Excellium Services’ Post

🔒 Exciting news from Michael Smith, field CTO at Vercara! 🚀 Discover how UltraDDR detects DNS exfiltration and tunneling in his latest blog. Learn about robust cybersecurity strategies.

#IPspyCyberSecAlert - Cyber Security News This Week! Dive Brief: · Dive Insight: · Cybersecurity Dive news delivered to your inbox · Editors' picks · ChatGPT at work: What's the cyber risk for employers?

For those who think organisations can do without a professional partner and rely on monitoring what they expect to be coming at them. Please kick yourself in the *** and start talks with cybersecurity professionals. No one can (or should) do this with just their own IT-team and a toolbox.

DID YOU KNOW 2024 is already promising to be worse than 2023 ? . . . After the disruption of LockBit's(Know more about LockBit-https://lnkd.in/epGXC-r6) operation on Feb 20 2024 where the international law enforcement's seized servers and arrested some individuals through Operation Cronos (https://lnkd.in/eyk9C2nA). Although LockBit puts up a dark web blog stating that their operations are back to normal, The threat intelligence report states that that -"Operation Cronos has had a more significant impact on their operations than they are willing to admit". It's a matter of time to see what LockBit's is yet to commit this year. It is seen according to Flashpoint's numbers around 17 Billion personal data has been accessed in the year 2023 with 6077 recorded data breaches. It is noted that there has been an increase of 84% of Ransomeware attacks in the year 2023 compared to the year 2022. According to statistics the first two months of this year shows 23% increase already compared to 2023. Flashpoint's Global Threat Intelligence report also throws facts that the current CVE database on which enterprises largely depend on is missing almost over 100,000 vulnerabilities which is 1/3rd of the known vulnerability list and as far as Februaury 2024 flashpoint's analysts have collected around 330 vulnerabilities which applies to companies including the big giants Apple, Microsoft and Google. Stay informed and stay safe in the cyber world. Read more about this in detail- Sources - https://lnkd.in/eJgjqz_f FlashPoint's Report-https://lnkd.in/eyk9C2nA #CyberNews2024 #Cybersecurity #LockBitRansomeware #OperationCronos

🌐 Traceable Releases Groundbreaking State of API Security Report: Global Findings 🌐 The report offers 50+ crucial findings from 1629 respondents spanning 100+ countries and 6+ major sectors! Despite APIs being critical to the modern enterprise, until now, there has not been an extensive, multi-country, industry-wide study offering a panoramic view of the API security landscape. 🚨 Shocking stat: 74% of organizations reported 3+ API-related data breaches. 🔀 A concerning 58% believe APIs magnify the attack surface across all tech layers. ⚠️ DDoS leads the charge: 38% cite it as their top API breach method. 🛡️ Rethinking protection: Traditional tools like WAF & WAAP are not trusted for API defense. 🔍 Only 38% have the capability to truly discern the context behind API activity. Get the full report: https://lnkd.in/eTe2m8t2 #Cybersecurity #DDoS #stateofapisecurity #securityresearch #threatresearch

Struggling with web attacks and high false positive rates? We've got you covered👊 Join us on June 20 at 4 pm to understand why #API discovery is crucial for your security strategy. Learn from Brian M. on our AI-driven prevention approach, and gain valuable insights into the significance of API discovery. #APISecurity #WAF Save your spot: https://lnkd.in/g_TjYVkf

CVE-2011-3389 is the Number of the BEAST! Worry not ─ We're not arguing about religious motives. This Weekly Bit is about cyber security and this specific BEAST lurks in your browser, ready to exploit SSL/TLS vulnerabilities. CVE stands for Common Vulnerabilities and Exposures and CVE-2011-3389 describes the security vulnerability exploited by the BEAST attack on SSL/TLS 1.0. BEAST, which stands for Browser Exploit Against SSL/TLS was a critical security flaw that shook the cybersecurity world in 2011. It targeted TLS 1.0 and earlier SSL protocols, potentially decrypting sensitive data on HTTPS connections. This vulnerability allowed attackers to recover small amounts of plaintext from encrypted sessions, such as session cookies, potentially compromising user security. The BEAST attack was performed in multiple steps and exploited a vulnerability in TLS 1.0 and earlier SSL protocols. It required a man-in-the-middle position to intercept traffic and capitalized on the predictable Initialization Vector (IV) in the cipher block chaining (CBC) mode: it was the last ciphertext block of the previous message. By injecting known plaintext into requests and analyzing the resulting ciphertext, attackers could deduce unknown parts of the message which then allowed byte-by-byte decryption of sensitive data like session cookies. BEAST worked iteratively, guessing each byte and confirming it based on ciphertext changes. This method potentially exposed encrypted information, compromising the security of HTTPS connections. To mitigate BEAST, the cybersecurity community recommended moving to TLS 1.1 or higher, which used explicit IVs for each message, making the attack much more difficult to execute. In the end, the attack led to significant improvements in TLS protocols to prevent such vulnerabilities.

🚨When discovering unusual or uncommon vulnerabilities, you identify deficiencies that can lead to a critical security risk. Witness how one of our Offensive Security Consultants successfully exploits unauthorized access to exfiltrate critical documents from one of our clients. 🖥️🥷 https://lnkd.in/dFgSZE5M #cybersecurity #offensivesecurity #infosec #vulnerabilities #vulnerability #exploit #hacking #bugbounty

The article discusses a new report which details the various threats faced by the high-tech industry. The report highlights the need for increased vigilance and security measures to protect against vulnerabilities. #cybersecurity #hightech #threats #cybersecurity

🤔 Curious about the differences between web session and network hijacking? 📑 Our recently published article on Dev.to breaks down these cyber threats, explaining their unique characteristics and potential impacts on security. 🔬 Discover how to safeguard your systems and stay ahead of cybercriminals by reading the content available here: https://lnkd.in/dQk4BRcb #Cyberdefense #networkattacks #countermeasures