Stephan Haslbeck

Greetings from the ITSA Expo in Nürnberg! Today, the Bundeskriminalamt highlighted a critical issue in Germany: outdated legacy systems are becoming a significant vulnerability, especially in the fight against cyber threats. For SMEs, tackling these challenges can cost up to 2 million EUR—with larger corporations facing even higher expenses for recovery. While security should be straightforward, it’s clear that the current landscape is anything but. However, there’s good news ahead—a new solution is on the horizon. Stay tuned for more updates! #Cybersecurity #ITSAExpo #DigitalTransformation #Cyemptive

15

MDR, NDR, EDR, XDR, SIEM, SOC… Uff! What do all these terms mean? Don’t worry – Thomas Kurth and Christoph Refardt have a quick overview for you! 📺 Watch the overview now: https://lnkd.in/g9q2gFXG #CyberSecurity #SOC #MXDR 

22

CxOs, it's time to rethink your network security approach. ZTNA alone won't cut it in today's threat landscape. Discover why ZTNA integrated into SASE is the key to securing your business end-to-end 👇 #SASE #ZTNA

3

Implementing PKI for DER security can be tricky. Watch out for common deployment pitfalls: certificate lifecycle management, scaling issues, and key protection. Learn how managed services can help navigate these challenges effectively. https://lnkd.in/gnVbKZ_3 #DERsecurity #PKI #RenewableEnergy #GridSecurity

12

Enhancing SharePoint Security w/ Cato Networks' Quarantine Techniques In this video learn how to effectively leverage Cato's SaaS Security API to implement quarantine measures to protect your data and ensure compliance. Whether you're an IT professional or a security enthusiast, this video provides actionable insights and practical steps to fortify your SharePoint & Office 365 SaaS infrastructure.

1

Double-extortion #ransomware attacks occur when attackers not only encrypt systems but also threaten to leak sensitive data unless a #ransom is paid. 🚨 In this video interview with ISMG at RSA Conference 2024, Sheetal Venkatesh and Steve Grossenbacher discussed: 🎯 Cohesity and Zscaler's collaboration to help customers address challenges in sensitive data exfiltration; 🎯 The threat brought about by distributed data, including on-premises, public cloud and SaaS; 🎯 AI-powered data classification for identifying sensitive data. Watch the full #RSAC interview here ▶ https://lnkd.in/dYsU77sg #cybersecurity #ISMGStudio #RSAC2024 #ISMGatRSAC

5

New Cyentia research, continuing our movie title/cover theme with SecurityScorecard. This one plays off Godzilla 2000 and focuses on digital supply chain risk among the world's largest organizations listed on the Global 2000. It joins "Close Encounters of the Third Party Kind" and "The Fast and the Frivolous," which you can find on our site at www.cyentia.com/research #cybersecurity #supplychainsecurity #thirdpartyrisk #supplychainrisk #cyberrisk

12

Check out the stories in our April 2024 Cyber Security News blog post: https://buff.ly/3UzoUJy 🔓 Attempted Subversion of Open Source Software Library: German software developer Andres Freund detected malicious code in the XZ Utils library, a crucial component in Linux distributions. This code, linked to a nation-state actor, aimed to compromise systems running OpenSSH for widespread internet exploitation. 🌐 Governments Jointly Publish AI Secure Deployment Best Practices: Cybersecurity agencies from the US and allied nations have released a guide outlining best practices for AI system deployment. This initiative aims to bolster the confidentiality, integrity, and availability of AI technologies, encouraging global adherence to enhanced security measures. 🔥 Popular Firewall and VPN System Vulnerable To A New Zero-Day Exploit: A severe zero-day vulnerability in Palo Alto’s GlobalProtect firewalls, which affects at least 150,000 networks globally, allows attackers remote access to internal networks. Palo Alto has already deployed a patch to mitigate this critical security risk. #CurrentEvents #CyberSecurity News

