Gabriel M.

CVE-2023-49606 - CVSS 9.8 - EPSS 0.09% - A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability. Ref.1: https://lnkd.in/e7G3a3RW Ref.2: https://lnkd.in/ejAm7ekx

3

Day 1 of Infosecurity Europe: Key Insights Practical Solutions ➣MDR - Managed Detection and Response ●Description: Turnkey threat detection and response services. ●Benefit: Significantly reduce the time to detect and respond to cyberattacks. ➣MCD - Managed Cyber Defense ●Description: State-of-the-art cybersecurity architecture. ●Benefit: Protects clients' complete digital universe. ➣AS - Advisory Service ●Description: An elite team of highly skilled and certified cybersecurity experts. ●Nature: Both practical and theoretical. Theoretical Solutions ➣MRC - Managed Risk and Controls ●Description: An umbrella of risk management services. ●Benefit: Enhances security operations with real-time visibility. Future of Cybersecurity ●Human Behavior Analytics: The future of cybersecurity is increasingly based on analyzing human behaviour. ●IT Training: Should focus on independent user risk assessment rather than whole teams. ●Method: Training should be integrated into employees' daily work activities.

1

CVE-2024-3661 - CVSS 8.8 - EPSS We don't have an EPSS score for this CVE yet - By design, the DHCP protocol does not authenticate messages, including for example the classless static route option (121). An attacker with the ability to send DHCP messages can manipulate routes to redirect VPN traffic, allowing the attacker to read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Many, if not most VPN systems based on IP routing are susceptible to such attacks. Ref.1: https://lnkd.in/eXEskBcn Ref.2: https://lnkd.in/e_KwDMtH

1

#ENISA has been authorised as a Common Vulnerabilities and Exposures (CVE) Numbering Authority. With this new enhanced role in Coordinated Vulnerability Disclosure, the Agency can now support EU CSIRTs better when there is a need to: 📋 assign CVE Identifiers 🗂 publish CVE Records for vulnerabilities discovered by or reported to EU CSIRTs.

4

https://lnkd.in/dcB_9syP 1- Impacket: - psexec.py - smbexec.py - wmiexec.py - dcomexec.py 2 - Kerberos: - GetUserSPNs.py 3- Windows Secrets - secretsdump.py - mimikatz.py 4 - Server Tools/MiTM Attacks - ntlmrelayx.py 5 - SMB/MSRPC - smbclient.py - lookupsid.py - reg.py - rpcdump.py - samrdump.py - services.py

118

1 comentario

4 Best Threat Intelligence Practices❗ 🧠Use intelligence proactively to easily identify potential vulnerabilities ⚙️Incorporate with existing security tools to define suspicious events and patterns ⚠️Use to reduce “alert fatigue” by setting effective alert thresholds 🔒Combine with threat hunting as a guide to interpreting all evidence By incorporating threat intelligence into security practices, teams can achieve better cybersecurity and swiftly diagnose and respond to critical events. Plus, through the usage of alerting tools, like OnPage, teams can always proactively identify threats and vulnerabilities by prioritizing alerts and ensuring that all critical incidents immediately catch the attention of incident responders. Learn more: https://lnkd.in/eKiDh_S  #threatintelligence #cybersecurity #incidentalerting

9

your checklist to prioritize vulnerabilities ☑︎ exploitability: check attack vector, complexity, privileges required, user Interaction ☑︎ impact: evaluate confidentiality, integrity, availability impacts ☑︎ exploit code maturity: rate from unproven to high ☑︎ remediation level: identify from official fix to unavailable ☑︎ adjust metrics: tailor base metrics to fit organizational context ☑︎ CVSS score: use CVSS calculator for precise scoring ☑︎ assign priority: Critical (9.0-10.0), High (7.0-8.9), Medium (4.0-6.9), Low (0.1-3.9) ☑︎ action plan: prioritize high-severity issues, document and assign

2

One page - Threat Landscape, Threat mind map with major kinds of threats, tools, techniques and strategies to deal with threats for internet infrastructure. By European Union Agency for Cybersecurity (ENISA) 👌👍👍👍👍 #grcico

41

All about penetrating Active directory: - Tools - Commands - Graphs and Admins - PowerView Deep dive Highly recommended for Cybersecurity penetration testing professionals. 👍👍👍👍👍 Thanks for @varonis #grcico

147

2 comentarios

🚨 #DataBreach 🚨 #Spain, CCN CERT (Centro Criptológico Nacional de España) A potential data breach at CCN CERT (Centro Criptológico Nacional de España) has been detected on a hacking forum. According to the post, the threat actor is claiming to sell a database belonging to CCN CERT, containing 2k users. The sample provided shows that the compromised data includes: usernames, full names, email addresses, physical addresses, and job titles. The confirmation or denial of these claims has yet to be verified. #CyberAttack

12

Yesterday at #EspacioTisec, Ramón Ortiz, CISO of Mediaset España, shared his experience of hiring and managing a Cyberisk insurance policy. 🤓 Risk management is a primary responsibility of the Board of Directors, and CyberRisk is a significant contributor to it. The nature of CyberRisk is produced by the use of digital technology and its associated vulnerabilities. Still, its impact can be much broader, including damage to the assets with operational disruption, financial losses, reputation damage, data losses, and legal and regulatory consequences. ⚠️ Ramón pointed out that a CybeRisk policy will not mitigate or eliminate risks; rather, it will transfer them. 🛡 For those considering a CyberRisk insurance policy, Ramón recommended consulting the highly relevant ISO/IEC 27102 guideline, 'Information Security Management - Guidelines for cyber-insurance.' 📑 We also had the opportunity during the Q&A to discuss the interesting book "In the CISOs Life" that Ramon co-authored with Fanny Perez, Enrique Cervantes, and Ruben Fernandez, the CISOs of Codere, Fintonic, and Exide Group. 📖 I had a lot of pleasure reading this book, which is full of interesting stories and valuable insights into the life of a CISO. 🪖 I extend my heartfelt thanks to Luis Fernández, José de la Peña, and the entire team of Revista SIC-Ediciones Coda for organizing this insightful event. It was a privilege to hear from the key players in the cybersecurity and cyber-insurance industries and gain valuable insights into its current status, best practices, and future trends. 🤓🙏 Special thanks to Ramón Ortiz for his generosity in sharing his experience. #CISO #CYBERRISK #CYBERINSURANCE #CYBERSECURITY Arexdata Applivery CyCognito Conceal Gabriella Di Domizio Roberto Carlos Pérez, Javier Conejo, Alberto Tejero Javier Lima, Cristina Gallego, Celia Martín, LEX Program

26

5 comentarios