Alon Zivony

Earlier this month, Oren Koren from VERITI had a feature article in Cyber Defense Magazine on full automation workflows in cybersecurity. In his article, Oren shares that the shift to automated workflows in the past decade poses a threat of critical decisions being made without human oversight. Read more on his perspective to building human trust within automated systems! #cybersecurty #technology #automation #startup #techstartup #cyberattack

4

Upcoming Talk Alert! 🚀 14th of May at 19h00 (UCT+2) Join Mikhail Aksenov as he delves into common attack vectors like Postgres, Redis, SSH, and web vulnerabilities that could leave your servers at risk. Not just that, Mikhail will also show you how to detect these exploitations when immediate fixes aren't an option. Mikhail conducted a similar workshop for BSides Cape Town 2023 📎 👨‍💻 Ideal for entry-level blue team specialists looking to sharpen their defensive skills! #Cybersecurity #BlueTeam #EthicalHacking

9

🔒 #ICS Under Attack: How to Stay Secure 🔒 Recently, we've witnessed a significant rise in attacks targeting Industrial Control Systems, including incidents at the Municipal Water Authority of Aliquippa [1] and irrigation systems in Israel [2]. ICS manufacturers are responding by releasing numerous patches in a "patch Tuesday" fashion [3], however, in the OT space, having a patch is just the beginning; deploying it can be a complex and time-consuming task. So, how can you reduce your risk of getting hacked? As Rockwell Automation and CISA advises, "Disconnect Devices from the Internet" [4][5]. While this is sound advice, it's challenging to implement since organizations need to monitor and control these systems, often located in remote, hard-to-reach areas. What should defenders do? Place these systems behind a Remote Privileged Access Management (#RPAM) solution like Cyolo PRO (Privileged Remote Operations). Cyolo's solution provides Just In Time (#JIT) 1st and 3rd party #SRA, offering agentless access to many OT systems. 🎥 See it in action: Connecting to Rockwell PLC without an agent: https://lnkd.in/gHZTF_Kg Just In Time access via ServiceNow ticketing: https://lnkd.in/gy9tAHqH #CyberSecurity #IndustrialSecurity #OTSecurity #RemoteAccess [1] https://lnkd.in/gZjFTPrQ [2] https://lnkd.in/g6Td_6DB [3] https://lnkd.in/g_W5uRRX [4] https://lnkd.in/gt8tFja7 [5] https://lnkd.in/gmZZBtiz

16

In this KubeFM episode, Hillai and Ronen, security researchers at Wiz, explore the intricacies of hacking Alibaba Cloud's Kubernetes cluster. They share their experiences and insights on identifying and exploiting vulnerabilities, mainly focusing on misconfigurations and their impact on cloud security. You will learn: - How Hillai Ben Sasson and Ronen Shustin gained access to a Kubernetes cluster through a Postgres database. - How they moved laterally and managed to obtain push and pull rights to a private container registry. - Recommendations for securing multi-tenant Kubernetes clusters and maintaining environment hygiene. Watch (or listen to) it here: https://lnkd.in/gz53VRJn 🙏 Many thanks to Sysdig for supporting our work and sponsoring this episode. Make sure to check out their Kubernetes security checklist https://lnkd.in/gr-av-Yn With 🎙Bart "🤌" Farrell

28

3 Comments

🔒 Mastering Endpoint Security - Best Practices for 2024 🔓 Join our Check Point CheckMates Webinar on Onboarding & Best Practices for Harmony Endpoint (This time in English 😉 ), where Yehonatan Cohen will share his expertise and will dive into the best practices for deploying, optimizing, and boosting your Endpoint security experience with Harmony Endpoint. 📆 When - July 31. 💥 Register here - https://lnkd.in/dEddEWwN #Harmony #EndpointSecurity #BestPractices Check Point Software

64

1 Comment

Join Alon Navon as he delves into the challenges of remediating open source vulnerabilities. Learn how security teams can leverage the backporting of security fixes to bypass challenging upgrades and prevent breaking changes. In this webinar you will learn: - Why backporting fixes can often be the most effective solution for remediation. - How to independently remediate open source vulnerabilities bypassing extensive R&D processes. - How to efficiently address all instances of vulnerabilities in a unified manner. Don't miss out register today: https://lnkd.in/ebdEbf_8 #applicationsecurity #opensource #cybersecurity

10

eBPF for log collection? 🤯 "eBPF offers a paradigm shift in log collection by enabling custom code execution within the kernel in a safe and efficient manner", says Aviv Zohari, our Founding Engineer, in an article just published on APMdigest: https://lnkd.in/dmeqd3Nv Aviv recently held a 30 mins presentation on this topic at the recent #kubecon 🇫🇷 Paris, in front of a packed room. Audience members lined up to ask follow up questions 🙋‍♂️ 🙋‍♀️ #eBPF is making waves 🌊 And groundcover is the platform to stand on to ride them 🏄‍♂️ 🏄‍♀️

