Hamid Khanjani

Attending BSides Austin 2024? We are, too! 🗓️ Thursday, December 5 at 3 PM CT 📍 Austin, Texas 🗣️ Avishay Zawoznik, Security Research Manager at Cato Networks & Member of Cato CTRL Learn the security risks of GenAI as part of an attack surface and how to mitigate that risk—both in the organizational and personal use of such tools. Register here 👉 https://bit.ly/3OANWE0 #GenAI #SASE #cybersecurity

34

🤔 How secure is your Kubernetes environment against CVE-2024-3094? Reza R. examines the behavior of this attack and helps you figure out what preparations could be made before the next similar zero-day is revealed. --> Master techniques to mitigate XZ/liblzma vulnerabilities. --> Configure Calico for robust RCE attack prevention. --> Enforce zero-trust policies to secure your clusters. https://lnkd.in/gXV3kAb3 #Kubernetes #Security #Calico #CVE20243094

10

Struggling with high SIEM costs? With a 28% CAGR for telemetry data growth, you aren’t alone. With Cribl, take control by optimizing and reducing the data you ingest while maintaining a full-fidelity copy for compliance and investigations. Learn how: https://lnkd.in/eU4n7Xjn

47

🚨 Critical Alert: Apache MINA vulnerability (CVE-2024-52046) with a CVSS score of 10.0 exposes systems to remote code execution (RCE) via unsafe serialization. Update your installations and secure your configurations immediately! 🛡 #CyberSecurity #ApacheMINA #CVE202452046 #RCE #VulnerabilityAlert #DataProtection #SecureCoding #InfoSec #PatchNow #ZeroDay

1

Stolen information in the form of stealer logs stays in the cybercrime ecosystem for quite a long time. What used to be high-value stealer logs eventually cycles through and becomes more readily available. Security researcher Eric Clay has seen quite a few stealer logs, and talks about trends he sees in the stealer log "lifecycle." What are the ways your security team is monitoring for stealer logs?

9

New Era in Cloud Security 🚀 Alkira’s Zero Trust Network Access (ZTNA) is officially here – and it’s changing the game for enterprises navigating multi-cloud complexity. 🌐ZTNA on Alkira’s platform isn’t just another security layer – it unifies network and security in a seamless experience, integrating with giants like Palo Alto Networks and Fortinet to offer unmatched flexibility. The result? Simplified operations, less friction, and more power in the hands of our partners. 💼 Curious about how ZTNA can open new doors and help partners build stronger client connections? Check out the full scoop on CRN’s coverage  👉https://lnkd.in/gKJPK3S6    #Alkira #ZTNA #CloudSecurity #NetworkSecurity #MultiCloud #NaaS #Alkira #MCN

50

Commit implements a cutting-edge Disaster Recovery strategy for the #IAA 🛡️ The Israel Antiquities Authority (IAA) has taken a monumental step in protecting Israel’s archaeological treasures by modernizing their disaster recovery (#DR) strategy on Google Cloud! Partnering with Commit’s Google Cloud experts, the IAA tackled challenges like isolated systems and data vulnerabilities, transitioning over a petabyte of priceless heritage data to a resilient and scalable cloud solution with Google Cloud VMware Engine (#GCVE). “The solution Commit implemented revolutionized how we operate, offering reliability and simplicity that’s critical during a crisis,” shared Alby Malka, CIO of the IAA. “Commit’s dedication and innovative approach were key to our success.” This collaboration ensures the IAA's invaluable data remains protected and accessible, empowering their mission to preserve Israel's cultural heritage for generations to come. The project was completed in collaboration with מערך הדיגיטל הלאומי - Israel National Digital Agency. Discover the full story: https://lnkd.in/dSF-2VcY  #GoogleCloud #GCVE #DisasterRecovery #CloudSolutions #Cloud #GCP --- Idan Faingold Aviran Mizrachi Edgar S. Rafi Kriman Amir Lantsman Silvia Beiserman Sonia Pisarev Eliran Or Dima Tatur Elit Ben Basat Nuriel Tomer Assa Ada Aharoni Efrat Pnini Shay Mor Ofir Cohen 🎗️ Moran Yaakov Victor Khazanov

32

1 Comment

Esf Labs News | 🚨 CYBER SECURITY ALERT: Over 2,000 Palo Alto Networks devices have been compromised in a large-scale attack. Critical vulnerabilities (CVE-2024-0012 and CVE-2024-9474) are being exploited to execute arbitrary code and deploy malware on targeted systems. 🔒 Act now to secure your devices and prevent breaches. Learn more about this campaign and protection strategies | source : https://lnkd.in/grXASHRA

