Alberto Mounguengui Moudoki

SP 1314, NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk | CSRC https://bit.ly/4bX9zrt

Cybersecurity hiring slows, pros’ stress levels rise: 66% of cybersecurity professionals say their role is more stressful now than it was five years ago, according to ISACA. Major contributors to rising stress levels among cybersecurity professionals According to the data, the top reasons for increased stress among cybersecurity professionals are: An increasingly complex threat landscape (81%) Low budget (45%) Worsening hiring/retention challenges (45%) Insufficiently trained staff (45%) Lack of prioritization of cybersecurity risks (34%). In line with this sentiment around challenging threats, … More → The post Cybersecurity hiring slows, pros’ stress levels rise appeared first on Help Net Security.

A report from CISA confirmed adding an actively exploited security flaw tagged CVE-2017-3506with CVSS score of 7.4 affecting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalogue due to active exploitation to obtain unauthorized access and obtain unrestricted control. The official statement by the agency reads; “Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.” Trend Micro also confirmed the 8220’s active exploitation of the flaw for cryptocurrency mining in memory using a PowerShell script. At the same time, a cybersecurity researcher reported, “The gang employed obfuscation techniques, such as hexadecimal encoding of URLs and using HTTP over port 443, allowing for stealthy payload delivery.” Multiple Russian Firms Hit By Decoy Dog Trojan Reports from cybersecurity researchers indicate that the following sectors (Power companies, IT Firms, and Government Agencies) are currently under cyber attack involving the delivery of the Windows version of Decoy Dog malware. A report by Aleksandr Grigorian and Stanislav Pyzhov indicates that “The Hellhounds group compromises organizations they select and gains a foothold on their networks, remaining undetected for years.” Positive Technologies, a reputable cybersecurity company conducting Operation Lahat, is currently investigating the activities of the advanced persistent threat (APT) group HellHounds. Recent Cyber Attack Results in Replacement of AutoIt with AutoHotkey Evidence gathered from the cyber attack involving the DarkGate malware-as-a-service takes a significant step by moving beyond using AutoIt scripts to an AutoHotkey mechanism to remain undetected during cyber attacks. The development became evident in DarkGate version 6, which is sold on subscription and currently has over 30 subscribers. Further details about DarkGate revealed that the remote access trojan (RAT) is equipped with command-and-control (C2) and rootkit capabilities, with incorporated modules that promote credential exfiltration, screen capturing, keylogging, and remote desktop. A researcher from Trellix security researcher, Ernesto Fernandex Provecho, gave more insight into the malware activities when he said, “DarkGate campaigns tend to adapt really fast, modifying different components to try to stay off security solutions.” Telerik Warns Server Flaw Could Aid Rogue Admin Accounts Creation Following the discovery of an exploitable flaw impacting the Telerik Report Server that could aid the creation of rogue administrator accounts... https://lnkd.in/exhy27BW #CyberSecurity #iambench #cyberattack #Password #AI #Hacked #Thesecuritybench #cyberattacks #ArtificialIntelligence #DataSecurity

***CISSP PRACTICE QUESTION *** Which of the following access control models uses a lattice to control access based on a set of rules? a) Discretionary Access Control (DAC) b) Role-Based Access Control (RBAC) c) Mandatory Access Control (MAC) d) Attribute-Based Access Control (ABAC) Comment with your answer! Download the app to get more free practice questions: iOS: https://lnkd.in/egPx4tbT Android: https://lnkd.in/eNP483uV  #cisspcertification #cissp #cissptraining #infosec #cybersecurity

🚀 Attention Cybersecurity Professionals! NIST's National Cybersecurity Center of Excellence (NCCoE) has released a new draft on Implementing Zero Trust Architecture (NIST SP 1800-35) and they need your feedback. 📅 Comment by September 30, 2024, and join our mailing list for updates. Let's work together to build a stronger cybersecurity framework. #CyberSecurity #ZeroTrust #NIST #PublicComment #TechCommunity #CyberSafety #SecurityFramework #ITGovernance #CyberInnovation #LufSec

New Post: #CISA Releases Analysis of #FY23 Risk and Vulnerability Assessments - https://lnkd.in/d-V3nXqW CISA Releases Analysis of FY23 Risk and Vulnerability Assessments 09/13/2024 12:00 PM EDT CISA has released an analysis and infographic detailing the findings from the 121 Risk and Vulnerability Assessments (RVAs) conducted across multiple critical infrastructure sectors in fiscal year 2023 (FY23). The analysis details a sample attack path including tactics and steps a cyber threat actor could follow to compromise an organization with weaknesses representative of those CISA observed in FY23 RVAs. The infographic highlights the most successful techniques for each tactic that RVAs documented. Both the analysis and infographic map threat actor behavior to the MITRE ATT&CK® framework. CISA encourages network defenders to review the analysis and infographic and apply the recommended mitigations to protect against the observed tactics and techniques.   Robert Williams#News247WorldPress

A comparison between three key technological solutions used in information security management: SIEM, SOAR, and XDR. Below is an explanation of each element in the table: 1. Primary Function: SIEM (Security Information and Event Management): Used to analyze and manage security event logs. SOAR (Security Orchestration, Automation, and Response): Used to automate and organize security operations. XDR (Extended Detection and Response): Used for unified threat detection and response across networks, endpoints, and cloud. 2. Data Collection: SIEM: Relies on collecting logs from various sources. SOAR: Relies on data from integrated security tools. XDR: Collects data from endpoints, networks, and cloud. 3. Threat Detection: SIEM: Relies on predefined rules for threat detection. SOAR: Relies on integrated tools for threat analysis. XDR: Uses advanced analytics and machine learning for threat detection. 4. Alerting: SIEM: Generates alerts based on log data. SOAR: Automates alert responses. XDR: Provides real-time alerts. 5. Incident Investigation: SIEM: Provides tools for log analysis. SOAR: Focuses on incident and case management. XDR: Includes integrated incident response capabilities. 6. Compliance: SIEM: Supports compliance reporting and log maintenance. SOAR: Assists compliance through automation. XDR: May assist compliance through integration. 7. Scalability: SIEM: Designed to handle large volumes of logs. SOAR: Scales with workflow automation. XDR: Designed to scale across multiple security layers. 8. Automation: SIEM: Limited automation capabilities. SOAR: Offers a high degree of automation. XDR: Provides less customizable automation. 9. Integration: SIEM: Integrates with diverse data sources. SOAR: Integrates with a wide range of security tools. XDR: Natively integrates with multiple platforms. 10. User Interface: SIEM: Offers dashboards for logs and alerts. SOAR: Features a user-friendly interface. XDR: Provides a simplified security management interface. This table highlights the fundamental differences between these systems, helping organizations choose the most suitable solution according to their security needs and requirements.

CISA & FBI's new "Secure by Design" alert targets cross-site scripting (XSS) vulnerabilities, which have long been exploited to compromise both data and user trust. https://hubs.li/Q02YzGT20 #cybersecurity #cyber #ai #datasecurity #infosec