Thijs Takken

#CyCatz #cybersecurity How I Hacked the Dutch Government: Exploiting an Innocent Image for Remote Code Execution   More... https://shorturl.at/se04C   #cyberawareness #cyberattack #breaches #databreaches #cybercrime #darkwebmonitoring #SurfaceWebMonitoring #mobilesecurity #emailsecurity #vendorriskmanagement #BrandMonitoring #security #information #bugbounty #rce

10

Volt Typhoon, a cyber espionage group, is exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. ​ ​This specific zero-day allows attackers to upload a file to vulnerable systems and infiltrate networks, having the potential to wreak havoc on the software supply chain. ​ ​ProcessUnity's Threat & Vulnerability Response enables TPRM teams to assess potential exposure to emerging threats, such as the Versa Director zero-day, in hours or days. ​ ​Check out more on Threat & Vulnerability Response: https://ow.ly/AZJv50Tezco ​ Read more on the attack, how hackers can control network infrastructure and affect supply chains: https://ow.ly/RpjU50Tezcp ​ #CyberSecurity #ITSecurity #SupplyChain

20

3 Comments

[CVE-2024-12322: HIGH] WordPress plugin ThePerfectWedding.nl Widget has a serious security vulnerability to Cross-Site Request Forgery in versions up to 2.8. Attackers can manipulate 'tpwKey' option via cross-site scripting. Be cautious of clicking unknown links to prevent unauthorized access. https://lnkd.in/e7VQx5W8

2

BioPhorum is hosting a webinar on cybersecurity vulnerability management on Thursday 6 June - see details below. Securing your manufacturing assets is becoming harder as cyber threats evolve and bad actors seek to exploit vulnerabilities.  Come and hear how BioPhorum members think about these topics and what they do to manage risks appropriately. You can read the published paper here: https://lnkd.in/e4aRyj7A And you can register for the webinar here 👉🏻 https://obi41.nl/5d33f6dw #cybersecurity #manufacturing #biophorum #webinar

3

𝑨 𝒒𝒖𝒊𝒄𝒌 𝒉𝒊𝒈𝒉𝒍𝒊𝒈𝒉𝒕 𝒐𝒇 𝒔𝒐𝒎𝒆 𝒏𝒆𝒘 𝒕𝒉𝒊𝒏𝒈𝒔 𝑰'𝒎 𝒉𝒊𝒓𝒊𝒏𝒈 𝒇𝒐𝒓... All with small to medium sized boutique IAM consultancies, or consultancies with IAM consulting departments 🆒😎 🆔 𝐀𝐧𝐭𝐰𝐞𝐫𝐩 𝐚𝐫𝐞𝐚 (at least once a week) - 𝐒𝐞𝐧𝐢𝐨𝐫 𝐂𝐲𝐛𝐞𝐫𝐀𝐫𝐤 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐧𝐭𝐬 - Dutch speaking preferred Don't need to be a CyberArk pro - seniority, consultancy capability & of course an interest to become a CyberArk pro are key! 🆔 𝐂𝐨𝐥𝐨𝐠𝐧𝐞 𝐚𝐫𝐞𝐚 (once a month) - 𝐒𝐞𝐧𝐢𝐨𝐫 𝐈𝐀𝐌 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐧𝐭𝐬 - German speaking essential Project management, consulting, implementation and more (no heavy software dev though if that's you), 𝐭𝐨𝐨𝐥 𝐚𝐠𝐧𝐨𝐬𝐭𝐢𝐜 but have done projects in One identity, Sailpoint, Omada, Beta Systems... 🆔 𝐑𝐞𝐦𝐨𝐭𝐞 𝐟𝐢𝐫𝐬𝐭 𝐢𝐧 𝐆𝐞𝐫𝐦𝐚𝐧𝐲 - 𝐒𝐞𝐧𝐢𝐨𝐫 𝐓𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐈𝐀𝐌 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐧𝐭 - German speaking essential Strong coding needed, ideally frontend with Angular & One Identity Manager (or One Login etc) ... 𝐭𝐡𝐞𝐫𝐞'𝐬 𝐦𝐨𝐫𝐞! Live on planet earth? Curious about your options in IAM? (especially consulting) You and I should have a chat! 😎🤞🏻 ... you know where to find me, and if not for you, our referral reward for introducing your friends awaits 😜 #identityandaccessmanagement #iam #consulting