11

1 Comment

New report on Top Influential Regulations reveals 37% say TSA Security Directives is most influential. Full Report = https://lnkd.in/gmmzSQQa Bravo to all who work on #CyberSecurity at OTORIO including Kfir Tzukrel and Gail Kosloff

7

1 Comment

Join us at the Cybersecurity Summit on November 21st, where our CEO Eoin Keary will be joining the team. Don't miss this opportunity to discuss your cybersecurity strategy with our experts and learn how our full suite of solutions can enhance your security program. Looking forward to connecting with you in LA! 🤝 #CybersecuritySummit #LAtech #Edgescan

15

1 Comment

PQC TLS w/ Kyber since Chrome v124 has been breaking a lot of TLS inspection firewalls Can be disabled by setting chrome://flags/#enable-tls13-kyber Such are the risks with MITM re-encrypting Our DiscrimiNAT outbound firewall for AWS & GCP not affected since it doesn't decrypt

1

The Knowledge Review magazine gladly features Dwayne Natwick,CRISC,CISM,CISA CISSP,CCSP,CGRC,CSSLP, MVP—CEO, Principal Cloud and Security Training Architect of Captain Hyperscaler, who specializes in providing high-quality technical and professional training across diverse industries. Read More: https://cutt.ly/meUYySYv #TechLeadership #ITExpertise #GlobalReach #MarketExpansion #TopEducationMagazine #BestEducationMagazine

1

Hey! Have you checked our last blog entry? Pablo Rizzo Cordano, one of our SOC Architect, shares how to integrate Threatfox with Wazuh to help organizations enhance their threat detection capabilities. #cibersecurity #Cybersecurity #InfoSec #DataProtection #CyberAware #CyberDefense #ITSecurity #CyberCrime #SecurityAwareness #SecureData #DigitalSecurity #NetworkSecurity #DataPrivacy #CyberThreats #CyberRiskManagement

27

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies ~~~~~~~~~~~ The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill script linking to the malicious domain as of July 2, 2024. This includes references to "https://cdn.polyfill[.]io" or "https://cdn.polyfill[.]com" in their HTTP responses, the attack surface management firm said. "Approximately 237,700, are located within the Hetzner network (AS24940), primarily in Germany," it noted. "This is not surprising – Hetzner is a popular web hosting service, and many website developers leverage it." Source: https://lnkd.in/gA4Hp_y3 Join Us: ~~~~~~~~ LinkedIn Community: https://lnkd.in/dU8hyiWG LinkedIn Page: https://lnkd.in/dp-6ivtp Whatsapp Community: https://lnkd.in/dYtzvt92 Facebook: https://lnkd.in/d6nGUG_j #Cybersecurity #InfoSec #EthicalHacking #PenTesting #CyberSecurityAwareness #CyberSecurityJobs #CyberDefense #Hacking #EthicalHacker #SecurityAnalyst #VulnerabilityAssessment #CyberSecurityTraining #CyberSecurityTips #CyberSecuritySolutions #CyberSecurityExpert #OffensiveSecurity #SecureCoding #Phishing #RedTeaming #Purpleteam #InfoSecNews #BugBounty #WebApplicationSecurity #AttackSurfaceManagement #FirewallSecurity #CyberSecurityThreats #SecureYourData #VulnerabilityManagement #PenetrationTesting #CyberSecurityCommunity #Exploit #Expertz #ExploitXpErtz #XpErtz #ExploitXpErts #XpErts

6

Exciting news from Cato at RSA 2024! 📣 Discover the latest in threat research as we unveil how attackers exploit complex security architectures. Our Chief Security Strategist, Etay Maor, and Cato’s Security Services Manager, Tal Darsan, along with the Cato CTRL team, will lead discussions detailing today's critical cybersecurity challenges. Mark your calendars: 📈 "The Price is WRONG - An Analysis of Security Complexity" on May 6, 2024, at 10:50 a.m. PT. 🛡️ "Flying Under the Radar - New Security Evasion Techniques" on May 7, 2024, at 8:30 a.m. PT. Join us to learn how simplifying your security setup can mitigate risks and reduce the costs associated with data breaches 👉 https://okt.to/gQ8W6C #Cybersecurity #SASE #SecurityStrategy

39