣ Security for AI: managing the risks that come with AI deployments. 2️⃣ AI for Security: leveraging AI to detect and manage vulnerabilities faster than ever before. But here’s the kicker: even with cutting-edge AI tools, human expertise is still critical to ensuring trustworthy, secure innovation. In our recent deep dive into AI and vulnerability management, we highlight how security teams are adapting to stay ahead of threats—and what it means for the future. 💬 What’s your take?
-
Michael S. Oberlaender - PREMIER CISO
#German major opposition party hit by #CyberAttack #InfoSec #CyberSecurity #Security #CSO #CISO #CEO #CLO #CRO #CIO #CTO #CMO #Cyber #BSI #BMI #Bund #Hacking #attribution is always hard to impossible, but would love to know who's behind this one, as the elections for the EU parliament are coming in days. #CyberWar #Infiltration #ElectionSecurity #CDU https://lnkd.in/gsCQ4Ndx
2 Kommentare -
usd AG international
Anatomy Lesson from the Perspective of a Pentester - Guest Lecture at Johannes Gutenberg University Mainz 🎓 Our colleague Matthias Göhring was once again invited to give a guest lecture at Johannes Gutenberg-Universität Mainz. This time, the topic was “Professional Penetration Testing”. The question arose: What characterizes a good #PenetrationTest and how should it be structured? The lecture also covered topics such as the different types of technical security analyses and the management of #vulnerabilities. Thank you very much for the great event. We look forward to the next one! 📰👉 https://lnkd.in/eTbXTyRi #Pentesting #CyberSecurity #JGUMainz #moresecurity
-
Pascal Aebi
It seems that Microsoft and security is an oxymoron (source website is in German) https://lnkd.in/eNX587ci You should also follow the link to the article "US cyber expert: Microsoft is a national security risk" and check the video here: https://lnkd.in/eSVHcte2
-
Sergio Albea
𝐊𝐐𝐋 𝐐𝐮𝐞𝐫𝐲 𝐨𝐟 𝐭𝐡𝐞 𝐰𝐞𝐞𝐤 🔗 "UrlHaus Abuse.ch Hits in Microsoft Teams" Based on my previous query of the Advent Calendar (https://lnkd.in/eVmD-GSm) to get URL's sent on a M.Teams chat, I went to one of the queries created by my colleague Benjamin Zulliger related to detect malicious URL based on UrlHaus Abuse.ch. Therefore, this Query is oriented to identify Malicious URL sent via Microsoft Teams and detect possible hits. KQL Query: (remove the spaces in the URL 🚨 ) //UrlHaus Abuse.ch Hits in Microsoft Teams let URLHausOnlineRAW = externaldata (UHFeed:string) ["https:// urlhaus.abuse.ch /downloads/csv_online/"] with(format="txt") | where UHFeed !startswith "#" | extend UHRAW=replace_string(UHFeed, '"', '') | project splitted=split(UHRAW, ',') | mv-expand id=splitted[0], dateadded=splitted[1], UHUrl=splitted[2], UHurl_status=splitted[3], UHlast_onlin=splitted[4], UHthreat=splitted[5], UHtags=splitted[6], UHLink=splitted[7], UHReporter=splitted[8] | extend UHUrl = tostring(UHUrl); CloudAppEvents | where Application has "Microsoft Teams" | extend MessageURLs = tostring(todynamic(RawEventData).MessageURLs) | extend MessageURLs_ = substring(MessageURLs, 2, strlen(MessageURLs) - 4) | join kind=inner URLHausOnlineRAW on $left.MessageURLs_ == $right.UHUrl #threathunting #kqlquery #microsoftTeams
-
Ditikrushna Giri
𝗘𝘅𝗰𝗶𝘁𝗶𝗻𝗴 𝗡𝗲𝘄𝘀! 🚀 Last year, I joined Dr. Tobias Lieberum and Prabhakar Mishra's team to build a solution that solves the critical issues surrounding identity-based vulnerabilities. Today, after extensive development and invaluable input from our early customers, CyberDesk is unveiling its identity-centric data security platform to the general public! Identity-based vulnerabilities are the leading cause of data breaches, and CyberDesk's solution minimizes data access for any identity at any time while ensuring business operations remain unaffected. We provide the transparency and control organizations need to safeguard their data effectively. Learn more about our mission and how we're addressing these challenges at: https://www.cyberdesk.app/ #Cybersecurity #AI #IdentityManagement #DataProtection #CyberDesk
3 Kommentare -
Stefan Trimborn
Will you be at ContainerDays Hamburg on the 03-04 September? Are you interested in cloud-native security? Drop into one of four office hours with the author of “Learn CKS + CKA Scenarios” on the Sysdig stand and take the opportunity to ask your burning questions to the expert, Saiyam Pathak. No booking necessary, just come find us on stand C4 and join a session. Plus, all attendees will get a voucher code to download a book of your choice 100% free! 𝗛𝗲𝗿𝗲’𝘀 𝘄𝗵𝗮𝘁 𝘆𝗼𝘂 𝗰𝗮𝗻 𝗲𝘅𝗽𝗲𝗰𝘁 𝗳𝗿𝗼𝗺 𝗲𝗮𝗰𝗵 𝗱𝗿𝗼𝗽 𝘀𝗲𝘀𝘀𝗶𝗼𝗻: 𝗗𝗮𝘆 𝟭 - 𝟭𝟮:𝟯𝟬 / 𝗗𝗮𝘆 𝟮: 𝟭𝟭:𝟬𝟬 - Secure multi-tenancy with vCluster and Falco: Enhancing Kubernetes security and isolation Learn how: ● vCluster provides strong tenant isolation by creating separate virtual clusters ● Falco detects and monitors real-time threats in #Kubernetes environments ● To combine vCluster and Falco to achieve secure multi-tenancy 𝗗𝗮𝘆 𝟭 - 𝟭𝟲:𝟭𝟱 / 𝗗𝗮𝘆 𝟮: 𝟭𝟯:𝟭𝟱 - Ask Me Anything: Mastering the CKS exam with Kubernetes security expert Saiyam Pathak Learn more about: ● The CKS exam structure and key scenarios ● Practical insights into real-world Kubernetes security scenarios covered in Saiyam’s book ● Effective study techniques, including hands-on practice and resource recommendations from the "Let's Learn CKS Scenarios" book
Weitere Mitglieder namens Mike Räder in Deutschland
-
Michael Rader
Director @ MIRA-TECH
-
Mike Rader
--
-
Michael Räder
Real Estate Professional
-
Michael Räder
MDI-DE
Es gibt auf LinkedIn 15 weitere Personen namens Mike Räder, die sich in Deutschland befinden.
Weitere Mitglieder anzeigen, die Mike Räder heißen