3

𝟰-𝗛𝗼𝘂𝗿 𝗠𝗮𝘀𝘁𝗲𝗿𝘆: 𝗟𝗲𝗮𝗿𝗻 𝘁𝗼 𝗕𝘂𝗶𝗹𝗱 𝗬𝗼𝘂𝗿 𝗢𝘄𝗻 𝗣𝗼𝘄𝗲𝗿𝗳𝘂𝗹 𝗦𝗔𝗣 𝗣𝗲𝗻𝗧𝗲𝘀𝘁 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸 𝗳𝗼𝗿 𝗨𝗹𝘁𝗶𝗺𝗮𝘁𝗲 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆! Stay ahead of the game and protect your SAP systems effectively! Learn from industry expert Marco Hammel as he guides you through the development of a robust SAP security playbook based on BSI guidelines & the current SAP Threat Situation. 𝗪𝗵𝗮𝘁 𝗮𝗿𝗲 𝗕𝗦𝗜 𝗚𝘂𝗶𝗱𝗲𝗹𝗶𝗻𝗲𝘀? BSI guidelines refer to the standards and recommendations provided by the Bundesamt für Sicherheit in der Informationstechnik (BSI), the Federal Office for Information Security in Germany. For SAP systems, adhering to BSI guidelines helps implement robust security measures and protects critical business processes and data. Join NO MONKEY ACADEMY’s Live, Online SAP Security Training Session 👉 𝗖𝗿𝗲𝗮𝘁𝗶𝗻𝗴 𝗮 𝗦𝗔𝗣 𝗣𝗲𝗻𝗧𝗲𝘀𝘁 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸 𝗕𝗮𝘀𝗲𝗱 𝗼𝗻 𝗕𝗦𝗜 𝗚𝘂𝗶𝗱𝗲𝗹𝗶𝗻𝗲𝘀 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗖𝘂𝗿𝗿𝗲𝗻𝘁 𝗦𝗔𝗣 𝗧𝗵𝗿𝗲𝗮𝘁 𝗦𝗶𝘁𝘂𝗮𝘁𝗶𝗼𝗻 𝗪𝗵𝗮𝘁 𝗬𝗼𝘂'𝗹𝗹 𝗟𝗲𝗮𝗿𝗻: ✅ Gain an overview of the current SAP threat situation. ✅ Explore critical SAP security topics and general security measures. ✅ Learn to perform a quick check for basic SAP security. ✅ Mitigate the most important SAP security vulnerabilities. ✅ Gain insights into the evolving SAP threat landscape. ✅ Identify crucial components for SAP system protection. ✅ Learn to quickly assess and mitigate critical SAP security vulnerabilities. ✅ Set up your own playbook tailored to your SAP system, aligning with BSI guidelines. 𝗪𝗵𝗼 𝗦𝗵𝗼𝘂𝗹𝗱 𝗔𝘁𝘁𝗲𝗻𝗱: 🫵 Application Security Experts 🫵 Blue Teamers 🫵 SAP Basis Administrators 🫵 SAP Security Administrators 🫵 SAP System Owners 🫵 SAP IT Auditors 𝗗𝗼𝗻'𝘁 𝗺𝗶𝘀𝘀 𝗼𝘂𝘁 𝗼𝗻 𝘁𝗵𝗶𝘀 𝗼𝗽𝗽𝗼𝗿𝘁𝘂𝗻𝗶𝘁𝘆 𝘁𝗼 𝗳𝗼𝗿𝘁𝗶𝗳𝘆 𝘆𝗼𝘂𝗿 𝗦𝗔𝗣 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝗸𝗶𝗹𝗹𝘀! 𝗘𝗻𝗿𝗼𝗹𝗹 𝗛𝗲𝗿𝗲! 📆 𝗝𝘂𝗻𝗲 𝟮𝟬𝘁𝗵: https://lnkd.in/e8WQaAwi 📆 𝗡𝗼𝘃𝗲𝗺𝗯𝗲𝗿 𝟭𝟴𝘁𝗵: https://lnkd.in/eJ6TSibM 🔖 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐔𝐩𝐨𝐧 𝐂𝐨𝐦𝐩𝐥𝐞𝐭𝐢𝐨𝐧 #SAPSecurity #CyberSecurity #BSIGuidelines #OnlineTraining #SAP #Cyber #CIO #CISO #Certification #NOMONKEY #SecurityTraining

1

I recently discovered a interesting quirk in Microsoft Outlook which allows specially crafted HTML emails to alter the appearance of security alerts which are injected into the body, such as the "First Contact Safety Tip". (Reposted blog post is in English)

