Alexander Nolte

If your organisation uses Palo Alto Next-Generation Firewall (NGFW) as a firewall, you should update the firmware immediately due to a remote code execution vulnerability. More details can be found in the following NCSC post - stay save! #awareness #siem #automatedalerting #swissmakers #cybersecurity

4

Vorarlberg IT Specialists Train to Defend Supply Chains Against Cyberattacks 🔐💻 On June 5-6, #IT experts from #Vorarlberg and Lake Constance region participated in a cybersecurity training in #Dornbirn. Using the AIT Cyber Range, they practiced responding to a series of severe cyberattacks on a supply chain of four companies. The exercise simulated IT system failures, ransom demands, media chaos, and food supply disruptions. The goal was to restore normal operations through emergency plans and communication strategies, which the participants successfully achieved.⚠️ Read more 🔗 https://lnkd.in/dHy7yQ3G Wirtschaftskammer Vorarlberg | Digital Factory Vorarlberg GmbH | #cyberrange

7

Blue and Red Teams watch out: This is how Offensive Packer Development works   Our colleagues Fabian M. and Sven Rath held a workshop on malware development at the cyber security conference "x33fcon" in Gydnia, Poland. They showed how a packer can be used to bypass endpoint detection systems and how the process of packing payloads can be automated.   All information and tasks of the workshop, the presentation and code snippets have been published in our new r-tec Github repository for all interested parties: https://lnkd.in/gJ_fW5WD   Thanks to Fabian M. and Sven Rath for the preparation and for sharing!    Every year, x33fcon brings together blue and red teamers, pentesters, incident responders, analysts and researchers to learn together how attackers and defenders think and behave today. The conference features top-class presentations on team collaboration, case studies and in-depth insights into attack and defense techniques.    We are delighted that our colleagues are engaged in this area and share their expertise.   #cybersecurity #itsecurity #hacker #malware

84

We found several vulnerabilities in the Open Source Content Management System Bludit, which is used to create websites and blogs. This advisory explains the vulnerabilities and proposes possible fixes and mitigations: https://lnkd.in/diUxkrXc

9

🚨CYBER ALERT: Spring Escalation: UAC-0006 Increases #Cyberattacks Starting from May 20, 2024, the financially motivated group UAC-0006 became significantly more active. 📆 As of 21.05.2024, the attackers have conducted at least two campaigns to spread the #SMOKELOADER malware. The emails contain a ZIP archive that may contain a: .IMG file containing EXE files .ACCDB documents (Microsoft Access) with macros that enable execution of a PowerShell command to download and run the EXE file As before, after a successful initial virus infection, malicious programs such as #TALESHOT, #RMS, and others are downloaded to computers. 🖍 At the moment, the botnet has several hundred infected computers. In the near future, we should expect the resumption of scams using remote banking systems. 🛡 Business managers are advised to immediately pay attention to the need to improve the security of automated workstations for accountants by initiating a review of the provided compromise indicators and ensuring the application of the necessary policies and security mechanisms.

5

Read our latest #blog by Dr. Erdal Ozkaya: "Incident Response & Forensics: Why Network Observability is Your Secret Weapon" >>> https://lnkd.in/g35N-eVE In this blog, you'll learn: #IncidentResponse (IR): - Swift Containment: IR is about minimizing damage. The faster you identify and isolate an incident, the less it can spread. - Damage Control: Effective IR helps you restore systems, mitigate losses, and get back to business as usual ASAP. - Learning from Mistakes: Analyzing incidents helps you strengthen your security posture and prevent future breaches. #DigitalForensics: - Understanding the “Who” and “How”: Forensics digs deep into the evidence to identify the attacker, their tactics, and the extent of the compromise. - Legal and Regulatory Compliance: Detailed forensic reports may be required for investigations, litigation, or to meet compliance standards. #Neox #observability #cybersecurity #networksecurity #networkforensics #incidentresponse #threatdetection #networkdetectionresponse #IT #CIO #CISO #hybridcloud #cloud #tap #networktap #bypasstap #packetbroker #packetcapture #pcap #wireshark #NPB #NDR #NOC #SOC #vtap #gigamon #ixia #netscout #viavi #liveaction #aws #azure #gcp #vmware #riverbed #cisco #profitap #arista #niagaranetworks #cpacket #cubro #garland #liveaction #napatech #aws #azure #gcp #splunk #elastic #extrahop #corelight

