Borja Lanseros

Great news: the Spanish certification authority has renewed its confidence in Stormshield Network Security firewalls! In 2020, Stormshield Network Security (SNS) products became the first firewalls to be approved by the CCN-CERT Centro Criptológico Nacional. At the time, this was a strong signal in Spain, testifying to the quality of our products and the level of protection they provide. And today, as the CCN has renewed the Producto Aprobado and Producto Cualificado labels for the SNS range, it marks a new stage in our ambition for trusted European #cybersecurity!

30

3 comentarios

#HackingVillage 🗣️ Santiago U., from S21sec, will show in his session "Threat Detection in XOT Environments with MDR" how to detect threats in hybrid IT/OT industrial environments. 🔍 Learn about the growing concerns in industrial security and gain insights from CISA's 2024 report on improving visibility and #threatdetection. Strengthen your understanding of #cybersecurity in industrial settings! 🔗 https://lnkd.in/dz6SgUQy #Cybersecurity #XOT #IndustrialSecurity #BCC24

24

As continuos observers in #LATAM region, we've identified in #Chile activity of ransomware groups, such as #Meow, #RansomHub, #Akira, exploting vulnerabilities like listed below: 1. CVE-2018-13379: Vulnerability in Fortinet SSL VPN. 2. CVE-2017-11882: Affects Microsoft Office, allowing remote code execution. 3. CVE-2012-0158: Vulnerability in Microsoft Windows. 4. CVE-2012-0143: Affects Microsoft Excel. 5. CVE-2010-3333: Vulnerability in Microsoft Word. #Cyber #IncidentResponse #MDR #SOC #Malware #Ransomware

3

🚢 Discover exclusive insights on maritime Operational Technology (#OT) in European Security & Defence magazine. Dr. Lee Willett gathers perspectives from #Fortinet and #BMT experts, exploring innovative strategies to safeguard against cyber threats and strengthen maritime defenses. Read the full article 👉 https://ftnt.net/60475NSSF

18

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dZK7GtiU #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #opensource #windows

1

The cover topic for this month is reverse engineering, and we have a great guide for you to follow, by Leonardo Marciano and Deivison Franco. https://lnkd.in/dZK7GtiU #infosec #cybersecurity #pentest #pentesting #hacking #hackers #windows

1

⚔ First Encounter in Asgard's Edda: Mechanical Threat! ⚔ While Sigurd and his team receive final instructions during the briefing, preparing for the oncoming wave of attacks from the Architect, we invite you to take a look at one of the key areas of the Asgard base — the high-tech laboratory. It is here that the scientists are working to uncover the Architect's weaknesses. As soldiers set up turrets and check ammunition, the scientists have isolated a fragment of the Architect's program and are testing ancient technology on it. But something goes wrong… The Architect only grows stronger! Now all focus is on preparing the base's defenses — every detail matters in this critical moment. In this new video, we dive into one of the pivotal locations of the game — the Asgard base laboratory, where the scientists are striving to discover the Architect’s vulnerabilities. 🔥 What to expect in this video?: ✔️ The atmosphere of Asgard’s high-tech laboratory. ✔️ Intense destruction during the defense of the base. The Architect is becoming more powerful! Sigurd and his team realize this is only the beginning, and even greater challenges await them ahead. Find out how the experiments unfold and witness the first defense of the base! #AsgardEdda #GameDev #UnrealEngine #Architect #Experiments #AsgardLocation #Briefing #Battle #SciFi #BaseDefense #Games #UnrealEngine5

3

📣 New Sigma rule from our security analyst in the SamurAI Security Operation Center (SOC)! It detects a successful exploitation of new vulnerability in Rejetto HTTP File Server (HFS) with a CVSS score of 9.8/10. Find out more 👇 #cybersecurity #sigmarule