18

New Ivanti 0-Day vulnerabilities disclosed. Immediate action required to secure your systems. Ivanti has disclosed two critical vulnerabilities affecting Connect Secure, Policy Secure, and Neurons for ZTA products: 🔍 CVE-2025-0282 Critical Remote Code Execution (RCE) Exploited in the wild by Chinese state-sponsored group UNC5337. Targets Connect Secure versions 22.7R2 to 22.7R2.4. 🔍 CVE-2025-0283 Privilege Escalation Vulnerability There is no evidence of exploitation so far. 💡 What You Need to Know: CVE-2025-0282 has a CVSS score of 9/10 and has been actively used for cyber espionage. Attackers are leveraging advanced malware like PHASEJAM and SPAWNANT to achieve persistence. Patches are now available in version 22.7R2.5. Ivanti also recommends running its updated External ICT checking tool to identify potential compromises. 🛡 Our Recommendations: 1️⃣ Run the latest ICT checker to identify suspicious files. 2️⃣ Upgrade to the patched version after thorough investigations. 3️⃣ Use Indicators of Compromise (IoCs) from tools like our Datalake and engage in proactive threat hunting through Orange Cyberdefense Managed Detection services. 👉Check out our blog post for a detailed look at our initial findings🕵️: https://ow.ly/xTmy50UEenV 👨‍⚕️🩹For assistance or remediation expertise, contact Orange Cyberdefense CERT or your representative. Stay vigilant! #CyberSecurity #Ivanti

3

⚡ Cybersecurity threats are evolving fast! To stay ahead, organizations must embrace new security approaches involving fresh strategies, technologies, and a cloud-ready mindset. 🌐 Enter MITRE ATT&CK — the ultimate guide for security practitioners packed with invaluable insights into attacker techniques and behavior. Pretty handy, right? 💡 Sysdig's eBook show you how to identify and defend against common threats to #AWS environments using open-source Falco rules mapped to the ATT&CK framework. Boost your #AWScloud security and tackle any threat head-on by giving it a read today:

3

"Policies aren't enough to secure an application. Mitigating code injections, you need to 🙅‍♀️ applications from executing arbitrary code" 🚨 ❓How do you secure your applications❓ Let us know in the comments ⛓️‍💥 In this week's episode of Cloud Commute host Christoph Engelbert talks to Hannes Ullman from bifrost security. Bifrost builds an application firewall using #AppArmor to stop applications from unwanted behavior. After a training phase the behavior profile is used to detect and stop untypical behavior right in its tracks. 🎙️ link in the comments 👇

10

3 Kommentare

🆕 podcast appearance! Our co-founder Hannes sat down with Christoph Engelbert and had a great discussions about how Bifrost came to be, the promise of tailored allow-listing profiles and, of course, some AI as well. Thanks for having you us on your Clous Commute podcast, Chris! The podcast can be found wherever you get your podcast. The link will be in the comments to the video version! #kubernetes #AppArmor #kubernetessecurity

9

2 Kommentare

Lessons on NIS2 and DORA for Senior Management - Read the ICTTF DORA Blog

6

Lessons on NIS2 and DORA for Senior Management - Read the ICTTF DORA Blog

1

This year our group had three works presented in CCS 2024 (Part 2). The second one is "Payout Races and Congested Channels: A Formal Analysis of Security in the Lightning Network", Ben Weintraub, Satwik Prabhu Kumble, Cristina Nita-Rotaru and Stefanie Roos. This is a collaboration with TU Delft and University of Kaiserslautern-Landau and was presented by Ben Weintraub. The Lightning Network, a payment channel network with a market cap of over 192M USD, is designed to resolve Bitcoin’s scalability issues through fast off-chain transactions. There are multiple Lightning Network client implementations, all of which conform to the same textual specifications known as BOLTs. Several vulnerabilities have been manually discovered, but to-date there have been few works systematically analyzing the security of the Lightning Network. We take a foundational approach to analyzing the security of the Lightning Network with the help of formal methods. Based on the BOLTs’ specifications, we build a detailed formal model of the Lightning Network’s single-hop payment protocol and verify it using the Spin model checker. Our model captures both concurrency and error semantics of the payment protocol. We then define several security properties which capture the correct intermediate operation of the protocol, ensuring that the outcome is always certain to both channel peers, and using them we re-discover a known attack previously reported in the literature along with a novel attack, referred to as a Payout Race. A Payout Race consists of a particular sequence of events that can lead to an ambiguity in the protocol in which innocent users can unwittingly lose funds. We confirm the practicality of this attack by reproducing it in a local testbed environment. Full paper is available here https://lnkd.in/df9pPbHA

43

1 Kommentar