10

👉 CybersecurityHQ Report: 🔒 Russian GRU Blamed for Cyber Attacks in Germany The German Interior Ministry fingers Russian military intelligence for cyber assaults on key sectors, including government and defense. APT 28 exploited a Microsoft Outlook vulnerability in 2022, triggering a wave of concern. Foreign Minister Baerbock vows repercussions for this "intolerable" breach. #CyberSecurity #GRU #APT28 🤖 US DHS to Launch AI Safety Board In response to President Biden's order, DHS unveils a diverse board to tackle AI safety and security. Tech titans like OpenAI and IBM are among the 22 representatives. Expect insights into safeguarding AI's impact on society. #AISafety #TechLeaders #DHS 🔓 Dropbox Discloses Major Data Breach A significant breach exposes user data, highlighting vulnerabilities in Sign's electronic signature service. The breach sheds light on the importance of robust cybersecurity measures. #DataBreach #Cybersecurity #Dropbox 🔍 Insightful Discussion with Leading CISOs LinkedIn's Geoff Belknap and Meta's Guy Rosen share their journeys to the top of cybersecurity leadership. Their candid discussion offers insights into the human side of cyber defense. A must-read for those navigating the evolving threat landscape. #CISO #CyberLeadership #SecurityWeek

1

1 Kommentar

Are you keeping up with the latest in Microsoft 365 security? 💻 Check out our recent webcast with Korstiaan S. to explore the updates in logging and auditing that are changing the game in cloud forensics and incident response. Available to watch now: https://buff.ly/3K65bL6 #Microsoft #IncidentResponse #AuditLogs

18

Researchers at Graz University of Technology in Austria have discovered a new security vulnerability named “SnailLoad,” which allows attackers to spy on internet users by monitoring fluctuations in their internet connection speed. This loophole can bypass existing security measures such as firewalls, VPNs, and browser privacy modes. https://lnkd.in/gmmjFy6J Tags #cybersecurity, #DataPrivacy, #InternetSecurity, #SnailLoad,#TechInnovation

37

You want to learn more about how to protect your OT environment from cyber attacks? Read our article (in German) in the "IT security" guide published by Reflex Verlag GmbH in the new Handelsblatt issue. Link to the issue in the comment below ⬇ #ADSTECIndustrialIT #OT #cybersecurity #cyberattacks

59

1 Kommentar

🔐 Flashpoint, in partnership with Onapsis, reveals crucial threat intelligence on escalating cyber threats targeting SAP applications. Our new joint analysis exposes the sophisticated methods employed by cybercriminal and state-sponsored groups, emphasizing their increased aggression in exploiting SAP vulnerabilities for financial gain, espionage, and sabotage: 🔸 Increased aggression from cybercriminal groups and state actors in exploiting SAP vulnerabilities. 🔸 Trends in ransomware attacks specifically targeting SAP data and applications, outlining how these threats have evolved to become more dangerous. 🔸 Vital recommendations on safeguarding your SAP environments against these heightened threats. 🌐 Join us for a live session on April 24th with industry experts Juan Perez-Etchegoyen and Christian Rencken, as they delve deeper into our findings and guide you on how to bolster your defenses: https://lnkd.in/djpmw7pj 📥 Download the full report now to equip yourself with the knowledge to mitigate these threats and secure your critical business applications: https://lnkd.in/dHW2xkiK #ThreatIntelligence #SAPSecurity

24

1 Kommentar

#ISO27001 and #CISL. Congratulations to Julie Mann Kjeldsen and Anders Høgh Olesen with the ISO/IEC 27001 Lead Implementer and Certified Information Security Leader certifications. Julie got the ISO/IEC 27001 Lead Implementer certification. The course was focusing on implementing and maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001, and it trained the participants in leading internal and external ISMS implementation projects. Whether supporting their organization in implementing an ISMS or delivering information security consulting services to assist organizations in implementing an ISO/IEC 27001 ISMS and achieving certification. The course provided Julie with a comprehensive understanding of ISMS best practices and a framework for its ongoing management and improvement. Anders succeeded in completing the Cyber Information Security Leader (CISL). A course designed to train and enabling cyber security managers and specialists to safely lead organizations through the challenges of digitalization. The CISL education focused on strengthening the participants' capability to navigate at the executive level, managing politics, risks, stakeholders, crisis, culture, and the corporate reporting game. Participants – and hereby also Anders - were introduced to the value of knowing how personality types, capabilities, and behavioural structures can benefit in crisis situations and be used strategically to create impact and drive results.   Well done, Julie and Anders! 🤘 itm8 / www.itm8.com #CyberSecurity #ISO #CISL #certification #itm8

98

8 Kommentare