David García Marín

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗳𝗼𝗿𝘁𝗶𝗳𝘆𝗶𝗻𝗴 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗲 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀 (𝗔𝗗𝗖𝗦) 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 🖥️ Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats. In this series, they describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies. Up next in this series, we're talking about Active Directory Certificate Services (ADCS) attacks - where digital trust becomes a double-edged sword. Read here👉 https://lnkd.in/eRzBAn7i #cybersecurity #activedirectorythreats #adcs #activedirectorycertificateservices #dfir 

16

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗳𝗼𝗿𝘁𝗶𝗳𝘆𝗶𝗻𝗴 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗟𝗗𝗔𝗣 𝗶𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻 𝘁𝗵𝗿𝗲𝗮𝘁𝘀 🖥   Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats. In this series, they describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.     In the latest blog, we're stepping into the world of LDAP-based attacks - where the very protocol designed to streamline directory access can become an attacker’s playground 👉https://lnkd.in/eF88HT73   #cybersecurity #activedirectorythreats #dfir #ldap #cyberattacks 

17

1 comentario

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗺𝗶𝘁𝗶𝗴𝗮𝘁𝗶𝗻𝗴 𝗽𝗮𝘀𝘀-𝘁𝗵𝗲-𝗵𝗮𝘀𝗵 𝗮𝘁𝘁𝗮𝗰𝗸𝘀 𝗶𝗻 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 🖥   Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats. They describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.     Read our latest blog, as we crack open the enigma of pass-the-hash attacks - where the currency of your network's trust becomes a counterfeiter's dream👉 https://lnkd.in/eAbxcfuU   #cybersecurity #activedirectorythreats #dfir #passthehash  

15

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗰𝗼𝗺𝗯𝗮𝘁𝗶𝗻𝗴 𝗸𝗲𝗿𝗯𝗲𝗿𝗼𝗮𝘀𝘁𝗶𝗻𝗴 𝗶𝗻 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 🖥️ In our latest technical blog series, two of our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are highlighting the most prominent Active Directory (AD) threats. The series describes the tell-tale signs that your AD might be at risk, with experienced insight into the best prevention and mitigation strategies.     Up first, let’s dive deep into the nefarious world of kerberoasting 👉 https://lnkd.in/ebspRwJy #cybersecurity #kerbercoasting #activedirectorythreats #DFIR 

22

The government of Paraguay in collaboration with #SOUTHCOM recently completed a joint cyber security review of Paraguayan government networks designed to strengthen the security of the nation’s critical assets. During the review, the cyber espionage actor Flax Typhoon - a group based in the People’s Republic of China with links to the PRC government - was identified infiltrating Paraguayan government systems.   Recent infiltrations of private telecommunications infrastructure in the United States highlight the importance of cooperation and strengthening critical infrastructure - particularly cyber and communications infrastructure - to reduce vulnerabilities. This cyber review was part of ongoing cooperation between the United States and Paraguay to build a more secure and resilient digital infrastructure and address shared challenges in cyberspace. The government of Paraguay and the government of the United States of America will continue to work on strengthening their cybersecurity systems to build and strengthen the national and international system. https://lnkd.in/eeevMXZq

81

1 comentario

🚨 #DDoS 🚨 🇪🇸#Spain: Surge in DDoS Attacks: 26 Claims in the Last 24 Hours Following the arrest of three individuals by Spanish authorities for using the pro-Russian DDoSia platform to attack NATO entities, DDoS attacks by various hacktivist groups have surged, with 26 attacks claimed in the past 24 hour. CyberVolk - July 23 - Basque Parliament shapito666 - July 22 - Constitutional Court of Spain - Parlamento de Galicia - Spanish Road Association (AEC) - Court of Arbitration of Madrid - General Assembly of the Principality of Asturias - Basque Parliament - Spanish Agency for International Development Cooperation - Ministry of Foreign Affairs, European Union and Cooperation HackNeT - July 22 - Madrid Court of Arbitration - Sedigas NetForceZ - July 22 - Ministry of Foreign Affairs, European Union and Cooperation RUSSIAN TASK POWER - July 22 - Trablisa - Nexus Energía, S.A. - Madrid Regional Transport Consortium CyberDragon - July 22 - Parlamento de Galicia - Parlamento de Andalucía - Ministerio de Hacienda - La Moncloa Russian Cyber Army Team - July 22 - National Police of Spain NoName - July 22 - Huelva Port - PortCastelló - Port of Palma de Mallorca - Port Authority of Vigo - Port Authority of Cartagena - Valencia City Council Moreover, a new Russian-speaking hacktivist collective called Holy League is calling on other pro-Russian hacker groups to join forces and direct their full capabilities against Spain's internet infrastructure in support of the detained. Spanish law enforcement video of the devices' seizure during the arrests: https://lnkd.in/dWr--9iF #CyberAttack

