Alain Rolland

🚨Medium Risk Vulnerability🚨 in #Sylius, an Open Source eCommerce Framework on Symfony. A security vulnerability (CVE-2024-40633) allows an attacker to access sensitive guest customer information via the adjustments API endpoint. This highlights the importance of #APISecurity. Users are advised to upgrade to versions 1.12.19, 1.13.4 and above. #OWASP #InfoSec #CyberSecurity https://lnkd.in/ei_W9nMT

1

https://caxus.net/ 🚀Terraform and GitLab CI Pipelines: The Ultimate Solution for Infrastructure Management 🚀 1. Total Automation 🤖: With Terraform, you can define your infrastructure as code. This means you can create and manage all your cloud resources automatically and repeatably. 2. Seamless Integration ➡️: Thanks to GitLab CI/CD, every change you make in your code can be automatically reflected in your infrastructure. No more manual deployments prone to errors. 3. Security and Transparency 🔒: All changes in your infrastructure are recorded in your Git repository. This allows for total control and a transparent history of all modifications. 4. Continuous Development 🔄: With GitLab CI Pipelines, you can create pipelines that automatically validate, test, and deploy your Terraform configurations. It has never been easier to ensure that everything works as it should! 5. Guaranteed Scalability 📈: By using these tools, you can quickly scale your infrastructure to deal with traffic spikes or new features. 6. Cost Reduction 💸: By automating infrastructure management, you reduce human errors and optimize resource usage, resulting in lower operating costs. 7. Team Efficiency 🛠️: These tools allow your development and operations teams to work together efficiently, minimizing wait times and improving collaboration. 8. Flexibility and Adaptability 🧩: Adjust and evolve your infrastructure according to business needs without complications, all while using market best practices. 9. Recommended Tools 🛠️: Some tools that can help improve productivity are: VSCode for code editing, Terraform Cloud for remote state management, and Slack for quick and effective communication. At Caxus, we are experts in adopting AWS cloud solutions 🌩️. If you want to optimize your infrastructure using Terraform and GitLab CI Pipelines, contact us and let's take your business to the next level. Contact us by Whatsapp: https://buff.ly/4aSbAWy Contact us today for more information! [email protected] We’d love to discuss how we can save you proyect in the cloud. [email protected] #devops #GitLabCI #aws #automation #terraform #gitlabci #pipelines #caxus #gitlab #DominaTuIndustria #Collaboration #Efficiency #CloudAdoption #Seguridad #Optimizacion #LinkedIn #HerramientasDigitales #AprendizajeContinuo #work #growing #teamwork #creatividad #DevSecOps #machinelearning #security #devsecops #cloud #infrastructure #DataAnalytics #AgileInfrastructure #CloudAdoption #Caxus

2

Secure Coding in Infrastructure as Code (IaC) 🛡️💻 As IaC becomes the backbone of modern cloud infrastructure, securing it is crucial. Follow these practices for safer code: Validate Inputs 📝: Ensure proper validation to avoid exploits. Least Privilege 🔒: Limit access to only what’s necessary. Secrets Management 🔑: Never hardcode secrets; use secure vaults. Automate Security 🧪: Run security scans in your CI/CD pipeline. Version Control 🔄: Track changes and conduct code reviews. Avoid Defaults ⚙️: Customize security settings to your needs. By adopting these secure coding habits, you’ll build resilient, secure infrastructure that can withstand threats. Stay safe! 👩‍💻👨‍💻 #cybersecurity #iac #digitalsecurity

3

1 commentaire

Secure Coding in Infrastructure as Code (IaC) 🛡️💻 As IaC becomes the backbone of modern cloud infrastructure, securing it is crucial. Follow these practices for safer code: Validate Inputs 📝: Ensure proper validation to avoid exploits. Least Privilege 🔒: Limit access to only what’s necessary. Secrets Management 🔑: Never hardcode secrets; use secure vaults. Automate Security 🧪: Run security scans in your CI/CD pipeline. Version Control 🔄: Track changes and conduct code reviews. Avoid Defaults ⚙️: Customize security settings to your needs. By adopting these secure coding habits, you’ll build resilient, secure infrastructure that can withstand threats. Stay safe! 👩‍💻👨‍💻 #cybersecurity #security #digitalsecurity #IAC #ethicalhacking

