Manuel Couade

🔐 Understanding SQL Injection Attacks : An Invisible Threat to Your Data 🔐 SQL injection attacks are among the most common and dangerous threats to database security. They exploit web application vulnerabilities to access sensitive information, modify data, or even compromise the integrity of your system. How does it work ? Attackers inject malicious SQL commands into the input fields of a web application, such as login forms or search bars. If these inputs are not properly validated and filtered, the server executes these commands, giving hackers direct access to your database. Why is it serious ?   - 📉 Data theft : Attackers can access sensitive information such as customer data, financial information, and login credentials.  - 🔧 Data modification : They can alter or delete data, thereby disrupting business operations.  - 🚫 Unauthorized access : In the most severe cases, hackers can gain administrative privileges, compromising the entire system. 🔒 Data security : a priority for all! 🔒 Thanks to App-Prove, we offer to conduct an audit of your code in an accessible manner for everyone. 🚀 Calling to developers ! 🚀 Your expertise is valuable, and we need your feedback! At App-Prove, we constantly work to improve our services to better meet the needs of the developer community. To this end, we have created a quick and simple questionnaire. 👉 Participate now : https://lnkd.in/endNdpra #AppProve #CyberSecurity #SQLInjection #DataProtection #WebDevelopment #ApplicationSecurity #CyberThreat

5

Semperis is pleased to announce that Security Researcher Eric Woodruff, CIDPRO will be presenting a talk at Black Hat titled 𝐔𝐧𝐎𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐞𝐝: 𝐀 𝐓𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞 𝐭𝐨 𝐏𝐫𝐢𝐯𝐢𝐥𝐞𝐠𝐞 𝐄𝐬𝐜𝐚𝐥𝐚𝐭𝐢𝐨𝐧 𝐭𝐨 𝐆𝐥𝐨𝐛𝐚𝐥 𝐀𝐝𝐦𝐢𝐧𝐢𝐬𝐭𝐫𝐚𝐭𝐨𝐫, looking at the discovery of a novel technique that threat actors could use to compromise Entra ID and potentially gain unauthorized access to a wide range of resources and data, escalate privileges, and potentially control entire IT environments – making it a high-value target in ransomware attacks. ‘My demonstration will allow attendees to understand how hackers could exploit this novel technique, enabling threat actors to add or remove global administrators in Entra ID,’ said Woodruff. In a second talk Woodruff will be joined by Tomer Nahum to discuss Silver SAML and further highlight potential security flaws that can be present in cloud identity providers. #EntraID #ransomware #BHUSA #IdentitySecurity Read about the talk here: https://lnkd.in/gcdWT_rX

55

3 commentaires

Remote acquisition can be challenging whether it is because of the remote host goes offline or if the available bandwidth is limited. On May 8, join us for a webinar where Jean-François Brouillette will explore different #RemoteAcquisition scenarios based on real-world cases: https://ow.ly/52VI50Rytjl #DFIR

26

🌐 Sitemap reorganized! Now sorted by second-level domain then top-level domain, making it easier to assess a domain's attack surface.

341

5 commentaires

Criminals are moving fast to steal enterprise data. Move faster to defend against threats perpetrated with stolen data with #SpyCloud's Enterprise Protection solution. With actionable cybercrime analytics, security teams can extend automated protection across their organization while optimizing their response and remediation against cyber threats like account takeover, session hijacking and even #ransomware. Learn more about protecting against Next-Gen Threats with SpyCloud in our latest guide: https://bit.ly/3yubeqr

11

Raising security awareness internally is often cited as one of Bug Bounty's key strengths by our customers, and it's easy to see why! Jeremie Piazza, CISO of the European Community of Alsace (Collectivité européenne d'Alsace), emphasises that #BugBounty initiatives encourage development teams to progressively incorporate #SecuritybyDesign into their development practices, ultimately leading to a #DevSecOps approach. You can check out his full interview here: https://lnkd.in/eJFdQ3Z5

