Shimi Cohen

Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users: Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Why a strong patch management strategy is essential for reducing business risk In this Help Net Security interview, Eran Livne, Senior Director of Product Management, Endpoint Remediation at Qualys and Thomas Scheffler, Security Operations Manager of Cintas Corporation, discuss their experiences with automated patch management. Securing remote access to mission-critical OT assets In this Help Net Security interview, Grant Geyer, … More → The post Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users appeared first on Help Net Security.

2

#DOYOUKNOWCVE Frag Ransomware Targets Veeam Vulnerability! CVE-2024-40711: Is a critical Remote Code Execution vulnerability in Veeam Backup & Replication software. This flaw stems from the insecure deserialization of untrusted data, which allows unauthenticated attackers to remotely execute arbitrary code. For more information login to LOVI : https://lnkd.in/gN-AmJa4 Patch your systems now to avoid becoming a victim of this selective encryption nightmare. #CyberSecurity #Ransomware #Veeam #Frag #CVE202440711 #Exploit #Newvariant #Campaign #SophosXOps #Threat #Exploit #Patch

15

Join us tomorrow on Son FM as we unveil all the latest updates about our upcoming Cybersphere Congress! 🎙️✨ #NCSC_5 #CyberSphere #SecuriNets_INSAT

4

2 תגובות

⚠️ #CyberAttack Alert ⚠️ 🇮🇱#Israel: ZeroSeven Hacking Group Offers Full Network Access to Israeli Infrastructure: 80TB of Critical Data at Risk ZeroSeven, the same hacking group that recently leaked sensitive information from Toyota, is now selling full network access to servers containing 80TB of data related to Israeli infrastructure. According to the post, this access allows entry to a large amount of sensitive data that could put Israel at significant risk, including: - Detailed project information for water, oil, gas, power, and electricity across most areas of Israel and government sectors. - SCADA systems. - Sensitive diagrams with specific coordinates for all projects, pipelines, and more. - Complete databases (customer, financial, sensitive data, etc.). "We can do the same thing we did with Toyota and leak all the data, but instead, we are selling access to the servers so you can do whatever you want, whether it's ransomware attacks, causing damage, or stealing the data. We also offer to delete all data we have uploaded to our servers," the group wrote. It is still unknown whether this claim is true, but if it turns out to be legitimate and falls into the wrong hands, the potential severity of the impact would be critical. #DataBreach

1

Detecting & Blocking SQL Injection w/ Cato Networks SQL Injection is still a top attack method in 2024. Discover how Cato Networks safeguards your network from SQL injection attacks. Learn how to quickly detect and block malicious SQL injection attempts in this brief video.

5

𝐈𝐬 𝐲𝐨𝐮𝐫 𝐩𝐚𝐭𝐜𝐡𝐞𝐝 𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐬𝐲𝐬𝐭𝐞𝐦 𝐫𝐞𝐚𝐥𝐥𝐲 𝐬𝐞𝐜𝐮𝐫𝐞? At BlackHat2024, researcher Alon Leviev revealed a game-changing Windows Downgrade attack that bypasses even the latest security updates—leaving systems vulnerable despite being 'fully patched.' The evolving threat landscape challenges our understanding of patching and security. Time to rethink our defenses. https://lnkd.in/gZzX-bdM #CyberSecurity #Windows #InfoSec #PatchManagement

20

** Thank you all for your insights on our latest research. We're currently revising the blog post and adding further clarification and any missing information based on feedback from the community and our latest review*** 🚨 Dear Security Engineers / AppSec people Uri Aronovici discovered a new attack where threat actors can exploit widely-used external Terraform providers to gain full control of a cloud production environment. Why you should care about it ? 📍 Most SAST / SDLC processes are not catching it 📍 There are many ways to exploit it 📍 There are few ways to detect it while it happens #terraform #cloudsecurity #appsec #riskmanagement

86

22 תגובות

🚨 Microsoft Outlook Security Alert 🚨 Morphisec researchers Arnold Osipov, Michael Gorelik, and Shmuel Uzan have identified an important vulnerability, CVE-2024-38021 in Outlook. This is a Remote Code Execution (RCE) vulnerability that impacts most Microsoft Outlook applications, allowing trusted senders to execute attacks in zero-clicks, and just one click for all other senders. Unlike CVE-2024-30103 discovered in June, this new vulnerability does not require any authentication. If exploited, this vulnerability can lead to data breaches, unauthorized access, and other malicious activities. 📫 Uncover the vulnerability in our research here: https://bit.ly/4dcoOht Follow Brad LaPorte, Jayakumar Kurup, CISSP, Richard Benigno, Ronen Yehoshua and Ron Reinfeld for more #cyber updates! #cybersecurity #outlook #microsoft #office

30

1 תגובה

#DiyakoSecureBow ———————————— Gartner Israel Briefing: What you Need to Know about GenAI and Security September 202 Special Thanks❤️😇👍🏽🙏 Gartner -Secure Business Continuity- 2024.05.18 —————————————————— #CyberSecurity #benchmark #AI #Threats #SecureBusinessContinuity

17

🚨 Critical #VMware Vulnerabilities Patched! 👉 #Broadcom disclosed critical vulnerabilities affecting VMware Workstation and Fusion. The most severe among them, CVE-2024-22267 (CVSS: 9.3), is a use-after-free vulnerability in the vBluetooth device that allows attackers with admin privileges on a #virtualmachine to execute arbitrary code on the host system. ❓ Other vulnerabilities include CVE-2024-22268, a buffer-overflow in Shader functionality leading to Denial-of-Service (#DoS), and CVE-2024-22269 and CVE-2024-22270, which are information disclosure vulnerabilities exposing hypervisor memory. ➕ These issues affect multiple versions of VMware #Workstation and #Fusion; to avoid exploitation, update to Workstation 17.5.2 and Fusion 13.5.2 immediately. 🛡️ Stay informed about emerging vulnerabilities with SOCRadar's #VulnerabilityIntelligence:    https://lnkd.in/dUPewh4K 👁️ Check out the free #CVERadar service from SOCRadar LABS: https://lnkd.in/dtHb53ct #CyberSecurity #VM #PatchNow #SecurityUpdate

3

New report on Top Influential Regulations reveals 37% say TSA Security Directives is most influential. Full Report = https://lnkd.in/gmmzSQQa Bravo to all who work on #CyberSecurity at OTORIO including Kfir Tzukrel and Gail Kosloff

7

1 תגובה

Cybersecurity giant CrowdStrike is acquiring Israeli cyber startup Adaptive Shield, an Israeli cyber startup, was acquired by cybersecurity giant CrowdStrike. The deal's sum is not disclosed, but according to Calcalist כלכליסט, it was about $300 million. Adaptive Shield monitors and controls all security aspects in cloud environments, continuously identifying potential attacks. Its Identity Threat Detection & Response (ITDR) and SaaS Security Posture Management (SSPM) solutions help security teams manage the organization’s applications, identities, and detect unusual behavior within the SaaS ecosystem. This year it is the second time CrowdStrike is acquiring the Israeli company. Earlier, CrowdStrike acquired DSPM startup Flow Security for around $200 million. “Our mission perfectly complements CrowdStrike, stopping SaaS breaches while further accelerating consolidation on cybersecurity's most comprehensive platform. I'm incredibly proud of our team for building the most advanced SaaS security solution, defining the market,” said Maor Bin, CEO and co-founder, of Adaptive Shield. Adaptive Shield was founded by Maor Bin and Jony Shlomoff in 2019. In 2023, the company raised $10 million from financial giant Blackstone. Source: https://lnkd.in/dGi8qe3Y

2

Your #cybersecurity is only as strong as your weakest link—often, that comes down to whether a #phishing email is opened. Even organisations with mature cybersecurity strategies, or those perceived to be more tech-savvy, remain vulnerable to evolving threats. Data breaches and phishing attacks are constantly evolving, targeting everyone from large corporations to smaller businesses. BreachAware offers a proactive approach to identifying and mitigating these risks by continuously monitoring your exposure to breaches. It helps you assess your data risk in real time, giving you the insights needed to bolster your defence and protect sensitive information before it’s compromised. Even the most vigilant organisations can fall victim to cyberattacks, which makes BreachAware an essential tool for staying ahead of the curve and safeguarding your company’s future. Scan your domain for free at breachware.com/scan. #protectyourprivacy BreachAware® https://lnkd.in/dSBbrGDA

7

MSRC reviews every vulnerability reported to Microsoft. While fixing a large volume of vulnerabilities helps keep customers secure, it also poses numerous practical challenges in prioritizing the most critical bugs. During his Black Hat talk, MSRC Security Engineer Bill Demirkapi discussed how MSRC leverages LLM capabilities to manage our caseload: deriving sufficient information about vulnerabilities to share with customers, predicting key facts about a report, such as its severity, and generating a root cause analysis based on a crash dump. The slides from Bill's talk are available here: https://lnkd.in/g-qc44wd If you're at #BHUS, Bill is giving another talk at 1:30 PM today: "Locked Down but Not Out: Fighting the Hidden War in Your Bootloader." #MSFTBlackHat

156

2 תגובות

Join us on July 31st for our upcoming CheckMates #TechTalk on Mastering Endpoint Security - Best Practices for 2024! Don't miss this opportunity to hear from Yehonatan Cohen and Bar Yassure about best practices for deploying and optimizing your endpoint security! Register today! https://ow.ly/zXAL50SBiiP #CheckPoint #Community #HarmonyEndpoint #EndpointSecurity #CyberSecurity

6

Google parent in talks to buy cyber security startup Wiz - iTnews: Google parent in talks to buy cyber security startup Wiz  iTnews #CyberSecurity #InfoSec #SecurityInsights

1