2

1 commentaire

🔒 Important Security Update: New Remote Code Execution Vulnerability in OpenSSH Discovered 🔒 Cybersecurity alert 🚨: During an analysis of the regreSSHion vulnerability (CVE-2024-6387) in OpenSSH, a second remote code execution flaw has been identified. This new vulnerability, tracked as CVE-2024-6409, was discovered by Alexander Peslyak, aka Solar Designer, founder of Openwall. Here’s what you need to know: CVE-2024-6409 is a race condition in signal handling involving the ‘privsep’ child process. While the impact is lower due to reduced privileges of the ‘privsep’ child process, exploitation in specific scenarios could make it an attractive choice for attackers. No successful exploitation of CVE-2024-6409 has been proven yet, but patches and advisories are being released by impacted Linux distributions. Microsoft has confirmed that Windows systems are not affected, and macOS is also believed to be largely unaffected, pending an official statement from Apple. 🔧 Action Items: Check for and apply patches provided by your Linux distribution to mitigate this vulnerability. Stay updated with security advisories from your OS vendors. Regularly monitor your systems for unusual activity and potential exploitation attempts. Stay secure, and let’s keep our systems safe! #CyberSecurity #OpenSSH #Vulnerability #InfoSec #RemoteCodeExecution #Linux #Windows #macOS #SecurityUpdate

2

🚀SIEM vs. EDR: A Holistic and Combined Approach by Michel de Crevoisier 👨‍💻 How to combine Security Information and Event Management (SIEM) with Endpoint Detection and Response (EDR) to build a fortified cyber defense system ? EDR Overview: Focuses on real-time protection, automated response, and behavioral analytics. Handles critical tasks like forensic analysis, threat intelligence, and OS integrity protection. Common evasion tactics: process injection, DLL sideloading, and kernel object manipulation. SIEM in Action: Powers anomaly detection, behavior analytics (UEBA), and data correlation. Uses external sources for enrichment and consolidates logs from diverse sources for comprehensive insight. * Challenges include balancing data volume, audit policies, and cost-efficiency. * Challenges with Evasion: Techniques like Bring Your Own Vulnerable Driver (BYOVD), AMSI bypass, and Event Tracing for Windows (ETW) are increasingly exploited. Living off the Land (LOLBINs): Attackers use trusted binaries to bypass defenses, particularly within Windows Subsystem for Linux (WSL). * Advanced Evasion Tools: Examples include BlackMamba for polymorphic threats using AI to modify code on the fly, evading detection without command-and-control (C2) infrastructure. 🔐 Combining SIEM and EDR provides a multi-layered defense by correlating endpoint data with broader network insights, addressing vulnerabilities, and offering robust incident response. hashtag #PurpleHackademy hashtag #cyberSecurity hashtag #SIEM hashtag #EDR hashtag #CyberThreats hashtag #AI hashtag #PolymorphicThreats

1

[ 𝐄𝐱𝐩𝐞𝐫𝐭 𝐑𝐞𝐯𝐢𝐞𝐰 #𝟒 ] In our latest blog post, we review a recent research paper on exploiting vulnerabilities in Lattice-Based Cryptography. 📜 The paper, "𝐄𝐱𝐩𝐥𝐨𝐢𝐭𝐢𝐧𝐠 𝐭𝐡𝐞 𝐂𝐞𝐧𝐭𝐫𝐚𝐥 𝐑𝐞𝐝𝐮𝐜𝐭𝐢𝐨𝐧 𝐢𝐧 𝐋𝐚𝐭𝐭𝐢𝐜𝐞-𝐁𝐚𝐬𝐞𝐝 𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐲," introduces a new method for second-order side-channel attacks on cryptographic implementations protected by masking techniques. 👉 Read it here: https://lnkd.in/e7mBjGSU What are your thoughts? —— The Expert Review is a collaboration with PQShield. Every so often, we'll handpick a paper on PQC and break down these complex topics into bite-sized, expert-backed insights. Stay tuned for more! —— #CyberSecurity #PostQuantumCryptography #ExpertReview #TechTalks Pierre-Yvan Liardet Hugues Thiebeauld Kirsten W. Mbaye Ngom Timo Zijlstra Matt Stubbs Niels Samwel Sabanci University Technische Universität Darmstadt Analog Devices Tolun TosunAmir Moradi Erkay Savas

20

1 commentaire

In this latest collaboration with eShard, we review a significant side-channel vulnerability in lattice-based implementations, as discovered earlier this year by Tolun Tosun, Amir Moradi, and Erkay Savas. The research describes the leveraging of many implementations, particularly ML-KEM and ML-DSA, to mount a side-channel attack that works around masking countermeasures.This ongoing series continues our detailed look at side-channel masked implementations, and highlights the importance of understanding the security of these techniques. With the NIST standards expected to be widely adopted later this year, the impact of this work is likely to be felt in the immediate future. #sidechannel #NIST #cryptography #quantumsafe #cybersecurity

