Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

4.9K
active users

techhub.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.8

#threatlandscape

0 posts0 participants0 posts today
Public
Hunt & Hackett

Sector Threat Profile: #Energy

Discover the energy #threatlandscape, where innovation meets risk. As the sector transitions from fossil fuels to renewable energy, it has become a prime target for cyber threats. Learn about the key motivations driving these attacks, practical steps to protect your business, and insights into past incidents like SolarWinds

Access the full report through our Member's Portal: huntandhackett.com/members/reg

Public
Guardians Of Cyber

🚨 Did you know 66% of cybersecurity professionals are facing unprecedented stress levels due to increasingly complex threats? 🚨
As cyberattacks grow more sophisticated, it's essential to stay ahead of the curve. 💡 Tip: Prioritize continuous training to combat the complexity of today's threat landscape. It could be the difference between prevention and disaster.

🔐 How does your team handle the stress of an evolving cyber threat environment?

Read more insights in our latest post: guardiansofcyber.com/cybersecu

#Cybersecurity#GuardiansOfCyber#Guardians
Public
Corelight

Attackers are constantly evolving to find your security vulnerabilities. Is your team equipped to defend your organization’s infrastructure, reputation, and bottom line from the next sophisticated attack? Join @corelight and @crowdstrike on December 12 at 10 a.m. GMT/ 11 a.m. CET to hear what elite incident responders use to mitigate vulnerabilities such as log4j.

🚨 Save your seat for this exclusive webinar today ➡️ go.corelight.com/supercharge-s

#CyberThreats#ThreatLandscape#CyberRisk
Public
Christina Lekati

🚨The ENISA Threat Landscape Report 2023 was released today!

It includes the top threats, major trends observed with respect to threats, threat actors & attack techniques, impact and motivation analysis.

It also describes relevant mitigation measures.

The top 3 threats that were identified and analyzed were:

🔹 Ransomware
🔹 Malware
🔹 Social Engineering

The report is a very insightful resource, especially for those who seek to make informed decisions for their cybersecurity strategy the coming year.

#cybersecurity #threatlandscape #cybersecurityawareness #cybersecuritynews #socialengineering #infosec #informationsecurity #ransomware #malware #enisa

enisa.europa.eu/topics/cyber-t

Public
Sean D. Mack

Mandiant's latest M-Trends report reveals that 63% of organizations were notified of breaches by external entities.

Staying ahead of the bad guys requires understanding the threat landscape. It was great to be in Seattle with Mandiant to speak with cybersecurity leaders about the latest trends and what they're doing to protect their organizations.

What new threats are you seeing? What are you doing to keep your organization safe today?

Public
🛡 H3lium@infosec.exchange/:~# :blinking_cursor:​

"🚨 Juniper Firewalls Under Siege: Over 12,000 Vulnerable Devices Exposed! 🔥"

New research reveals nearly 12,000 internet-facing Juniper firewall devices are susceptible to a recently disclosed remote code execution flaw. The vulnerability, identified as CVE-2023-36845, allows an unauthenticated remote attacker to execute arbitrary code without creating a file on the system. This medium-severity flaw in the J-Web component of Junos OS can be weaponized by adversaries to control certain environment variables. Juniper Networks patched this alongside other vulnerabilities last month. A proof-of-concept (PoC) exploit by watchTowr combined CVE-2023-36846 and CVE-2023-36845 to upload malicious PHP files and achieve code execution. Jacob Baines points out, "Firewalls are interesting targets to APT as they help bridge into the protected network and can serve as useful hosts for C2 infrastructure." Juniper has acknowledged the vulnerability but is unaware of any successful exploits against its customers. However, they've detected exploitation attempts in the wild, urging users to apply necessary patches. 🛡️

Source: The Hacker News

Tags: #Juniper #Firewall #Cybersecurity #Vulnerability #CVE202336845 #RemoteCodeExecution #JunosOS #APT #ThreatLandscape 🌐🔐🔍

The Hacker NewsOver 12,000 Juniper Firewalls Found Vulnerable to Recently Disclosed RCE VulnerabilityNearly 12,000 Juniper firewall devices exposed on the internet are vulnerable to a recently disclosed remote code execution flaw.
Public
Sean D. Mack

Seattle friends and cybersecurity leaders: I'll be in the area to host an iSMG roundtable next Tuesday, September 19th.

We'll be discussing the Mandiant M-Trends report and learning from each other about the most pressing cybersecurity risks today.

If you are a cybersecurity leader in the Seattle area join me for great food and great conversation at El Gaucho restaurant in Bellevue, WA. :
ismg.events/roundtable-event/s

ismg.eventsThe State of Cybersecurity: What 2022 Tells us about 2023 and Beyond ISMGISMG%%sep%%EventsEvents ismg.eventsTuesday, September 19th, 2023 The State of Cybersecurity: What 2022 Tells Us About 2023 and Beyond 5:30 - 8:00pm PDT | Seattle, WA Register Now Event Overview As a result of Russia's invasion of Ukraine, the lines between the cyber realm and the real world have blurred. Geopolitical causes now…
Public
acrypthash👨🏻‍💻

I am reading a few threat landscape and semi annual security recap reports and came across a section in one that mentioned that GandCrab was starting to become active again.
I've personally had to deal with GandCrab during an IR event in the past, so this naturally peaked my interest. In the rabbit hole that ensued, I found this awesome analysis that I wish I had 4 years ago. Happy hacking!

taintedbits.com/2018/10/18/gan

Tainted BitsGandcrab v5.0.3 detail analysis of javascript delivery payloadRecently a friend of mine shared with me a Javascript file which on execution resulted in machine been infected by GandCrab ransomeware. Initial through was that it must be the Javascript implementati
#security#reports#threatlandscape
Public
acrypthash👨🏻‍💻

Happy Turkey Day! 🦃
Yesterday I utilized some good practices for AzureAD sync. I was in the process of enforcing MFA in an Office365 tenant when I discovered service and admin OUs getting sync'd from their on premise domain. We will be cleaning this up!

Also any account with administrator privileges in Office365 should be cloud only. You don't want to be syncing your on premise admin accounts in the event of an on premise compromise. If so, your cloud tenant will then also be compromised without any effort from the TA. I have a cool map somewhere that shows zero trust in Office365 utilized in a way that makes sense. If I find it I'll make sure to post it here.

#zerotrust#azuread#security
ExploreLive feeds
About