36

1 comentario

𝗙𝗔𝗥𝗢 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 𝗝𝗼𝗶𝗻𝘀 𝘁𝗵𝗲 𝗙𝗲𝗱𝗲𝗿𝗮𝗹 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 & 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗔𝗴𝗲𝗻𝗰𝘆'𝘀 "𝗦𝗲𝗰𝘂𝗿𝗲 𝗕𝘆 𝗗𝗲𝘀𝗶𝗴𝗻" 𝗣𝗹𝗲𝗱𝗴𝗲 [𝗦𝗮𝗰𝗿𝗮𝗺𝗲𝗻𝘁𝗼, 𝗖𝗔] — [𝟬𝟴-𝟭𝟮-𝟮𝟰] — FARO Software Solutions is proud to announce its participation in the Federal Cybersecurity & Infrastructure Security Agency's (CISA) "Secure By Design" pledge. This initiative unites leading technology companies in a shared commitment to prioritize security and resilience in software development, ensuring that products are secure from inception and throughout their lifecycle. The "Secure By Design" program, spearheaded by CISA, represents a crucial step forward in the battle against cyber threats that continue to challenge the safety and integrity of the nation’s digital infrastructure. By joining this initiative, FARO Software Solutions is reinforcing its long-standing dedication to building software that meets the highest standards of security, reliability, and trust. "We are honored to stand alongside the nation's top technology companies in supporting the 'Secure By Design' pledge," said Mike Primavera, VP of Operations. "Our commitment to this initiative reflects our dedication to not only meeting but exceeding the cybersecurity expectations of our clients and partners. We recognize the critical importance of embedding security into every phase of the software development process, and we are excited to collaborate with CISA and other industry leaders to set new benchmarks for security in our field." FARO Software Solutions joins a prestigious group of industry leaders in this commitment, including Microsoft, Google, Amazon Web Services (AWS), Cisco, and IBM. These companies are collectively leading the charge to develop and deploy secure software that businesses and government agencies can rely on to protect their data and operations. By participating in the "Secure By Design" pledge, FARO Software Solutions reaffirms its commitment to delivering cutting-edge software solutions that not only meet the needs of today's digital landscape but also anticipate and counter the threats of tomorrow. As the cybersecurity landscape continues to evolve, FARO remains steadfast in its mission to provide secure, innovative solutions that empower clients to operate with confidence and peace of mind. 𝗔𝗯𝗼𝘂𝘁 𝗙𝗔𝗥𝗢 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 FARO Software Solutions is a leading provider of innovative software solutions dedicated to delivering secure, reliable, and high-performance products to clients across the government industry. With a focus on quality and customer satisfaction, FARO leverages advanced technologies and best practices to help organizations achieve their goals while maintaining the highest cybersecurity standards. 𝗙𝗔𝗥𝗢 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 𝗠𝗲𝗱𝗶𝗮 𝗖𝗼𝗻𝘁𝗮𝗰𝘁: Email: [email protected] Website: www.farosolutions.com

5

Charlas MainTrack #EKO2024 🚀 📌 Enrique Nissim, IOActive, Principal Security Consultant 📌 Krzysztof Okupski, Associate Principal Security Consultant, IOActive 💡 “AMD Sinkclose: Universal Ring -2 Privilege Escalation”: System Management Mode (SMM) is one of the most powerful execution modes in the x86 architecture and code at this level is invisible to the Hypervisor and OS-level protections, including anti-cheat engines and anti-virus systems. While the BIOS ecosystem's complexity has led to a multitude of vulnerabilities in firmware over time, vendors are now making strides in delivering patches with greater speed and efficiency. Unfortunately, these efforts are not enough in the presence of a CPU vulnerability. When studying the documentation of the AMD processor, our team noticed a flaw in one of the critical components required for securing SMM. This silicon-level issue appears to have remained undetected for nearly two decades. This presentation starts by providing an introduction to SMM and the security mechanisms that the AMD processor provides to support it. Subsequently, it delves into the CPU design flaw and the complete methodology and engineering used to create a universal ring -2 privilege escalation exploit. ✅ Esta charla será dictada en español. 📍 EKOPARTY 2024 - 13, 14 y 15 de noviembre en el CEC - Buenos Aires  🎟️ ¡Último día para registrarte gratis! >> entradas.ekoparty.org 📅 Podés ver la agenda completa en ekoparty.org/agenda 