22

3 Comments

🇮🇹 We’re bringing the expert-level stack exploit development class to Rome, Italy for the first time in history! 🇮🇹 You don’t want to miss out on this unique opportunity to take the first of our 2 world-renowned classes on exploit development for Windows. ⭐️ Our classes are an amazing investment in your future. The content will definitely broaden your offensive cybersecurity skills and put yourself in the drivers seat of your career ⭐️ Just to set the expectations straight: We’re not selling boxes, pdf files, videos. We’re only doing real classes, in person, lead by Peter Van Eeckhoutte himself. He has been working in the field of exploit development since 2005 and teaching classes since 2011. At the same time, you can still learn at your own pace. In fact, you’ll leave the class with: ✅ An unprecedented understanding of the inner workings and mechanics. We won’t tell you to “just do this or that”, but you’ll understand exactly “why”. ✅ The courseware is quite detailed and verbose ✅ Investment protection; Just to indicate how much we care about your education, we include FREE access to a post-training support system. You can ask questions at any time and we’ll be more than happy to guide you into the right direction. Yes, even years after you took one of our classes. Sign up now for our class in Rome, or check out our schedules page for other timings/locations: https://lnkd.in/e-GhbBW

56

1 Comment

AI Security Foundation course In this course you will learn how AI can be used within the Security world by both the offensive and defensive sides. Would you like to know more about the course? Click here for more information: https://lnkd.in/eGbnPwu6

1

📢 📢 📢 Enhancing Cybersecurity in Distributed Microgrids: A Review of Communication Protocols and Standards 🧑‍🔬 Eyuel Debebe Ayele, Javier Ferreira Gonzalez, and Wouter B. Teeuw 🏫 Saxion University of Applied Sciences https://lnkd.in/gQJagvgT

1

🌟 𝗨𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱𝗶𝗻𝗴 𝘁𝗵𝗲 𝗗𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝗰𝗲: 𝗔𝗜 𝗳𝗼𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘃𝘀. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗳𝗼𝗿 𝗔𝗜 🌟 I often engage in discussions about Security & AI with various audiences. Many times, I notice that people get confused between key topics like the integration of Artificial Intelligence (AI) into security measures and the protection of AI systems themselves. While these two concepts are interconnected, they serve distinct purposes. Let's break down the differences: 🔐 𝗔𝗜 𝗳𝗼𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆: AI for Security involves leveraging AI technologies to enhance and automate security measures. This includes: 𝗧𝗵𝗿𝗲𝗮𝘁 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻: Using machine learning algorithms to identify and respond to potential threats in real-time. 𝗔𝗻𝗼𝗺𝗮𝗹𝘆 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻: AI systems can detect unusual patterns that may indicate a security breach. 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲: AI can automate responses to certain types of attacks, reducing the time it takes to mitigate threats. Example of technology that can be used for this is Microsoft Security Copilot. 🛡️ 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗳𝗼𝗿 𝗔𝗜: On the other hand, Security for AI focuses on protecting AI systems from threats and ensuring their integrity, confidentiality, and availability. As AI systems become more prevalent, they also become targets for cyber-attacks. Security for AI involves implementing measures to safeguard AI models, data, and infrastructure from adversarial attacks, data poisoning, and other malicious activities. This includes: 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 & 𝗗𝗮𝘁𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆: Safeguarding sensitive information that AI systems may process or store. This includes data discovery, data classification, encryption, data loss prevention etc. 𝗔𝘂𝗱𝗶𝘁𝗶𝗻𝗴 𝗮𝗻𝗱 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲: Ensuring that AI systems comply with relevant regulations and standards, and conducting regular audits to identify and address potential security vulnerabilities. 𝗠𝗼𝗱𝗲𝗹 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆: Protecting AI models from adversarial attacks that could manipulate their outputs. 𝗔𝗰𝗰𝗲𝘀𝘀 𝗖𝗼𝗻𝘁𝗿𝗼𝗹: Implementing Least Privilege Principle i.e. granting users the minimum level of access necessary to perform their tasks, reducing the risk of data breaches. Example of technologies that can be used for this is Microsoft Purview, Entra, Defender, Azure AI Content Safety, HiddenLayer model scanner etc.

