Betta Lyon Delsordo

Registration for the upcoming SOC-CMM certified assessor training is still open. If you wish to attend the training, be sure to register before june 3rd! https://lnkd.in/ewMtNQzG #soc #securityoperations #cyberdefense #maturity #advisory

19

Take your cybersecurity program to the next level this month! Check out #OpticCyber's resources for maturing your cybersecurity program using the #NIST #CyberFramework! Check out our FREE profile template available at https://lnkd.in/exix4XM Need a little more help? Reach out to learn about our Advising Services to help you along your journey! #ManageTheRisk #KnowYourRisk #CyberRisk

4

Ready to learn more about high stakes in #incidentresponse? Mark your calendar for this Thursday 6/20 for Simply Cyber Fireside with special guest, Jibran Ilyas! If you are interested in a career in incident response, digital forensics, or want to learn more about Jibran's extensive experience in #infosec, you do not want to miss this live stream! Bring your questions to ask in live chat and set your notifications up now: https://lnkd.in/eFRd2drE #dfir #livestream

5

The APIsec University APISEC|CON CTF starts at 10:00am ET tomorrow! Come try out some challenges and perhaps win one of the prizes being given out to the top 25 finishers! More info on rules, eligibility, and prizes is available at https://lnkd.in/e6gUzYjs.

11

Reflecting on my work… Isn’t it ironic that this is the first time I’ve been published in a book? 🤷‍♂️ I lost my job and the National Institute of Standards and Technology (NIST) NVD all but died during the time it went to print. 🤦‍♂️ One day when my grand kids ask what is the NVD, I’ll have a great bedtime story. 👴 Ok, now back to working on exploitation research. 👋 #cybesecurity #infosecurity #vulnerabilitymanagement #riskmanagement

99

13 Comments

If you're experiencing reliability issues with the National Institute of Standards and Technology (NIST) NVD's APIs, as many have reported, consider using VulnCheck's commercial-grade APIs and full backup downloads at no cost as a part of VulnCheck Community. Access VulnCheck NVD++ here: https://lnkd.in/g_7yyQKH #vulnerabilitymanagement #cybersecurity #infosecurity #riskmanagement

111

9 Comments

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

🔒 Train for tomorrow's red teamers and blue teamers with Infosec's CEH boot camps and study materials! Join Akyl "Ambition" Phillips, our CEH boot camp instructor, as he shares study tips, strategies for staying updated on security trends, and advice on navigating your ethical hacking career journey. Don't miss this special Cyber Work Hack episode! Tune in here: https://lnkd.in/e_8gMNGZ

8

Huntress agent added to an endpoint on Saturday; WMI persistence reported, and then today, malicious activity via CVE-2023-48788 reported. Process: 1. Create investigative timeline from WEVTX, EDR telem/detected processes. 2. Run Events Ripper, creating pivot points (installed apps, Defender detections, WMI persistence, activation of xp_cmdshell, PowerShell code run, etc.), as well as installation path of FortiClientEMS. 3. Validate FortiClientEMS CVE-2023-48788 exploit via appropriate Fortigate logs. 4. Based on investigative timeline, there were 4 distinct exploits of CVE-2023-48788 since 2024-03-25, several that included the installation of Atera, with one also including the installation of Splashtop Streamer. Patch, folks. Please patch. And limit access to endpoints as operationally necessary.

98

4 Comments

If you have Snowflake environments, we've released an open-source tool tailored to detect suspicious activities: https://lnkd.in/g7S4777j. Concerned about threat actors accessing your Snowflake environments? Wondering what they do before or after gaining access? Connect with me to discuss recent attacks, threat indicators, and proactive hunting and detection measures. Need guidance on utilizing YetiHunter, exploring use-cases, or queries? Message me; I'm here to support the community. Time is the fundamental threat, let's collaborate to enhance cloud and SaaS detection capabilities and minimize risks from threat actors, misconfigurations, and vulnerabilities.

24

WHY???????? 96% of CISOs faced a ransomware attack last year..and 83% of those paid.- Splunk There is a better way. Flair Data Systems vCISO's can help you proactively prevent and help you remediate cyberattacks. Schedule 30 minutes with our vCISO's, free of charge, to discuss your cyber needs. #cybersecurity https://lnkd.in/gTvxtibv

3

Interested in CEH & CND training for your team? Learn more with QuickStart and EC-Council's upcoming webinar, next Thursday, May 16th at 1PM ET. Hear EC-Council's Christian Sanders speak about the benefits of this type of security training for your team and organization. Register here: https://ow.ly/6uxn50RyBpe #eccouncil #cybersecurity #ethicalhacking #CEH #CND #cybersecuritytraining #certifiedethicalhacker

2

Who else is joining the fun in providing input and feedback to the Cybersecurity and Infrastructure Security Agency's (CISA) Vulnrichment project? This opportunity to offer constructive feedback is likely to result in better CVE enrichment outcomes from CISA. These improvements will feed back into the CVE Program and potentially impact the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). 🤷‍♂️ Jay Jacobs Ben Edwards ☁️ Francesco ☁️ Cipollone Stephen Shaffer Chris Madden Chris Hughes Jacob Baines Anthony Bettini Jerry Gamblin Scott Moore Tod Beardsley 🐿️ Brian Martin Scott Kuffer #cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement

63

19 Comments

🚨High Risk Alert🚨: CVE-2024-30078 is a critical vulnerability found in certain web applications. It allows remote attackers to execute arbitrary commands due to improper input validation. This highlights the importance of API security. Stay safe! #APIsecurity #OWASP #CVE202430078 #CyberSecurity https://lnkd.in/edu8etzH

6

🚨 Join us at #BlackHatUSA for the "Hands-On Hacking" course 👩‍💻 Start with the fundamentals and follow a methodology used by myself and colleagues on a pentests. Learn to tap into a hacker's mindset and enhance your skills 🇺🇸 #CyberSecurity #HandsOnHacking #Pentesting #HackerMindset #BlackHat2024

20

1 Comment