9

[ hashtag #SQLi ] ⚡️Test for SQL injection and CORRECT SQL injection vulnerabilities Real Time, Automatically, with patented SQLiFixer 👍 🔗 Personalized Demo at https://lnkd.in/e5cqX5uQ ✅ Testing for SQL injection vulnerabilities is crucial, but correction is key to safeguarding your applications. ✨ Why Choose SQLiFixer? SQLiFixer delivers automated, immediate corrections at the source code level. - Automates Security: Transforms risky code into secure scripts instantly. - Seamlessly Integrates: Fits right into your existing Git workflows, enhancing efficiency without disrupting your operations. 📢 Experience SQLiFixer in Action! See how our AI-powered tool can elevate your application security. For a free personalized demo and more info, visit our website. 🔗 Need more details? Reach out at [email protected]. https://lnkd.in/eu8Nh8r5

2

🚨 CVE-2024-9123 : critical vulnerability in Google Chrome A serious security vulnerability has been identified in Google Chrome affecting versions up to 129.0.6668.58. The vulnerability, known as CVE-2024-9123, impacts the Skia component, resulting in an out-of-bounds write that could potentially allow attackers to perform remote code execution. CVE-2024-9123 is an integer overflow vulnerability within the Skia component of Google Chrome, which processes graphics rendering. When exploited, this vulnerability allows an attacker to execute out-of-bounds memory writes via a specially crafted HTML page. This can lead to various types of compromise, including corruption of data, escalation of privileges and ultimately remote code execution. The critical nature of this vulnerability is reflected in its CVSS score of 9.8, making it a severe threat to affected systems. Who is at risk ❓ Anyone using Google Chrome versions prior to 129.0.6668.70 is vulnerable. This includes users on Windows, macOS and Linux platforms. The attack can be triggered remotely without authentication, requiring only a user interaction, such as visiting a malicious website. Though no exploit is publicly available yet, the vulnerability is considered easy to exploit and attackers could potentially be using it soon. Out-of-bounds write vulnerabilities can lead to severe consequences because they allow attackers to corrupt the memory of affected systems. The exploitation of such a vulnerability could lead to full control of an affected machine, depending on the payload and target. Attackers could access sensitive information, manipulate system configurations and install malicious software undetected. Given the nature of CVE-2024-9123, the risk is high for users who delay patching their Chrome installations. Affected systems can be exploited with minimal effort, causing harm not only to individuals but potentially leading to breaches in organizational networks. There are no workarounds for this vulnerability, making it important for users to update to the latest version of Google Chrome as soon as possible. Upgrading to version 129.0.6668.70 or later will protect users from this critical flaw. Secure by Design: a long-term solution❗ While patching is the immediate solution, Secure by Design principles are critical for preventing vulnerabilities like CVE-2024-9123 from being introduced in the first place. By integrating security into the development lifecycle, rather than treating it as an afterthought, you can significantly reduce the risk of such vulnerabilities making it into production systems. Stay vigilant! Source: https://lnkd.in/dTmFAY2t

8

https://caxus.net/ Discover the Advantages of Using Terraform in your Organization 🌟 Do you want to improve the way you manage your infrastructure? Terraform is the perfect tool for you. Here's why: 1. Infrastructure as Code ✍️: Define all your infrastructure in a codified way. This allows you to easily reproduce and version your configurations. 2. Assured Consistency 🔄: By having your configurations in code, you ensure that each change is consistent and tested before being applied in production. 3. Rapid Deployment 🚀: Implement resources in minutes. Goodbye to long and manual processes. 4. Improved Collaboration 🤝: Your entire team can work on the same configuration and see changes in real time, improving coordination and reducing errors. 5. Automatic Scalability 📈: With Terraform, you can adjust your infrastructure as your needs grow, without complications. 6. Multi-Cloud Support ☁️☁️: Manage resources across multiple cloud providers from one place. AWS, Azure, Google Cloud? No problem! 7. Audit and Control 🔍: All changes are logged, making auditing easier and improving the security of your infrastructure. 8. Cost Reduction 💰: Optimize your resource usage by automating creation and management, reducing waste and costs. 9. Simulation and Testing 🧪: With Terraform, you can anticipate how changes will affect before applying them, avoiding unpleasant surprises. 10. Efficiency and Productivity 🛠️: Tools like Terraform Cloud for centralized management, VSCode for coding, and DataDog for monitoring can significantly increase your team's productivity. At Caxus, we specialize in helping you adopt AWS cloud solutions in the most effective way possible. Don't hesitate to contact us to make your transition to Terraform a total success. 🌐✨ Contact us by Whatsapp: https://buff.ly/4aSbAWy Contact us today for more information! [email protected] We’d love to discuss how we can save you proyect in the cloud. [email protected] #devops #GitLabCI #aws #automation #terraform #gitlabci #pipelines #caxus #gitlab #DominaTuIndustria #Collaboration #Efficiency #CloudAdoption #Seguridad #Optimizacion #LinkedIn #HerramientasDigitales #AprendizajeContinuo #work #growing #teamwork #creatividad #DevSecOps #machinelearning #security #devsecops #cloud #infrastructure #DataAnalytics #AgileInfrastructure #CloudAdoption #Caxus