7

📢 𝐉𝐨𝐢𝐧 𝐔𝐬 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐋𝐚𝐭𝐞𝐬𝐭 𝐄𝐝𝐢𝐭𝐢𝐨𝐧 𝐨𝐟 #𝐒𝐚𝐟𝐞𝐃𝐞𝐯𝐓𝐚𝐥𝐤𝐬! 𝐌𝐞𝐞𝐭 Luis Manuel García 🔗 Register Now https://lnkd.in/e-qPVkE7 We're excited to feature Luis Garcia, Pre-Sales Manager at Xygeni. Luis has extensive experience in Application Security, DevOps, and DevSecOps, and is known for his expertise in integrating security into development pipelines and enhancing overall software security. 𝐖𝐡𝐲 𝐀𝐭𝐭𝐞𝐧𝐝? 🔸 Hidden Vulnerabilities: Understand the risks of using third-party and open-source components. 🔸 Expanding Threats: Learn about new attacker techniques and emerging threat actors. 🔸 Real-World Breaches: Discover lessons from incidents like the RubyGems hijacking and the PHP Git server compromise. 🔗 Register Now and take a step towards a more secure future in software development! #CyberSecurity #Security #SoftwareDevelopment #CISO #CIO #OSS #DevOps #OpenSourceSecurity #Malware #Xygeni #AppSec #DevSecOps

6

🔒 𝗜𝘀 𝘆𝗼𝘂𝗿 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝘁𝗶𝗹𝗹 𝗽𝗹𝗮𝘆𝗶𝗻𝗴 𝗰𝗮𝘁𝗰𝗵-𝘂𝗽? 𝗪𝗵𝘆 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗕𝗲𝗵𝗮𝘃𝗶𝗼𝗿 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀 𝗶𝘀 𝘆𝗼𝘂𝗿 𝗻𝗲𝘅𝘁 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰 𝗺𝗼𝘃𝗲 by Guillermo Larraz [en] https://lnkd.in/dBrUdxff [es] https://lnkd.in/dfNJz_AU In today's hyper-connected enterprise environment, traditional security measures aren't enough. Network Behavior Analysis emerges as a crucial tool in a world where network complexity and cyber threats are constantly growing. Here's what makes it a 𝗴𝗮𝗺𝗲-𝗰𝗵𝗮𝗻𝗴𝗲𝗿: Detects problems proactively before they cause harm Monitors and analyzes network traffic in real-time Identifies anomalous patterns beyond known threats Helps optimize network resources and performance As part of its 𝗯𝗲. 𝗦𝗮𝗳𝗲 𝗫𝗗𝗥 𝘀𝗼𝗹𝘂𝘁𝗶𝗼𝗻, Teldat has integrated machine learning technologies capable of detecting unknown threats and optimizing network performance. This has become an essential component for every modern corporation. Clcik to read the full analysis. #telecommunications #connectivity #cybersecurity #Security #IT #Network_behavior_analysis #Telecomunicaciones #conectividad #ciberseguridad

41

4 comentarios

Protect your network from ARP spoofing by understanding the protocol's weaknesses and protecting it by using Dynamic ARP Inspection. Read it: https://lnkd.in/e-UWMFcz #cybersecurity #cyberastral #arp #spoofing #protection

6

⚠️ A new phishing campaign is spreading Poco RAT malware among Spanish-speaking sectors, including utilities and manufacturing. 🔍 Analysts note the malware's unique focus on anti-analysis and C2 activities, making it harder to detect. #CyberSecurity #InfoSec #MalwareAnalysis #ThreatHunting #CyberThreats #NetworkSecurity #VulnerabilityAssessment #Phishing #IncidentResponse #DataProtection

2

⚠️ A new phishing campaign is spreading Poco RAT malware among Spanish-speaking sectors, including utilities and manufacturing. 🔍 Analysts note the malware's unique focus on anti-analysis and C2 activities, making it harder to detect. #CyberSecurity #InfoSec #MalwareAnalysis #ThreatHunting #CyberThreats #NetworkSecurity #VulnerabilityAssessment #Phishing #IncidentResponse #DataProtection

2

⏰ Quite soon Filipi Pires will unlock the secrets of PDF structures and malware analysis at the Hacking Village workshop within the bounds of the Barcelona Cybersecurity Congress. Learn about packers, JavaScript obfuscation, and anti-disassembly techniques. Discover the anatomy of malware and where malicious code hides. Gain insights into binary structures and sharpen your analysis skills! Your ticket is here ➡ https://bit.ly/3TJ0N9C #bcc24 #barcelonacybersecuritycongress #hackingvillage #PDFstructures #malwareanalysis #binarystructures #cybersecurity #infosec

8