Dr. Tal Pavel

Bar-Ilan University's The Begin-Sadat Center for Strategic Studies has released a discussion paper on Israel's National Cyber Strategy. Written by Colonel (res) Shay Shabtai, the paper raises critical issues for discussion regarding the design of Israel's national cyber strategy. Download here >> https://lnkd.in/gRKKPrWA #discussionpaper #Israel #CyberStrategy #nationalsecurity #MiddleEast

Security: There is new cyber tradecraft of the Iranian cyber group Emennet Pasargad, operating under the company name Aria Sepehr Ayandehsazan (ASA): Report. #ICS #industrialcybersecurity #scadasecurity #OTsecurity #physicalsecurity https://bit.ly/4fs4Dx6

🚨 SECURITY ALERT: CVE-2024-45146 - Dimension 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-45146 - 📅 Publication Date: 2024-10-09 09:15:05 UTC - 🛡️ MITRE Tactics and Techniques: Tactics: - Tactic Name: Reduce the attack surface of applications. MITRE ATTCK ID: TA0005 - Tactic Name: Prevent adversaries from exploiting vulnerabilities to gain initial access to the network. MITRE ATTCK ID: TA0001 Techniques: - Technique Name: Keep software up to date to mitigate the exploitation of known vulnerabilities. MITRE ATTCK ID: T1057 - Technique Name: Implement application allowlisting to prevent execution of unauthorized software. MITRE ATTCK ID: T1052 - Technique Name: Train users to identify and avoid suspicious emails and attachments. MITRE ATTCK ID: T1092 - Technique Name: Use a layered defense approach to email security including spam filtering malware scanning and attachment sandboxing. MITRE ATTCK ID: T1078 - Technique Name: Implement Data Loss Prevention DLP solutions to detect and block the exfiltration of sensitive data. MITRE ATTCK ID: T1050 - Technique Name: Regularly back up critical data to enable recovery in case of data loss or system compromise. MITRE ATTCK ID: T1041 - 🌐 References: https://lnkd.in/edtVPMqP #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation #Dimension

Statement of the Ministry of Foreign Affairs and NUKIB on Cybersecurity - Ministerstvo zahraničních věcí: Statement of the Ministry of Foreign Affairs and NUKIB on Cybersecurity  Ministerstvo zahraničních věcí #CyberSecurity #InfoSec #SecurityInsights

🚨 SECURITY ALERT: CVE-2024-11350 - CRITICAL 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-11350 - 📅 Publication Date: 2025-01-08 09:15:06 UTC - 🔥 Severity: CRITICAL - 🛡️ MITRE Tactics and Techniques: Techniques: - Technique Name: Multi-Factor Authentication. Requires users to present multiple factors of authentication to verify their identity. MITRE ATTCK ID: T1098 - Technique Name: Network Intrusion Prevention. Inspects network traffic to identify and block malicious activity. MITRE ATTCK ID: T1040 - Technique Name: Web Application Firewall. Filters malicious traffic to and from web applications. MITRE ATTCK ID: T1055 - 🌐 References: https://lnkd.in/fK7tSZG https://lnkd.in/eDGwxFgg #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation

WhatsApp Exposes Israeli Spyware Scandal WhatsApp has revealed new evidence against the Israeli company NSO Group, creators of the Pegasus spyware, in a U.S. court case. Documents unveiled irregular use of Pegasus by 10 government clients and detailed how NSO's exploits infiltrated devices through WhatsApp messages. Pegasus allowed remote installation of spyware by providing a target number, with annual licenses costing up to $6.8 million. WhatsApp's security updates eventually blocked these exploits, and NSO faced scrutiny for alleged misuse, including surveillance of Dubai’s Princess Haya. This legal battle is setting precedents. A recent lawsuit in Barcelona targets NSO executives for alleged spying on a pro-Catalan independence lawyer. Access Now believes WhatsApp’s case strengthens global lawsuits against NSO, shedding light on spyware abuse and advancing digital rights protections worldwide. More breaking news from the world and the Darkweb here 👉 https://deepweb.net/

