Dzmitry Lukyanenka

ESET NOD32 Antivirus 18.0.12.0 Unquoted Service Path #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

2

1. Platforms: • Windows 11 or Linux systems with iOS 18 compatibility integration. • Biometric Authentication: Face and Fingerprint 2. Security Options: • Bitdefender and ESET: Options for clients and engineers, showing flexibility in security tools. 3. Cybersecurity Bot: • mathGPT24: A central component providing guidance and analytics. Running windows defender for you creating tasks from your iOS. 4. Protection Against Cyber Threats: • Data Protection: Techniques to mitigate data scraping and tracking from both foreign and domestic threats. 5. Additional Features: • Biometric Data Handling and Storage: Show how biometric data is securely handled and stored. • Compliance and Standards: Ensure the diagram reflects compliance with CMMC levels as needed.

2

Excellent explanation Harun Seker, each type has its own advantages and limitations, so choosing the right one depends on your specific security requirements.

4

#CyberAlerts A critical vulnerability in the wpDataTables plugin exposes websites to SQL injection attacks. This flaw, identified as CVE-2024-3820, affects versions up to 6.3.1, allowing attackers to manipulate SQL queries and access sensitive data. Administrators are urged to update the plugin immediately and implement additional security measures to safeguard their websites against potential breaches. Read More: https://lnkd.in/dxibXVB4 #WordPress #Plugin #SQL #Vulnerabilities

1

1 Comment

Join Oleg Gorobets, Security Evangelist here at Kaspersky as he discusses the human factor in cyber-security. From burnout to automation, here's just a handful of the items Oleg will discuss during the presentation: ● Human vulnerabilities: What are the most common non-IT and IT/InfoSec professionals’ errors and intentional information security policy violations that led to security breaches - and how they can be exploited by cybercriminals, ● The impact of InfoSec professionals’ shortage on an organization’s cybersecurity, ● Monotonous work and burnout of InfoSec professionals as the obstacles to reliable company's cyber protection, ● Breakdown of common cyber incidents that occurred over the last two years due to human factors in companies around the world Learn more and register: https://kas.pr/s1ey

22

Join Oleg Gorobets, Security Evangelist here at Kaspersky as he discusses the human factor in cyber-security. From burnout to automation, here's just a handful of the items Oleg will discuss during the presentation: ● Human vulnerabilities: What are the most common non-IT and IT/InfoSec professionals’ errors and intentional information security policy violations that led to security breaches - and how they can be exploited by cybercriminals, ● The impact of InfoSec professionals’ shortage on an organization’s cybersecurity, ● Monotonous work and burnout of InfoSec professionals as the obstacles to reliable company's cyber protection, ● Breakdown of common cyber incidents that occurred over the last two years due to human factors in companies around the world Learn more and register: https://kas.pr/s1ey

28

Join Oleg Gorobets, Security Evangelist here at Kaspersky as he discusses the human factor in cyber-security. From burnout to automation, here's just a handful of the items Oleg will discuss during the presentation: ● Human vulnerabilities: What are the most common non-IT and IT/InfoSec professionals’ errors and intentional information security policy violations that led to security breaches - and how they can be exploited by cybercriminals, ● The impact of InfoSec professionals’ shortage on an organization’s cybersecurity, ● Monotonous work and burnout of InfoSec professionals as the obstacles to reliable company's cyber protection, ● Breakdown of common cyber incidents that occurred over the last two years due to human factors in companies around the world Learn more and register: https://kas.pr/s1ey

10

🔒Strengthen Your Security Framework with Pera Prometheus 🔒 At Pera Prometheus, we know that any policy is only as good as its application, therefore it is crucial to develop policies and procedures that complement your working practices to protect your information assets. From individual policies to a comprehensive security framework, we’re here to help. Whether it’s enhancing data protection or establishing a clear incident response plan, our custom solutions foster a security-conscious culture where your team can operate with confidence. Secure your future today with Pera Prometheus. 🌐 For further information about our services you can visit our website at https://lnkd.in/eGEyfa2Y or contact Gareth Shaw, CISM, CISSP #CyberSecurity #DataProtection #SecurityStrategy #infosec #riskmanagement #informationsecurity #itsecurity #cybersecurityawareness #securityconsultant #consultingservices #consultingservices #datasecurityconsultants #riskassessments #policydevelopment #compliancesupport #physicalsecurity #safeguarding #datatheft