3

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗶𝗻𝗴 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗗𝗖𝗦𝘆𝗻𝗰 𝗮𝘁𝘁𝗮𝗰𝗸𝘀 🖥   Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats, describing the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.     In the next instalment of this series, they are exposing the sinister tactics behind DCSync attacks - a stealthy technique that can bring your entire Active Directory to its knees.     Find out more here 👉 https://lnkd.in/enQAkfBv #cybersecurity #activedirectorythreats #DFIR #dcsyncattacks

19

🆕 The NOVA High Threat Response Committee June 2024 Update — +New incidents have been added to the High Threat Incidents Database and the Fire as a Weapon Incidents Database +Resources have been added to the following high threat topics: Active Violence, After-Action Reports, CBRN, and Key Components (Cybersecurity, Intelligence, and Whole of Community) 💻 Want access* to these resources and more? Please submit request here: https://lnkd.in/gNWx726X 💡 For more information on NVERS, please visit: https://www.nvers.org/htr *Access is limited to active first responders and public safety professionals. #highthreat #threat #threats #resources #activeviolence #CBRN #explosives #cybersecurity #intelligence #AAR #nationalsecurity #homelandsecurity #terrorism #extremism #violence #attack #attacks #fireasaweapon #FAW #targetedviolence #publicsafety #firstresponders #wholeofcommunity #resource #resources

6

🚨 ASIT's participation in major global security events in 2024! 🚨 We are excited to review ASIT's successful participation in two major international events this year: 🔐 SICUR Madrid 2024 | March 2024 ASIT proudly participated in SICUR 2024, the International Security Exhibition in Madrid, one of the world's leading events for comprehensive security solutions. Covering critical areas such as cybersecurity, workplace safety and emergency management, ASIT highlighted its role in improving security through innovative tools to combat human trafficking (THB). 🔎UNVEX'24 Barcelona | June 2024 In June, ASIT participated in UNVEX 2024 in Barcelona, where the latest drone technologies in the fight against human trafficking were showcased. Focusing on professional applications, UNVEX showed how advanced technologies such as drones are essential to detect and prevent trafficking networks. We are proud of the impact ASIT continues to have by harnessing state-of-the-art tools and international collaboration to protect vulnerable populations from trafficking. #ASITproject #SICUR2024 #UNVEX2024 #HumanTrafficking #SecuritySolutions #DigitalTools #THB #Cybersecurity #EU #TowardsEUAntiTraffickingDay

1

🚨 Did you catch Europol's latest report? Just a few days ago, Europol published the 10th edition of the Internet Organised Crime Threat Assessment (IOCTA). This report sheds light on the increasingly fragmented and diversified cybercriminal ecosystem. The surge in ransomware-as-a-service, sophisticated targeted cyberattacks, and the rapid adoption of emerging technologies by cybercriminals are posing unprecedented challenges to security. Here are some of the key highlights from the report: - Digital Fraud: The report highlights a significant rise in online and payment fraud schemes. Fraudsters are exploiting vulnerabilities in digital payment systems, posing a growing threat to financial institutions and consumers alike. - Targeted Attacks: High-value targets, including critical infrastructure and large corporations, are increasingly in the crosshairs of cybercriminals. - Ransomware-as-a-Service (RaaS): This model continues to flourish, enabling even low-skilled cybercriminals to carry out sophisticated attacks. - Emerging Technologies: Cybercriminals are leveraging new technologies such as AI, machine learning, and blockchain to enhance operations and evade detection, outpacing traditional security measures. The report emphasises that collaboration and innovation are key as we strive to protect the digital world from these multifaceted cyber threats. Let's unite to strengthen our defenses and stay ahead of cybercriminals. Link to full report in the comments 👇 #ThreatIntelligence #FraudPrevention #EuropolReport

11

1 comentario

🚨 russian Hackers Launch DDoS Attack on Spanish Defense Company 🇪🇸 🔍 Key Points: - Santa Barbara Systems, a subsidiary of General Dynamics, was targeted by a DDoS attack - The company is refurbishing Leopard tanks for delivery to Ukraine 🇺🇦 - Often DDoS attacks can be a distraction tactic to compromise other systems and services ❓ Is your company prepared for cyber attacks? - Do you conduct regular penetration testing? - Or do you assume attacks will bypass you? 📝 Comment below for a link to our website, where we offer services to identify and address vulnerabilities in your IT infrastructure. 🛡️ Don't wait until it's too late - ensure a high level of protection for your company today! https://lnkd.in/dxsjxq3Y

3

1 comentario

The growing threat and globalization of organized crime is a key issue at INTERPOL’s European Regional Conference. Emerging security threats and cyber-enabled crime are also high on the agenda at the meeting in Albania. Read more ⬇️ https://lnkd.in/eZANAVyT