30

Strengthen your third-party SaaS risk management with the combined power of Valence Security and OneTrust! Our integration with OneTrust brings together SaaS Security Posture Management (SSPM) and Third-Party Risk Management (TPRM) to give you the insights you need to make informed decisions about your SaaS vendors. This means: 👀 Improved visibility into your SaaS applications, including SaaS-to-SaaS integrations 🖼 Complete picture of integration privileges, unsanctioned vendors, and unused yet still live integrations 🛡 Streamlined third-party risk management and remediation Learn more about how Valence Security and OneTrust can help you improve your SaaS security -> https://lnkd.in/ecMNkP7E #ThirdPartyRiskManagement #SSPM #SaaS #saassecurity #OneTrust #ValenceSecurity

31

Revisiting Embedded World 2024: Security vulnerability lifecycle management with Julien Bernet & Pierre Gal. Join Julien from Witekio and Pierre from The Embedded Kit as they discuss the critical topic of CVE lifecycle management using tools like #CVEScan - an essential requirement from the Cyber Resilience Act. Discover more about CVE Scan here: https://lnkd.in/emChaE-Z https://lnkd.in/ey4jCsmx #ew24

7

It's #WorkflowWednesday! Join incident response researcher Pierre Noujeim as he explains how Smart SOAR enhances your defenses against Brute Force (T1110) attacks with workflows that apply MITRE D3FEND's recommendations. Watch the webinar on-demand for expert analysis and recommendations to counter today's threat landscape.⬇️ 🔗https://hubs.ly/Q02CvpQd0 #MITRE #D3FEND #InTheWild2024 #IncidentResponse #Smart SOAR

5

🚨 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗡𝗲𝘄𝘀 🚨 CrowdStrike's Falcon Sensor, a popular endpoint protection tool, recently encountered a major issue causing Blue Screen of Death (BSOD) incidents for Windows users globally. This unexpected glitch has affected numerous systems, leading to downtime and operational disruptions for many organizations. ℹ 𝗞𝗲𝘆 𝗛𝗶𝗴𝗵𝗹𝗶𝗴𝗵𝘁𝘀: 𝟭.The BSOD incidents were reported shortly after the latest update to Falcon Sensor. 𝟮. CrowdStrike has acknowledged the issue and is actively working on a fix. A temporary workaround involves uninstalling the Falcon Sensor until a permanent solution is deployed.

3

CVE-2024-29212 - CVSS 9.9 - EPSS We don't have an EPSS score for this CVE yet - Due to an unsafe deserialization method used by the Veeam Service Provider Console (VSPC) server in communication between the management agent and its components, under certain conditions, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine. Ref.1: https://lnkd.in/eYKniPAQ

1

[HIGH SEVERITY FINDING] Lack of ADFS Security Controls. Sprocket performed password spraying attack against the affected endpoint and guessed a users password. Remediation: Enable “ExtranetLockout” to automatically block AD logins after X failed attempts in Y minutes.

3

Are you familiar with the economic benefits of Splunk Security? If not, check out this report from TechTarget’s Enterprise Strategy Group (ESG) who measured the expected savings and benefits of implementing Splunk Security. By combining Splunk’s security information and event management (SIEM) and security orchestration, automation and response (SOAR) capabilities and workflows into a simplified security operations experience, organisations can achieve cost-effective integration and process execution across cloud, on-prem and hybrid environments. Download your free copy of this Splunk-sponsored report to learn how Splunk Security delivers an ROI of 267% and helps: • Reduce business risk • Enhance security team operational efficiency • Improve insights into your digital landscape Get the report here - https://lnkd.in/e5ZQaJbz #Splunk #SplunkSecurity #SIEM #SOAR

3

🔒 Dive into the evolving world of #Malware with insights from the frontlines of #Cybersecurity. Discover how attackers innovate to bypass security in the new blog by SANS Certified Instructor and #DFIR expert Xavier Mertens! Read the blog → https://lnkd.in/edst3rgN

3