Frans Bolk

Fighting cybercrime with open-source SOAR tools – To combat the challenges with existing tooling and help organizations improve their cybersecurity posture, TNO has launched an open-source SOAR tool. #soar #soc #opensource #tooling Daphne Frik

7

If you missed yesterday's ELTA | Live webinar on cybersecurity for web apps with Aidas Kavalis of Amberlo, Wouter Van Respaille of Henchman and Roeland Delrue of Aikido Security, moderated by Michiel Denis of Henchman, the recording is up on ELTA's Youtube channel. Watch and learn. #legaltech #cybersecurity

16

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks https://lnkd.in/ePSwdpPb Centrale Bank van Curaçao en Sint Maarten Curaçao Tech Meetups Curaçao Innovation & Technology Institute Curacao Fintech Association Sentoo BTC Curaçao

2

The sizable fine hit Clearview AI by the Dutch Agency, due to data scraping brings attention to the intensifying cloud threat landscape. The importance of data privacy and the mechanisms that ensure data protection in the cloud are essential conversation points. Here, let me suggest a few protective measures: 1. Scale up encryption: Always encrypt sensitive data whether in transit or at rest within the cloud environment. 2. Access control: Implement rigorous identity and access management policies. 3. Regular audits: Perform periodic audits to ensure compliance with security standards and identify potential gaps. Navigating the cloud is indeed like walking on a tightrope, balancing between optimization and security. #DataPrivacy #CloudSecurity #GDPR #DataProtection #CyberThreats

2

Dutch data under threat? 🇳🇱 A controversial move to migrate government data to US cloud servers has sparked debate about data security and national autonomy. Should the Netherlands trust American tech giants with sensitive information? Learn more below.

5

2 commentaren

Download the DoNex/DarkRace Ransomware Decryption tool! About: Computest Sector 7 was asked by Team High Tech Crime of the Politie Nederland to help with writing a decryptor for the DoNex/DarkRace ransomware. DoNex is a relatively new ransomware group, which probably explains why its encryptor contains a simple to abuse mistake. It appears to be the same group that was working under the name DarkRace last year, as the DoNex encryptor Computest Sector 7 investigated is essentially the same as a DarkRace encryptor they looked at earlier. They have submitted their decryptor to the No More Ransom initiative to help victims recover their files for free. Read the guide here https://lnkd.in/eszJb4SG (It includes the decryption tool!) Read more about Ransomware Groups https://lnkd.in/ew3Km3vX Well done Computest Sector 7 team! Kudo's. Share and follow Threat Intelligence Lab!

2

1 commentaar

Yesterday, one of our technical software consultants, Feiyang Tang, presented at the OWASP® Foundation NL meetup at Radboud University, Nijmegen. 👨‍💻 His presentation delivered insights on the security implications of AI in software development and explored how to build secure AI-powered software, covering both coding practices and system design. He also delved into specific scenarios where AI can introduce security risks and discussed practical strategies to mitigate these issues in software development. As organizations increasingly adopt AI, it's easy to overlook vulnerabilities that come with these advancements. It is also important to shed light on the strategies for building secure AI-powered software and implementing them responsibly. 💻🔐 To help organizations address the challenges in responsible and secure AI implementation, earlier this week, we have published our AI readiness guide. It equips organizations with practical steps to navigate AI's challenges and seize opportunities responsibly. Unlock AI readiness today, link below ⬇️ https://lnkd.in/e-747ufc #AI #ArtificialIntelligence #AIReadiness #OWASP #SoftwareDevelopment #Cybersecurity

44

4 ways to leverage mobile apps to increase your attack surface: (shout out to Jonathan Bouman for these tips) 1. Modify Mobile Apps for HTTPS Inspection For Android apps, use apk-mitm to disable certificate pinning, enabling HTTPS inspection in Burp Suite. On iOS, a jailbroken device with checkra1n can bypass security for similar traffic inspection. 2. Set Up a Jailbroken iOS Device A jailbroken iOS device, like one using checkra1n, is key for bypassing security and inspecting app traffic. It’s an effective way to access data that’s otherwise locked down. 3. Have Multiple Devices Using two jailbroken devices per platform (iOS & Android) ensures continuity if one device fails. Jailbreaking risks bricking, so having a backup saves time and keeps your testing workflow smooth. 4. Maintain Cross-Platform Systems Use both iOS and Android systems in testing. Each platform may access different APIs, increasing the attack surface. Plus, switching platforms can sometimes make testing easier. #bugbountytips #bugbounty #bugbounties

24

1 commentaar

Security Researchers? SecureFi Brussels 2024 is just around the corner, and we have an incredible lineup of talks that are perfect for security researchers eager to explore new approaches and tools in Web3 security! 🚀 🚀 🚀 You don't want to miss these talks: - Kasper Zwijsen from Hexens - "Finding Vulnerabilities by Querying Smart Contracts for Bug Patterns With Glider" -Raoul S. from Runtime Verification Inc Verification - "Revolutionizing Solidity Debugging with Symbolic Execution" -Josef Gattermayer from Ackee Blockchain Security - "Wake framework: Swiss-knife for security researchers" -Elad Ernst from dWallet Network - "Breaching Ethereum's Privacy and Exploiting DEXs Using a Simple Cloud Vulnerability" These sessions will dive deep into the latest innovations and methodologies in Web3 security research. Whether you're a seasoned researcher or just starting out, there's something for everyone. Register Here - https://lnkd.in/dex2pnYf #Web3Security #SecureFiBrussels #CyberSecurity #Blockchain #SecurityResearch