New attack techniques utilized by Iranian cyber group Emennet PasargadIranian cyber operation Emennet Pasargad was noted by the FBI, Department of Treasury, and the Israel National Cyber Directorate to have leveraged updated tradecraft, such as IP camera breaches and generative artificial intelligence, in recent attacks, including its compromise of the Summer Olympics. Article Link: New attack techniques utilized by Iranian cyber group Emennet Pasargad | SC Media 1 post - 1 participant Read full topic https://lnkd.in/d695Zy-S New, attack, techniques, utilized, Iranian, cyber, group, Emennet, Pasargad

NoviSpy Spyware Installed on Journalist's Phone After Unlocking It With Cellebrite Tool Responding to the findings, Israeli company Cellebrite said it's investigating the claims of misuse of its tools and that it would take appropriate measures, including terminating its relationship with relevant agencies, if they are found to be in violation of its end-user agreement. In tandem, the research also uncovered a zero-day privilege escalation exploit used by Cellebrite's universal forensic extraction device (UFED) – a software/system that allows law enforcement agencies to unlock and gain access to data stored on mobile phones – to gain elevated access to a Serbian activist's device. The vulnerability, tracked as CVE-2024-43047 (CVSS score: 7.8), is a user-after-free bug in Qualcomm's Digital Signal Processor (DSP) Service (adsprpc) that could lead to "memory corruption while maintaining memory maps of HLOS memory." It was patched by the chipmaker in October 2024. Google, which initiated a "broader code review process" following the receipt of kernel panic logs generated by the in-the-wild (ITW) exploit earlier this year, said it discovered a total of six vulnerabilities in the adsprpc driver, including CVE-2024-43047. "Chipset drivers for Android are a promising target for attackers, and this ITW exploit represents a meaningful real-world example of the negative ramifications that the current third-party vendor driver security posture poses to end-users," Seth Jenkins of Google Project Zero said. more: https://lnkd.in/dpakf9Vp

As tensions escalate in the Middle East, cyber threats are expanding with actors like WIRTE broadening their operations' scope. Using the SameCoin Wiper, WIRTE - a Hamas-tied group - is executing disruptive digital assaults targeting Israeli entities. Beyond Israel, coordinations in the Palestinian Authority, Jordan, Iraq, Saudi Arabia, and Egypt are ostensibly on this malefactor's radar as per Check Point's latest review. Cybersecurity experts, establishments, and administrative bodies must maintain high alertness to safeguard their digital infrastructures from such harmful behavior. At Just Do IT, we are committed to furnishing security solutions that assist defend your data assets and mitigate cyber dangers akin to those presented by groups like WIRTE. Stay learned and ready by engaging with us for the most up-to-date understandings and cybersecurity tactics. Circulate this post to propagate awareness and ensure your network understands potential risks. #CyberSecurity #WIRTEThreat #CyberDangers #MiddleEastCybersecurity #DataProtection #JustDoITSecurity #CyberAwareness We encourage you to appreciate and spread this post to help others stay informed and vigilant against these evolving cyber threats.

🚨 SECURITY ALERT: CVE-2024-10797 - MEDIUM 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-10797 - 📅 Publication Date: 2024-12-21 09:15:05 UTC - 🔥 Severity: MEDIUM - 🛡️ MITRE Tactics and Techniques: Techniques: - Technique Name: Privileged Access Management. Controlling administrative access to systems and resources. MITRE ATTCK ID: T1078 - Technique Name: Multi-factor Authentication. Requiring multiple factors to verify user identity. MITRE ATTCK ID: T1098 - Technique Name: Data Loss Prevention. Detecting and preventing sensitive data exfiltration. MITRE ATTCK ID: T1059 - 🌐 References: https://lnkd.in/eQSUHAbk https://lnkd.in/eXB5mTy2 #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation