Kai Wittenburg

If your organisation uses Palo Alto Next-Generation Firewall (NGFW) as a firewall, you should update the firmware immediately due to a remote code execution vulnerability. More details can be found in the following NCSC post - stay save! #awareness #siem #automatedalerting #swissmakers #cybersecurity

4

🔐 Flashpoint, in partnership with Onapsis, reveals crucial threat intelligence on escalating cyber threats targeting SAP applications. Our new joint analysis exposes the sophisticated methods employed by cybercriminal and state-sponsored groups, emphasizing their increased aggression in exploiting SAP vulnerabilities for financial gain, espionage, and sabotage: 🔸 Increased aggression from cybercriminal groups and state actors in exploiting SAP vulnerabilities. 🔸 Trends in ransomware attacks specifically targeting SAP data and applications, outlining how these threats have evolved to become more dangerous. 🔸 Vital recommendations on safeguarding your SAP environments against these heightened threats. 🌐 Join us for a live session on April 24th with industry experts Juan Perez-Etchegoyen and Christian Rencken, as they delve deeper into our findings and guide you on how to bolster your defenses: https://lnkd.in/djpmw7pj 📥 Download the full report now to equip yourself with the knowledge to mitigate these threats and secure your critical business applications: https://lnkd.in/dHW2xkiK #ThreatIntelligence #SAPSecurity

24

1 Kommentar

You want to learn more about how to protect your OT environment from cyber attacks? Read our article (in German) in the "IT security" guide published by Reflex Verlag GmbH in the new Handelsblatt issue. Link to the issue in the comment below ⬇ #ADSTECIndustrialIT #OT #cybersecurity #cyberattacks

59

1 Kommentar

The latest update for #archTIS includes "DFARS 7012 Class Deviation and #NIST 800-171 Rev 3 Guidance for DIBs". #cybersecurity #securecollaboration #dataprotection https://lnkd.in/eXu7rZ85

1

The Cybersecurity and Infrastructure Security Agency (CISA) announced the release of a new resource, the Vehicle Incident Prevention and Mitigation Security Guide. CISA created this Guide to provide stakeholders with a high-level overview of general security best practices to prevent vehicular attacks that can harm pedestrians and critical infrastructure, and potential actions to mitigate the consequences, should an incident occur. It also provides a current, detailed look at the threat environment for this vector, and underscores the fact that taking steps to mitigate against deliberate incidents can yield additional benefits for protection against accidental ones. The product outlines key steps organizations and individuals can take to increase their security in the face of vehicle incident threats. https://lnkd.in/dC9ynu9b

9

2 Kommentare

#ISO27001 and #CISL. Congratulations to Julie Mann Kjeldsen and Anders Høgh Olesen with the ISO/IEC 27001 Lead Implementer and Certified Information Security Leader certifications. Julie got the ISO/IEC 27001 Lead Implementer certification. The course was focusing on implementing and maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001, and it trained the participants in leading internal and external ISMS implementation projects. Whether supporting their organization in implementing an ISMS or delivering information security consulting services to assist organizations in implementing an ISO/IEC 27001 ISMS and achieving certification. The course provided Julie with a comprehensive understanding of ISMS best practices and a framework for its ongoing management and improvement. Anders succeeded in completing the Cyber Information Security Leader (CISL). A course designed to train and enabling cyber security managers and specialists to safely lead organizations through the challenges of digitalization. The CISL education focused on strengthening the participants' capability to navigate at the executive level, managing politics, risks, stakeholders, crisis, culture, and the corporate reporting game. Participants – and hereby also Anders - were introduced to the value of knowing how personality types, capabilities, and behavioural structures can benefit in crisis situations and be used strategically to create impact and drive results.   Well done, Julie and Anders! 🤘 itm8 / www.itm8.com #CyberSecurity #ISO #CISL #certification #itm8

98

8 Kommentare

Vorarlberg IT Specialists Train to Defend Supply Chains Against Cyberattacks 🔐💻 On June 5-6, #IT experts from #Vorarlberg and Lake Constance region participated in a cybersecurity training in #Dornbirn. Using the AIT Cyber Range, they practiced responding to a series of severe cyberattacks on a supply chain of four companies. The exercise simulated IT system failures, ransom demands, media chaos, and food supply disruptions. The goal was to restore normal operations through emergency plans and communication strategies, which the participants successfully achieved.⚠️ Read more 🔗 https://lnkd.in/dHy7yQ3G Wirtschaftskammer Vorarlberg | Digital Factory Vorarlberg GmbH | #cyberrange

7

🚨 Podcast alert 🚨 Check out this new podcast with VP Security Research Zur Ulianitzky with TechnoPlanet (Publisher of eChannelNEWS) to learn: 📌 Why you need to map critical assets and threats to prioritize security efforts 📌 How 80% of exposures come from identity and credential misconfigs 📌 What in the world is the deal with threat hunters https://lnkd.in/dQ6g8Zce