7

Somehow, Volt Typhoon returned, more sophisticated and more determined than ever. Unlike attackers who vanish when discovered, this adversary digs in even deeper when exposed. According to the STRIKE Team, Volt Typhoon’s tactics are adaptive and multifaceted. They exploit legacy weaknesses in Cisco RV320/325 routers and Netgear ProSafe routers, devices long past their prime, using them as operational relay boxes. These end-of-life devices become perfect entry points, and in just 37 days, Volt Typhoon compromised 30% of visible Cisco RV320/325 routers. You can read more about Ryan Sherstobitoff's insights in this ITPro article written by Solomon Klappholz. #cybersecurity #datahacks #volttyphoon https://lnkd.in/evdecmGd

12

1 commentaar

What does generative AI means for cybersecurity? Check out the interview (in dutch) with Shannon Murphy global security and risk strategist at Trend Micro . For similar content in english : https://lnkd.in/eniE-FgB

11

𝑻𝒉𝒆 “𝒔𝒊𝒍𝒆𝒏𝒕 𝒕𝒉𝒓𝒆𝒂𝒕” 𝒐𝒇 𝒄𝒚𝒃𝒆𝒓 #𝒆𝒔𝒑𝒊𝒐𝒏𝒂𝒈𝒆 𝒊𝒏 𝒕𝒉𝒆 𝑵𝒆𝒕𝒉𝒆𝒓𝒍𝒂𝒏𝒅𝒔 Earlier this year, the discovery of COATHANGER malware in a Dutch military network shone a light on the growing threat of cyber espionage in the Netherlands. It has since been discovered that the campaign was far more widespread than initially thought, leading to the compromise of 14,000 devices around the world. Targets included Western governments, diplomatic institutions, and companies in the defense sector. The campaign is believed to have been orchestrated by a state-backed Chinese threat actor.  A recent article by TNW points out that despite the breadth and sophistication of espionage campaigns, it’s the topic of ransomware that continues to dominate the conversation in cybersecurity. This is because ransomware is easily identifiable and produces immediate effects, unlike espionage, which is far more subtle. During espionage campaigns, the priority is stealth. Threat actors take deliberate measures to obfuscate their activities and stay under the radar, making them difficult to detect. These campaigns may run for years before being discovered, if they are discovered at all.  Espionage also produces delayed effects, tricking our brains into thinking it is less of a threat than it is. The effects of espionage – loss of sensitive data, intellectual property, state secrets – compound over time, often going unnoticed until the damage is done. To guard against this, organizations whose threat landscapes highlight espionage as a risk should perform periodic assessments to check for breaches, as well as ensuring a proactive monitoring, detection, and response (MDR) solution is in place.  Want to learn more about cyber espionage in the Netherlands? Check our sector-specific threat landscapes, linked in the comments below.

30

2 commentaren

Volt Typhoon, a cyber espionage group, is exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. ​ ​This specific zero-day allows attackers to upload a file to vulnerable systems and infiltrate networks, having the potential to wreak havoc on the software supply chain. ​ ​ProcessUnity's Threat & Vulnerability Response enables TPRM teams to assess potential exposure to emerging threats, such as the Versa Director zero-day, in hours or days. ​ ​Check out more on Threat & Vulnerability Response: https://ow.ly/AZJv50Tezco ​ Read more on the attack, how hackers can control network infrastructure and affect supply chains: https://ow.ly/RpjU50Tezcp ​ #CyberSecurity #ITSecurity #SupplyChain

20

3 commentaren

💡  The importance of penetration testing for NIS2 On May 15th at 11 am, we're hosting a webinar to delve deeper into the importance of penetration testing for NIS2. #NIS2 aims to establish a digital environment that is safer and more resilient, elevating the level of #cybersecurity across all European Union member states. Furthermore, on April 18th, the draft law for the cybersecurity of network and information systems, known as the "NIS2 Law," was approved by the Chamber of Representatives of the Federal Parliament. During the webinar, Nico Cooman, managing partner of The Security Factory, and David 🅰️ Callebaut, CISO Lead and Founding Partner of Infosentry NV, will address the following points: ➤ A brief overview of "What is NIS2?"  ➤ An introduction to the CCB CyFun framework  ➤ Deep dive controls regarding penetration testing  ➤ Penetration Testing  ➤ Some live hacking demos Don't miss this opportunity to gain more insight into the crucial role of penetration testing within NIS2. Register now for the webinar 👉 https://lnkd.in/e2tTnR9g #theSecurityFactory #Pentesting #NIS2 #Webinar

22

1 commentaar

The Dutch National Police infiltrated two prominent information-stealing malware services and obtained information pertaining to their criminal users. Data Breach Today’s article "Dutch Police and FBI Infiltrate Info-Stealer Infrastructure'," highlights Intel 471’s research on how many malware users rely on crypting - aka repacking - services to ensure they can reliably infect targets. Read more here: https://hubs.la/Q02Wjyy00 #Intel471 #cybersecurity #malware

44

2 commentaren

#CyCatz #cybersecurity How I Hacked the Dutch Government: Exploiting an Innocent Image for Remote Code Execution   More... https://shorturl.at/se04C   #cyberawareness #cyberattack #breaches #databreaches #cybercrime #darkwebmonitoring #SurfaceWebMonitoring #mobilesecurity #emailsecurity #vendorriskmanagement #BrandMonitoring #security #information #bugbounty #rce

9