54

7 Comments

#CyCatz #cybersecurity How I Hacked the Dutch Government: Exploiting an Innocent Image for Remote Code Execution More..https://rb.gy/gkdu1d #cyberawareness #cyberattack #breaches #databreaches #cybercrime #darkwebmonitoring #SurfaceWebMonitoring #mobilesecurity #emailsecurity #vendorriskmanagement #BrandMonitoring #security #information #bugbounty #rce

4

🔴 Critical Configuration Issue in AWS Application Load Balancer (ALB) Uncovered! A newly discovered configuration issue in AWS ALB has the potential to impact applications that rely on it for authentication. 🧑‍💻 First, the attacker creates their own ALB instance with authentication configured in their account. The attacker then uses this ALB to sign a token they fully control. Next, the attacker alters the ALB configuration and sets the issuer field to the victim’s expected issue. AWS then signs the attacker’s forged token using the victim’s issuer. Finally, the attacker leverages this minted token to target the victim’s application, effectively bypassing both authentication and authorization. Remediation: 1️⃣ Ensuring that apps using ALB authentication check the token signer. 2️⃣ Ensuring that only traffic from the corresponding ALB is accepted. #aws #cloudsecurity #cyberdefense #cyberattacks #ALBeast

17

1 Comment

EMPIST Cybersecurity Update: Microsoft has released an essential update for Windows 11 and 10 to address a severe Wi-Fi vulnerability. This security flaw could enable hackers to remotely control your PC via public Wi-Fi networks. We strongly advise all users to update their systems without delay to mitigate this risk. For more insights and a comprehensive understanding of the vulnerability, read the full article: https://hubs.la/Q02DvjjS0 #Microsoft #WindowsUpdate #WiFiVulnerability #Cybersecurity #EMPIST

10

🎉 Solved the PortSwigger DOM XSS Lab! 🔒💻 Just tackled the "DOM XSS in document.write using location.search" lab! This challenge involved exploiting a DOM-based vulnerability by breaking out of a <select> element and triggering alert(). Key takeaway: Always validate and sanitize user input to prevent DOM-based XSS attacks. PortSwigger labs are a must-try for anyone into web security! #CyberSecurity #WebSecurity #DOMXSS #BugBounty #EthicalHacking

1

Curious about OSCP+ and recertification? Join OffSec on November 13 at 12:00 pm ET for an interactive webinar where they will cover: ✅ Why OSCP+ matters ✅ How it can help your career ✅ What hiring managers look for in certifications https://lnkd.in/eSsVwqTe

7

Curious about OSCP+ and recertification? Join OffSec on November 13 at 12:00 pm ET for an interactive webinar where they will cover: ✅ Why OSCP+ matters ✅ How it can help your career ✅ What hiring managers look for in certifications https://lnkd.in/eSsVwqTe

2

Curious about OSCP+ and recertification? Join OffSec on November 13 at 12:00 pm ET for an interactive webinar where they will cover: ✅ Why OSCP+ matters ✅ How it can help your career ✅ What hiring managers look for in certifications https://lnkd.in/eSsVwqTe

1