Ryan Erb

New Post on DFIRDominican.com: How To Break Into DFIR (Part 1 of 5) – Cybersecurity Fundamentals by Fabian Mendoza - https://lnkd.in/ew2uGVce. Part 1 of a 5 part blog series that will help guide those looking to break into the DFIR field.

10

CISA has flagged 3 actively exploited vulnerabilities—two in Mitel MiCollab and one in Oracle WebLogic Server. ⤷ CVE-2024-41713: Remote access via path traversal. ⤷ CVE-2024-55550: Exploited by attackers with admin privileges. ⤷ CVE-2020-2883: A high-severity vulnerability in Oracle WebLogic with known exploits. 👉 Don’t wait—secure your systems now: https://lnkd.in/gAgqYkH3

99

#DOYOUKNOWCVE CISA added CVE-2024-29824 to the Known Exploited Vulnerabilities (KEV) catalog! CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability. It allows attackers to manipulate database queries, potentially leading to unauthorized access or data modification. Stay vigilant and Patch immediately! Learn more from the LOVI platform: https://lnkd.in/dShfN_D6 #CVE #CISA #Ivanti #SQLInjection #Activelyexploited #POC #LOVI

18

Microsoft’s December update has the fix! CISA adds CVE-2024-49138 to its Known Exploited Vulnerabilities list. This actively exploited flaw in Windows CLFS can give attackers SYSTEM-level control. Know more here: https://lnkd.in/gGnKniSm #CyberSecurity #CISA #PatchTuesday #Windows

3

⚠️ CISA has added a critical zero-day #vulnerability (CVE-2024-9537) affecting ScienceLogic SL1 to its KEV catalog. This flaw, with a staggering CVSS score of 9.3, allows for remote code execution. Read 👉 https://lnkd.in/gUEw5nFA Apply the latest patches.

43

Esf Labs News | 🚨 CYBER SECURITY ALERT: Over 2,000 Palo Alto Networks devices have been compromised in a large-scale attack. Critical vulnerabilities (CVE-2024-0012 and CVE-2024-9474) are being exploited to execute arbitrary code and deploy malware on targeted systems. 🔒 Act now to secure your devices and prevent breaches. Learn more about this campaign and protection strategies | source : https://lnkd.in/grXASHRA

11

1 Comment

CISA urges senior government officials to lock down mobile devices amid ongoing Salt Typhoon breach The Cybersecurity and Infrastructure Security Agency (CISA) is urging senior U.S. officials to consistently use end-to-end encrypted apps following Chinese hackers' access to the phones of about 150 officials, amid a whole-of-government effort to increase device protection. Meanwhile, Congressional rage over the breach has spurred contemplation of a ban on products from Chinese router-manufacturer TP-Link while China accuses the U.S. of cyberattacks and commercial secrets theft.

4

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KEV) catalog, owing to active exploitation in the wild. Tracked as CVE-2023-7028 (CVSS score: 10.0), the maximum severity vulnerability could facilitate account takeover by sending password reset emails to an unverified email address. Read more: https://lnkd.in/gV--hFs7 #CyberSecurity #Cyber #GitLab #CISA

3

If you're struggling with compliance and security challenges, CCM might me the game-changer you need. Here's why: 🏆 Rapid Certification: Achieve compliance certifications like SOC 2, CMMC, or NIST CSF in record time – like a FedRAMP High In Process package in just 3 months. 📊 Automated Evidence Collection: Cut audit prep time by up to 60%, saving costs and improving accuracy. Always be audit-ready! 🗺️ Streamlined Compliance: Map a single control across multiple frameworks, eliminating redundant tasks and ensuring a harmonized compliance posture. 🔄 DevSecOps Integration: Embed compliance checks directly into your development pipeline, maintaining security without disrupting workflows. #ContinuousControlsMonitoring #Compliance #Cybersecurity #RiskManagement #RegScale

4

Learn how a long-lived key & stolen credentials led to the summer of '23 compromise of sensitive Microsoft Exchange mailboxes. New White Paper reviewing CISA's assessment & underscoring need for robust credential mgt & authentication: https://lnkd.in/ehac_M4Q #passwordless

5

🔒💻😱 Did you catch these eyebrow-raising tech stories? Dive into the latest security scoop, because #ainews is serving up some juicy intel! From Fuxnet ICS malware to Google's slippery tracking tactics and crafty scammers mimicking CISA staff, the digital landscape is buzzing with shifty moves. Stay sharp, tech wizards! 🧙‍♂️✨ 🔍 **Unpacking the Stories:** - Fuxnet ICS Malware: A case study in cyber chaos. What's next for industrial control systems in the battle against malware? #stayvigilant - Google User Tracking: Your every click under the microscope. Is this the price we pay for convenience in the digital age? #privacyplease - CISA Employee Scams: Impersonation game strong. How can we techies outsmart the tricksters playing the field? #watchyourback 💡 **Insights & Predictions:** - Connect the Dots: Fuxnet, Google, CISA - a trifecta of tech trouble or a wake-up call for the industry to level up our defense game? #secureourfuture - History Repeats Itself: Remember Stuxnet? Lessons from the past can guide our steps in the present cybersecurity maze. #learnfromthepast - Future Forecasts: Will we see a surge in ICS attacks? Can Google regain user trust? Are CISA staff impersonators just the tip of the iceberg? #crystalballgazing 🚀 Join the conversation, automators! Share your takes, predictions, and battle strategies in the comments below. Let's decode the tech mysteries together! #automatorsolutions #ainews 💬🔒🚨 #CyberSecurityAINews ----- Original Publish Date: 2024-06-14 07:27

1