287

5 comentarios

#FiFE24 kicks off today in Madrid! Martina Stevanato and Abel Baños Peña from Amped Software are ready to meet you at our booth. Come by for an engaging discussion about how our forensic solutions can improve your investigative processes. Acquiring #videoevidence and processing it in a forensic manner is no small feat — it demands both technical proficiency and a comprehensive toolkit. This is where #AmpedFIVE comes into play, streamlining your workflow with its powerful features designed for forensic image and video analysis. In addition, don't miss out on learning about #AmpedAuthenticate, for detecting deepfakes and verifying the authenticity of digital images. As deepfake technology becomes more sophisticated, having tools to identify manipulated media is crucial. Whether you're dealing with poor-quality footage or need to measure the height of a suspect or estimate the speed of a vehicle, our solutions can make the difference. Join us today to explore how we can support your journey towards #justicethroughscience. See you at #FiFE24! https://buff.ly/3MzdsbO

32

⚡️New SSSCIP's report on russian cyber operations is out! - updated statistics for H1 2024 - new hacker groups and attack methods - key findings and insights based on comprehensive analysis of actual cases. Learn about these and more in the new report 👇 bit.ly/3ZAeY5h

24

🔍 New Report on Cyber-Related CSAE on ✨ Sparks 🔎 This public document highlights key findings from the CYCLOPES - Cybercrime Law Enforcement Practitioners' Network LEA practitioner workshop held on February 14-15, 2024 in Floriana, Malta. Latest virtual reality (VR) headset technologies coupled with generative artificial intelligence (GAI) present some of the key challenges that LEAs face in fighting grooming and child sexual abuse, largely due to the scale that new material can be produced, its realism and difficulty to distinguish from genuine photographs. It is vital that law enforcement agencies (LEAs) can identify victims quickly, however GAI can create a forest of images, quickly making it far more difficult to identify images of real abuse and therefore identify and safeguard victims quickly. Check out the whole report: https://lnkd.in/dmsBbETc

15

🆕 The NOVA High Threat Response Committee May 2024 Update — +New incidents have been added to the High Threat Incidents Database and the Fire as a Weapon Incidents Database +Resources have been added to the following high threat topics: Active Violence, After-Action Reports, CBRN, Explosives and Key Components (Cybersecurity, Intelligence, Propaganda, Prevention, and Whole of Community) 💻 Want access* to these resources and more? Please submit request here: https://lnkd.in/gNWx726X 💡 For more information on NVERS, please visit: https://www.nvers.org/htr *Access is limited to active first responders and public safety professionals. #highthreat #threat #threats #resources #activeviolence #CBRN #explosives #cybersecurity #intelligence #AAR #nationalsecurity #homelandsecurity #terrorism #extremism #violence #attack #attacks #fireasaweapon #FAW #targetedviolence #publicsafety #firstresponders #resource #resources

2

#SAS #Intelligence #SecurityServices #SouthCorea: The South Korean government has raised its terrorism alert level for five diplomatic missions overseas due to reported threats from North Korea. The alert level was increased from "attention" to "alert" after intelligence authorities obtained information about potential harm to diplomats. The warning level indicates a "high possibility of a terrorist attack." The affected embassies are located in Cambodia, Laos, and Vietnam, while the consulates are in Vladivostok (Russia) and Shenyang (China). North Korea has strong diplomatic relations with these countries, making them potential targets for North Korean operatives. The decision to raise the terrorism alert level is attributed to North Korea's transition to a state of war with South Korea and reduced global engagement. The expert suggests that as the shift to a state of war occurs, the probability of North Korean operatives undertaking actions aligned with wartime circumstances increases. There have been previous instances of suspected North Korean terror activities against South Korean officials overseas, including the bludgeoning of an attache in Vladivostok in 1996. However, no solid evidence supported the notion of a North Korean terrorist plot at the time. Another notable attack was the attempted assassination of the South Korean President in Burma in 1983, where DPRK agents narrowly failed to kill their target. Based on these incidents, it is believed that a defensive North Korean regime is more likely to use terrorism as a provocation. Overall, the heightened alert level reflects concerns about potential terrorist attacks against South Korean officials in these diplomatic missions abroad. #Investigations #Intelligence #Securityservices #Executiveprotection #Securitymanagement #Travelrisk #Travelsecurity #Riskanalysis #Securitylogistic For info: S.A.S. investigations and security Phone: +39 0463 901545 Web: www.sasinvestigation.com Mail. [email protected]

1

As continuos observers in #LATAM region, we've identified in #Chile activity of ransomware groups, such as #Meow, #RansomHub, #Akira, exploting vulnerabilities like listed below: 1. CVE-2018-13379: Vulnerability in Fortinet SSL VPN. 2. CVE-2017-11882: Affects Microsoft Office, allowing remote code execution. 3. CVE-2012-0158: Vulnerability in Microsoft Windows. 4. CVE-2012-0143: Affects Microsoft Excel. 5. CVE-2010-3333: Vulnerability in Microsoft Word. #Cyber #IncidentResponse #MDR #SOC #Malware #Ransomware

3