26

1 Kommentar

🛡️ Cyberattacks are increasingly more sophisticated, frequent, complex and versatile, and it's hard to find qualified resources with up-to-date specialist knowledge. Read this article to learn about the #SecurityOperationsCenter model, and how it's proven successful in Switzerland so far ➡️ https://brnw.ch/21wIRkd ⬅️ #securityoperations #cybersecurity | Authored by ISG's Frank M. Heuer, who presented this content at Vogel's IT Security Swiss Conference ISSX 2023

7

⚠ CYBERSECURITY HIGHLIGHTS FOR THE WEEK ⚠ Threat Actor in Focus - Emerging Threat: Void Manticore’s Destructive Cyber Campaigns Targeting Israeli Organizations Threat Actors: Void Manticore Attack Type: Public-facing web server Objective: Espionage Target Technology: Windows Target Geographies: Israel Target Industries: Government & Critical Infrastructure Business Impact: Data Loss, Data exfiltration Summary: Void Manticore (aka Storm-842) is an Iranian state-sponsored threat actor known for conducting destructive attacks on Israeli organizations and leaking information through the online persona ‘Karma’ (sometimes written as KarMa). These operations often target sectors such as government, finance, and critical infrastructure, aligning with Iran’s broader offensive strategy. The group employs straightforward and efficient techniques aimed at causing rapid and significant damage. Their operations extend beyond Israel, with attacks also reported in Albania, where they use the persona ‘Homeland Justice’ to leak stolen data. In Israel, Void Manticore is notable for utilizing a custom wiper named BiBi, after Israeli Prime Minister Benjamin Netanyahu. One common method Void Manticore uses to gain access to target systems is through internet-facing web servers like CVE-2019-0604, where they deploy web shells like the custom “Karma Shell.” This tool, disguised as an error page, can list directories, create processes, upload files, and manage services, using simple encryption methods like base64 and one-byte XOR for obfuscation. They have also been observed uploading a custom executable, do.exe, which checks for Domain Admin credentials. Upon successful authentication, it installs another web shell, reGeorge, indicating valid credentials. This suggests the initial access might be facilitated by another entity, possibly Scarred Manticore, a more sophisticated threat actor. Continue reading here ➡ https://lnkd.in/gvR_-7wt #CyberSecurity #Cyfirma #ETLM #externalthreatlandscape #ThreatIntelligence #CyberIntelligence #CYFIRMAResearch #malware #ransomware #threatactor #cybersecurityawareness Kumar Ritesh Dr. Saurabh Lal, P.D. Michael Henry Anna Koh Amit Thakur Harry Lee Glaiza Pardilla Harsha Vardhan Sam Parmar Rahul Raghav Yusuke Tateno Chiaki Izena（伊是名千晶）Greg Baylis David Plummer Rakesh R V Nicko Navarrete Ruri A. Hyungchan Mike Cho Montai Saiaroon Huy. Nguyen Tuong Vinh Dudley Swanepoel Mouli Saha Greg Baylis Vincent Cheng Julius S.

13

----New Features Add to VOLSYS Security Tool---- Check PDF File for Which Points We are Checking in Your Enviroment Tool has Section of Domain Controllers Health Status, Computers and Users Health and Security Issue, Special Groups and Users, Firewall, Group Policy, Legacy Protocol, Password Policy, ACL Checks, User Right Assignment, Registry Security. More Than 200+ Points Checking List ----More Details and Example HTML Reports Check Our Web Site: https://www.volsys.com.tr/ #volsys #activedirectory #adsecurity #ad #domain #domainsecurity #securitytool

43

📢 #CISA has highlighted updates for several #Adobe products, including #Illustrator, #Acrobat, #FrameMaker, and #Dreamweaver, among others. These updates address multiple high-severity vulnerabilities, identified as arbitrary code execution and memory leak issues. The most critical vulnerability, CVE-2024-30314, impacts #AdobeDreamweaver, a #webdesign #IDE (Integrated #Development Environment). CVE-2024-30314 is an #OScommandinjection vulnerability that allows arbitrary #codeexecution. Although Adobe has not assigned a severity score for CVE-2024-30314, the expected #CVSS score exceeds 9.0, indicating critical severity. Adobe Dreamweaver users should update to version 21.4 immediately to prevent #exploitation. 🛡️ Stay informed about emerging vulnerabilities with SOCRadar's #VulnerabilityIntelligence and check out the free #CVERadar service on LABS:  🔍 https://lnkd.in/dUPewh4K  🧪👁️ https://lnkd.in/dtHb53ct   #Cybersecurity #SecurityUpdate #VulnerabilityAlert #PatchNow

3

⚠️ Medium risk vulnerability in VirtoSoftware Virto Bulk File Download for SharePoint 2019. The issue allows an NTLMv2 hash leak, leading to potential information exposure. CVE-2024-33881. This highlights the importance of API security and proper configuration. #VirtoSoftware #SharePoint #InformationExposure #OWASP #APISecurity https://lnkd.in/e_hU9HV5

3