Adam Gasior

⚡Too many privileges can lead to incidents. That's why it's crucial to give the right level to the right people. Bartosz Kryński, solutions engineering team leader at CyberArk, will tell you more about this. At the IT Leaders Day, Bartosz will present on Bloopers and Blunders of Identity Security Projects. Learn how to safeguard your organization against cyber threats by establishing a strong identity and access management framework that assigns the correct permissions and access types to each individual, helping you stay ahead of potential attackers. See you tomorrow ➡️ https://lnkd.in/d2vsfBsi #bakotech #ITLeadersDay

13

Get prepared for Disaster (in AWS Cloud).

5

ICYMI: Multiple Vulnerabilities in Ivanti Cloud Services Application (CSA) Could Allow for Remote Code Execution: Multiple vulnerabilities have been discovered in Ivanti Cloud Services Application (CSA), the most severe of which could allow for remote code execution. Ivanti Endpoint Manager is a client-based unified endpoint management software. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the system. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. #cyber #cybersecurity #informationsecurity #innovation #cloud #cloudsecurity #cto #technology

3

In a recent interview, I shared thoughts on securing VMS amidst rapid technological advancements like AI and cloud integration. We discussed how balancing security, functionality, and IT compatibility is key to addressing modern threats while leveraging platforms like Milestone for innovation. #cybersecurity #VMS #Milestone #MakeTheWorldSee

24

2 komentarze

What does open-source mean to you? At Zabbix, it’s always stood for transparency, community, and – most importantly – security. 🔐 Check out our latest #ZabbixBlog post to find out why open-source software is every bit as secure as proprietary software and see how the Zabbix team makes sure that our product is as secure as it can possibly be. 📖 Read now: https://lnkd.in/d5bzUcJz #opensource #security #Zabbix

52

Learn how to perform Hyper-V VM Live Migration without using failover clustering in our latest blog post. Discover the benefits of seamless migration and get detailed steps for configuring servers, setting up network storage, and executing the migration using Hyper-V Manager. Avoid potential pitfalls with our expert tips and ensure a smooth migration process. https://zurl.co/m6v6 #HyperV #LiveMigration

2

#Red_Team_Tactics How to Achieve Eternal Persistence in an AD environment Part 1: https://lnkd.in/dqKA3exR Part 2: https://lnkd.in/drUeNpjt Part 3: https://lnkd.in/d4bzQ-sy

1

“Every single place where OpenShift runs is where our customers are deploying IBM software that’s powered and backed up by EDB Postgres. I believe we’ve tripled the adoption rate since the inception of the CloudNativePG open source project, which is proof of how rock solid the technology is.” – Piotr Godowski, CTO at IBM Krakow Software Lab During our recent panel on running Postgres in Kubernetes, Piotr shared the scale at which his company is using EDB and Postgres for its operations, integrating EDB Postgres into dozens of software offerings, resulting in deployments across hundreds of OpenShift clusters. Want to dive deeper into the latest advancements in Kubernetes? Connect with EDB at #KubeCon November 12-15 in Salt Lake City. Learn more here: https://bit.ly/4hv0b26 Watch the full panel on Running Postgres in Kubernetes here: https://bit.ly/4gLLlUN #Postgres #PostgreSQL #justsolveitwithPostgres #EDBPostgresAI #data #AI #database #DBA #opensource #kubernetes #k8s #kubecon Gabriele Bartolini Marc Linster Melissa Logan Xing Yang

33

Wondering about the recent Snowflake compromise and how users are affected? Doron Karmi, Mitiga’s Senior Cloud Security Researcher, fills in Zeljka Zorz via Help Net Security on the details and what we know about the threat actor. https://loom.ly/aDUSi-w #Cybersecurity #DataBreach #ThreatResearch #Snowflake #CloudBreach #ThreatHunt

9

How to Secure your VCF Management Domain using VMware vDefend Firewall https://dy.si/RKvUXh

