David Sabine’s Post

Passing session tokens in the URL is not a good idea. I recently discovered such a vulnerability in a major and widely used product handling sensitive data. Hijacking the session was trivial. Pending disclosure + CVE assignment and score.

Backups are your last line of defense against data loss. Here are some best practices you can adopt to ensure your backups don’t just exist but are actually restorable when needed. Get help: https://hubs.la/Q02wRpdT0

Day - 8: What is Volatile and Non Volatile Data? | Network Forensic | WireShark Curious about the nuts and bolts of network forensics? Check out our video as we unravel the concepts of Volatile and Non-Volatile Data using the powerful tool, WireShark! ➡️ Agenda for the Video 👉 Volatile and Non Volatile Data 👉 Network Forensic 👉 WireShark 👉 SIEM 👉 Blue Team Lab 👉 Investigating Web Attacks Threat 🌐 Watch the video here: https://lnkd.in/gaxHn7Pi #NetworkForensics #DataAnalysis #WireShark #ForensicInvestigation #InfoSecInsights #infosectrain #learntorise

Backups are your last line of defense against data loss. Here are some best practices you can adopt to ensure your backups don’t just exist but are actually restorable when needed. Get help: https://hubs.la/Q02wRlYk0

Enriching data is less about volume, and more about creating relationships between billions of disparate data points. Data enrichment helps security teams understand a domain or IP’s origin, function and risk level. This allows teams to locate attacker infrastructure before it’s weaponized. We enrich observable data via several categories and sub-categories to produce Indicators of Future Attack (IOFAs) - timely, accurate and complete datasets that tell defenders where an attack is coming FROM, rather than where it's BEEN. Check out our Enrichment tutorial 👇 https://hubs.ly/Q02kYBmF0 #threatintelligence #threathunting

File transfers at risk! Critical MOVEit Transfer flaw (CVE-2024-5806) lets attackers bypass logins. Patch now to secure your data! To learn more about this #cve read our latest blog post by clicking the link below! https://lnkd.in/g3n9ZaYJ) #MOVEitTransfer #securityvulnerability #cve-2024-5806 #datatransfer #securitypatch #infosec #protectyourdata #businesssecurity #filetransfersecurity #patchnow #explore

Data is the key to unlocking "next gen" vulnerability management and prioritization. Take a walk down memory lane with us and learn how security teams are revolutionizing their VM programs with: ⭐ Data integrity 🦾 Data flexibility 🧩 Data interoperability https://lnkd.in/e4DDSkXt

What is ✨next gen✨ vulnerability management? RBVM has long been the goal for most teams - it only makes sense to want to address the most critical vulnerabilities and prevent unnecessary expenditures on low-risk issues. With all of the tools, products, research, etc. out there offering support for RBVM initiatives... it makes you wonder why every team hasn't been able to streamline this type of approach. The answer is simple: data complexity. Piecing together data from various sources -- scanners, asset management, threat intelligence, etc. is a massive effort. At Avalor Security we're addressing the traditional challenges of RBVM and empowering teams to tackle this data challenge head-on. Check out our latest blog to learn how data integrity, flexibility, and interoperability are essential to any security team trying to unlock a comprehensive and unified approach to vulnerability management -- #VulnerabilityManagement #RBVM

We could not be prouder of the Product teams' work: Hackuity 2.0 is live! Hackuity 1.40 was already providing immense value, with its multi-awarded prioritization algorithm, aggregation, and automation capabilities, to "stop the chaos" of vulnerabilities. We are now turbocharging the platform's value, for the benefit of all our customers, and all organizations who want to elevate their VM maturity practice to prevent the most common threats (from exploiting vulnerabilities; the only way to hack into an organization, beyond social engineering). H2.0 #productlaunch #cybersecurity #riskbased #vulnerabilitymanagement #cyberexposure

World Backup Day is the perfect reminder to backup our most critical data, but in 2024, is it still relevant? Commvault's Darren Thomson spoke to Resilience Forward about the new sophisticated techniques from cybercriminals and why this requires a new approach to backups. Read all about it here: https://ow.ly/5yTe30sBenZ