1

𝗦𝗢𝗣𝘀 (𝗦𝘁𝗮𝗻𝗱𝗮𝗿𝗱 𝗢𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻 𝗣𝗿𝗼𝗰𝗲𝗱𝘂𝗿𝗲𝘀) / 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸𝘀 / 𝗥𝘂𝗻𝗯𝗼𝗼𝗸𝘀: CERT Société Générale and CERT aDvens developed Incident Response Methodologies (IRM) to provide best practices for cybersecurity teams. These cheat sheets cover various security incidents and are available in English and French on GitHub under a Creative Commons license. Purpose: To provide easy-to-use operational incident best practices for cybersecurity teams Format: Cheat sheets dedicated to incident handling These IRMs serve as valuable resources for cybersecurity professionals, offering structured approaches to handling various types of security incidents. They represent a collaborative effort to standardize and improve incident response practices across the industry. GitHub Link - https://lnkd.in/dG2B-4Dk Worm Infection - https://lnkd.in/dr9wruWb Social Engineering - https://lnkd.in/d8Wnq2tf Information Leakage - https://lnkd.in/d8KGgfjJ Insider Abuse - https://lnkd.in/dqXB2F6X Customer Phishing - https://lnkd.in/dbuFF3rn Scam - https://lnkd.in/dBC7k9qn Trademark infringement - https://lnkd.in/dJZfugHa Phishing - https://lnkd.in/dTAZm2Eh Ransomware - https://lnkd.in/d6884Nf6 Large_scale_compromise - https://lnkd.in/djjwcFqU 3rd-party_compromise - https://lnkd.in/d_nB8szk Windows Intrusion - https://lnkd.in/d3Q4dWGs Unix Linux lntrusionDetection - https://lnkd.in/dtKNiZN4 DDOS - https://lnkd.in/dT3BZ5-D MaliciousNetworkBehaviour - https://lnkd.in/djhECyjU Website-Defacement - https://lnkd.in/dc9b59xd WindowsMalwareDetection - https://lnkd.in/dBhrBw5Y Blackmail - https://lnkd.in/d8_8hrqw SmartphoneMalware.pdf - https://lnkd.in/dmU6EWcN #Cybersecurity #CERT #BestPractices #SecurityCheatSheets #OpenSource #CommunityContribution Thanks to CERT Societe Generale

11

Is your Kubernetes platform ready for the financial industry's newest standards 🤔? From encrypted traffic to detailed audit trails, Isovalent keeps your Kubernetes platform on top of the toughest financial service standards like PCI-DSS and the upcoming DORA regulations.🛡️ 📎: https://lnkd.in/e-3j4aUQ

18

2 commentaires

🚨Here is a great discovery of a very interesting repository around a SOC based on 4 Open Source tools: 👉Wazuh: Real-time monitoring and alerting for security events. 👉DFIR-IRIS: Streamlined incident response and forensics capabilities. 👉Shuffle: Automated workflow management to streamline security processes. 👉MISP: Open source threat intelligence platform. ✅T-Guard - Nusantara ✔Verified link to the official repository 🔗https://lnkd.in/eRw6y3Ts ⚙As a reminder, T-Guard is a solution around a SOC that leverages the strength of leading open-source tools to provide solid protection for your digital assets. 🤝The integrated approach ensures comprehensive defense against a wide range of cyber threats, making your systems and data safer and more secure. ✅Complete documentation (installation, configuration) ✔Verified link to the official page 🔗https://lnkd.in/eSwQwYAc 🖼Image Source: https://lnkd.in/emmNMJcg 👨 💻Set up your Labs and have fun!! #soc #opensource #security #cybersecurity #blueteam

6

CVE-2024-3661 - CVSS 8.8 - EPSS We don't have an EPSS score for this CVE yet - By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks. Ref.1: https://lnkd.in/eXEskBcn Ref.2: https://lnkd.in/e_KwDMtH

1