10

The security advisory from Broadcom details a critical vulnerability in the Symantec Endpoint Protection (SEP) product. Here's a detailed summary of the advisory: Vulnerability Overview: - CVE ID: CVE-2024-3011 - CVSS v3.1 Base Score: 9.8 (Critical) - Affected Product: Symantec Endpoint Protection (SEP) - Affected Versions: 14.3 RU3 MP1 and all earlier versions Description: The vulnerability is an authentication bypass issue in the Symantec Endpoint Protection Manager (SEPM). It allows an unauthenticated attacker to gain unauthorized access to the SEPM console with administrator privileges. Impact: An attacker exploiting this vulnerability could potentially: - Access sensitive information - Modify system configurations - Execute arbitrary commands on the affected system Mitigation: Broadcom has released a patch to address this vulnerability. Users are strongly advised to upgrade to the following versions: - SEP 14.3 RU4 (14.3.9200.1000) for Windows - SEP 14.3 RU4 (14.3.9200) for Mac and Linux Additional Recommendations: 1. Apply the patch as soon as possible 2. Implement network segmentation to limit potential attack vectors 3. Monitor systems for suspicious activities 4. Ensure all endpoints are running the latest version of SEP The advisory emphasizes the critical nature of this vulnerability and urges customers to take immediate action to protect their systems. Broadcom also provides links to download the latest versions and access additional support resources. https://lnkd.in/gXmHk9py

1

Another exam and another certificate 😀 I just passed Red Hat EX480 exam and I obtained a new certificate "Red Hat Certified Specialist in MultiCluster Management". It was an interesting exam because it covered multicloud and security in Kubernetes clusters (OCP). #redhat #kubernetes #openshift

129

9 komentarzy

Palo Alto Prisma Access vs Zscaler Private Access Prisma Access provides cloud-delivered ZTNA 2.0 with the best user experience, in a simple unified product * Enables least-privilege access using App-ID at layer 7, with controls at the app, sub-app app function, and app activity levels—for any user, and any app, anywhere. * Continuously verifies user and application behavior across the network. It goes beyond monitoring with the ability to revoke access in real-time if suspicious behavior occurs. * Supports all of your apps, regardless of how the user connects, or whether the application is on-premises, in the public cloud, or SaaS-based. Palo alto Prisma Access is built in the cloud to secure at cloud scale, leveraging the largest cloud providers in the world to enable elastic scale and the highest performing multi-cloud network backbone. Prisma Access is a truly unified product, converging management, policy and data for all users and all apps across all capabilities including ZTNA, NG-CASB and DLP. GlobalProtect allows you to protect mobile users by installing the GlobalProtect app on their endpoints and configuring GlobalProtect settings in Prisma Access. GlobalProtect allows you to secure mobile users’ access to all applications, ports, and protocols, and to get consistent security whether the user is inside or outside your network. GlobalProtect™ delivers the protection of next-generation security platform to the mobile workforce in order to stop targeted cyberattacks, evasive application traffic, phishing, malicious websites, command-and-control traffic, and known and unknown threats. Zscaler provides cloud web security products and solutions to establish secure internet access and interactions in any work environment. Zscaler enables the world's leading organizations to securely transform their networks and applications for a mobile and cloud first world. Zscaler is a security cloud. They have their own data center and their presence is available in almost any continent  There are multiple methods to connect a user, data center or remote branch location to their cloud. * Using the zscaler app connector which is the client you install in endpoints. They support Linux, Windows, macOS, android and iOS platforms. * Establishing an IPSec tunnel to their cloud. * Establishing a GRE tunnel to their cloud. Zscaler protects all users and devices wherever they are with fully integrated data protection across all channels, including unsanctioned applications, authorized applications, and devices. Zscaler Private Access (ZPA) is a ZTNA as a service, that takes a user- and application-centric approach to private application access. 

1

Learn how Zscaler's new Terraform modules for ZIA, ZPA, and more are simplifying and automating zero trust deployments: https://lnkd.in/dnEiz2ti #RNSBytes #Zscaler #Terraform #ZeroTrust #Automation

9