7

Trojan.Win32.DarkGateLoader MVID-2024-0685 Code Execution #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

1

#Salam Extracting the Meterpreter Connections via CyberChef . Base64 Decoding zlib deflate استخراج اتصالات Meterpreter عبر CyberChef . فك تشفير Base64 zlib deflate #python #malware #script #msfvenom #msfconsole #msf #armitage

13

1 Comment

New release BrowserOSINT ;) BrowserOSINT 3.0 is new version :) An OSINT tool from enumeration subdomain, ports, emails compromise, reputation and CVE vulnerability detector. Collect information from public sources. New implementations: -implementation zoomeyes (If the domain address is protected by a WAF and the original IP is in the history, you can obtain it to bypass the WAF) previous version : -Shodan implementation -Criminal-IP Implementation -crt.sh implementation -implementation censys -Implementation Leaks mails. -implementation abuseipdb -implementation hackertarget - In each search with cst.sh, censys, zoomeyes will validate each IP if it is available or not. Link Repository: https://lnkd.in/ebiwA-yQ #offsec #redteam #pentesting #osint #purpleteam #hacking #ciso #seguridaddelainformación #seguridadinformatica #blueteam #cybersecurity #cybersec #blueteam #purpleteam #ciso #ThreatHunting #hacking #pentester #pentesting #cybersec #offsec #cibersecurity #ciberseguridad #seguridaddelainformacion #seguridadinformática #securityaudit #siem #cybersecurity #cve #splunk #soc #mitre #windows #entelgy #crtp #cnpen #crto #ejpt #oscp #crta

143

14 Comments

Malware Targets Polish Small Businesses In May 2024, hackers hit Polish small and medium-sized companies with smart phishing scams. These attacks put dangerous software like Agent Tesla, Formbook, and Remcos RAT on their systems. The threat spread beyond Poland affecting businesses in Italy and Romania too. This showed how exposed small companies are when they don't have strong cyber defenses. Cybersecurity company ESET has found that the attackers used hacked email accounts and company servers to send harmful emails and gather stolen data. They used DBatLoader, a complex malware loader, to deliver their payloads. This method shows a change from earlier tactics and proves cyber threats have become more advanced. Phishing emails had attachments with malware that when opened, started a multi-step process to install the trojan. The increasing danger to SMBs is worrying, as these companies often fall victim to their weaker cybersecurity defenses. Kaspersky cautions that trojans, which can look like real software create a big risk by getting past normal security measures. To guard against these changing threats small and medium-sized businesses should make email filtering, regular software updates, and thorough phishing awareness training their top priorities. Investing into cutting-edge threat detection tools is also key to spot and stop threats. The latest wave of phishing attacks shows why businesses need to take steps to protect themselves before problems arise. How is your company improving its defenses to handle these kinds of threats? Let us know your plans and thoughts in the comments section. #Phishing #SMBSecurity #Malware #CyberThreats #CyberSecurity

1

Web Hacking Arsenal by Rafay Baloch is a must-read for anyone diving into modern web penetration testing. Rafay, a well-known cybersecurity researcher, provides a practical guide filled with detailed insights, tools, and techniques essential for understanding web vulnerabilities and how to exploit them. Whether you're a beginner or an experienced pentester, this book equips you with the necessary skills to approach web security from a hacker's perspective. Highly recommended for all security professionals looking to enhance their knowledge of web application security! #Cybersecurity #WebHacking #Pentesting #RafayBaloch #WebSecurity #EthicalHacking

32

6 Comments

😎Search engines for pentesters😎 1. shodan.io , onyphe.io , censys.io , ivre.rocks ~ server 2. wigle.net ~ wifi 3. grep.app , searchcode.com , publicwww.com ~ codes 4. app.binaryedge , wiz.greynoise.io , fofa.info , zoomeye.org , leakix.net , urlscan.io , socradar.io , pulsedive.com ~ threat intelligence 5. hunter.io ~ email 6. intelx.io ~ osint 7. app.netlas.io , fullhunt.io , binaryedge.io ~ attack surface 8. crt.sh ~ certificate search 9. vulners.com ~ vulnerabilities

6