Actonic GmbH’s Post

HARmor: Open-source tool for sanitizing and securing HAR files: HARmor is an open-source tool that sanitizes HTTP Archive files. Easy to install and run, it enables the safe handling and sharing of HAR files. What are HAR files? HAR files are critical for support teams working to debug and troubleshoot customer issues, but they can open vulnerabilities in system security that threat actors actively seek to exploit. The potential grave consequences for business reputation and customer trust are of great concern to technical support … More → The post HARmor: Open-source tool for sanitizing and securing HAR files appeared first on Help Net Security.

Organizations that use Connect Wise, you'll want to give this a quick read. Talk with your IA professionals and get these patched. ConnectWise has recently released software updates for its ScreenConnect remote desktop and access software. These updates specifically address two security flaws, including a critical bug that could potentially allow remote code execution on affected systems. Timely application of these updates is essential to mitigate the risk of exploitation and enhance the overall security posture of systems utilizing ConnectWise's ScreenConnect. Vulnerabilities in remote desktop software pose significant risks. Patch management and timely updates are crucial for addressing these vulnerabilities and maintaining robust security. Regularly applying patches helps prevent exploitation by potential threats and ensures the software remains resilient against emerging security risks.

If you are a Connectwise user as many MSPs are, here are the security patches you need to implement immediately.

Update the things. #cybersecurity #connectwise

if we want to be IT person it is very important to learning about 401 and 403 bypass, particularly in the context of we security and penetration.  401 and 403 bypasses are essential for anyone involved in web security, including penetration testers, security analysts, developers, and compliance professionals. because Its helps identify vulnerabilities, strengthen security measures, educate stakeholders, and ultimately protect sensitive information from unauthorized access. What Is a 403 Forbidden Error? The 403 Forbidden Error happens when the web page (or another resource) that you're trying to open in your web browser is a resource that you're not allowed to access. It's called a 403 error because that's the HTTP status code that the webserver uses to describe that kind of error. You usually get this error for one of two reasons. The first is that the owners of the webserver have properly set up access permissions and that you're really not allowed access to the resource. The second reason is that the owners of the webserver have improperly set up permissions and you're getting denied access when you really shouldn't be. 401 Unauthorized The Hypertext Transfer Protocol (HTTP) 401 Unauthorized response status code indicates that the client request has not been completed because it lacks valid authentication credentials for the requested resourc. VIEH Group

Essential 8 Lots of IT Providers are delivering Essential 8 services to their clients. Awesome, hopefully someone can answer this question. If you are a business that is aligned to the Essential 8, hopefully your IT provider can answer this question. Essential 8 - Patch Applications - Vulnerability Scanning. https://lnkd.in/gETNZS_s There is a control in the Essential 8 Patch Applications strategy that is written like this. "A vulnerability scanner is used at least weekly to identify missing patches or updates for vulnerabilities in office productivity suites, web browsers and their extensions, email clients, PDF software, and security products." There are a few products on the market, that at face value will enable a business to meet this control. One such product is Defender for Business (part of M365 Business Premium) which does scan a PC for Vulnerabilities in applications stored on the PC. However, buried in the wording of that control is the wording "and their extensions" Microsoft documentation is vague, but after enough digging it can be determined that Defender for Business does not scan for vulnerabilities in Browser Extensions. Therefore another tool is required. What tool are businesses that are aligned to the Essential 8 relying on to scan Browser Extensions for vulnerabilities and fully meet this control?

New from Securonix Threat Research: Security advisory on exploits leveraging new Microsoft zero-days (CVE-2023-36884) with Microsoft Office products. Aka Storm-0978 (RomCom) the threat targets government organizations. More in the advisory on how current and future variants of the attacks can be detected using security analytics.

New from Securonix Threat Research: Security advisory on exploits leveraging new Microsoft zero-days (CVE-2023-36884) with Microsoft Office products. Aka Storm-0978 (RomCom) the threat targets government organizations. More in the advisory on how current and future variants of the attacks can be detected using security analytics.

New from Securonix Threat Research: Security advisory on exploits leveraging new Microsoft zero-days (CVE-2023-36884) with Microsoft Office products. Aka Storm-0978 (RomCom) the threat targets government organizations. More in the advisory on how current and future variants of the attacks can be detected using security analytics.

New from Securonix Threat Research: Security advisory on exploits leveraging new Microsoft zero-days (CVE-2023-36884) with Microsoft Office products. Aka Storm-0978 (RomCom) the threat targets government organizations. More in the advisory on how current and future variants of the attacks can be detected using security analytics.