11

🔔 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠 𝐀𝐥𝐞𝐫𝐭 :𝐅𝐑𝐄𝐄 𝐋𝐢𝐯𝐞 𝐂𝐫𝐚𝐬𝐡 𝐨𝐧 “𝐁𝐚𝐬𝐢𝐜 𝐌𝐚𝐥𝐰𝐚𝐫𝐞 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬” (2 hours) 📆 25th Sept(Wed) 2024 (7:00 pm IST - 9:00 pm IST) - Total duration 2 hours over zoom 👩‍🎓 𝐓𝐨𝐩𝐢𝐜𝐬 𝐂𝐨𝐯𝐞𝐫𝐞𝐝: 1️⃣ Approaching Malware Analysis and Lab Setup - tool selection 2️⃣Windows Internals quick overview - PE File, Virtual Memory, DLL, Windows API 3️⃣ Basic Malware Analysis - Static Analysis, dynamic Analysis, API logging and Analysis, Memory Analysis 4️⃣ Career options as a Malware Analyst The session would be be helpful if you want to pursue a career in the following areas related to Malware Analysis: 👉IR and Forensics 👉Threat Intelligence 👉SOC Analyst 👉Threat Hunting 👉Antivirus/ EDR/ Sandbox Engineer 👉Malware Detection Engineer 👉Work in Anti-Malware teams or Antivirus or EDR engine Developer in 𝐌𝐜𝐚𝐟𝐞𝐞, 𝐒𝐲𝐦𝐚𝐧𝐭𝐞𝐜, 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭, 𝐂𝐫𝐨𝐰𝐝𝐬𝐭𝐫𝐢𝐤𝐞, 𝐒𝐞𝐧𝐭𝐢𝐧e𝐥 𝐎𝐧𝐞, 𝐏𝐚𝐥𝐨 𝐀𝐥𝐭𝐨 𝐍𝐞𝐭𝐰𝐨𝐫𝐤𝐬, 𝐌𝐢𝐧𝐝𝐭𝐫𝐞𝐞, 𝐐𝐮𝐢𝐜𝐤 𝐇𝐞𝐚𝐥, 𝐙𝐬𝐜𝐚𝐥𝐞𝐫 and many more.. 👉Malware Developer for Red Teams 👉Other roles related to Malware Research, Malware Analysis and Reverse Engineering ➡ If interested, please fill up the form: https://lnkd.in/gdUc88W5 #Malware #Detection #APIAnalysis #Static #DynamicAnalysis #Ransomware

19

📌 .NET Hooking – Harmonizing Managed Territory 🌐 https://lnkd.in/erU6PtGr #Pentesting #Hacking #Hacker #OffensiveSecurity #Pentest #RedTeam #BugBounty #Vulnerability #Testing #devsecops #OffensiveOperations #window_internals #PenetrationTesting #exploit #blueteam #infosec #cybersecurity #informationsecurity #security

1

By following these high-level best practices, organizations can manage Terraform state files effectively, ensuring the consistency, security and availability of their infrastructure. By Eran Bibi, thanks to Firefly | #PlatformEngineering #IaC

1

🔍 🔐 Explore the shift from #DevOps to #DevSecOps and why integrating security early is crucial for your software's success. 🔗 Dive into the details: https://lnkd.in/dbd5SuTg

8

🚀 Kubesol: A Kubernetes Distribution by eSolutions with Viorel Anghel Viorel Anghel, Head of Cloud and Infrastructure at eSolutions, brings 25+ years of experience with Linux, Cloud, and Kubernetes to OmniOpenCon! As a Certified Kubernetes Administrator (CKA), Viorel is ready to dive deep into Kubesol, a free and open-source Kubernetes distribution available on GitHub. In this talk, you’ll learn: 🌱 How Kubesol was started and what motivated its creation. ⚙️ How it compares with other Kubernetes installers. 💡 Practical tips on using Kubesol for your projects. 🤝 Ways to contribute to this open-source project. Get ready for an in-depth look at how Kubesol can simplify Kubernetes deployment and management!

30

Delving into a critical discussion: On-Premise vs. Cloud Costs. Our latest article on IsraelClouds scrutinizes whether transitioning back to On-Premise infrastructure is the optimal solution for managing cloud expenditures. Discover more here: Link in the first comment.

2

1 Comment

How did Wiz help Stanford University empower its departments to self-manage cloud security? "Because Wiz is agentless, we don't have to worry about anyone forgetting to install software—we have visibility into everything we need." Noah Abrahamson, Director of Cloud Security, Stanford University Here's how: 🔍 Real-time visibility across AWS, Azure, and GCP ⚡ Simplified security for 20k+ faculty and staff 🛡️ Enhanced risk management by a 13-person security team By federating security management, Stanford's teams can focus on innovation, from reducing fossil fuels to advancing healthcare. Discover more below 💡 https://lnkd.in/gHxgMYRd

252

1 Comment

On Thursday, June 27, at OWASP Global AppSec Lisbon 2024, OX Security researchers Eyal Paz, VP of Research, and Liad Cohen 🇮🇱, Data Scientist, will be presenting: Transitive Vulnerabilities Exploit in Real-Life. But why wait until then to dive into the critical topic of transitive vulnerabilities? We've written a quick blog that covers: ➡️ Understanding transitive vulnerabilities and their origins ➡️ Real-world examples of transitive dependencies in software ➡️ Quantifying the risk and strategies for mitigation ➡️ The adversary perspective and its importance in risk management ➡️ Practical strategies to identify and prioritize remediation of transitive dependency risks Link to the full blog is in the comments. #AppSec #CyberSecurity #OWASP #TransitiveVulnerabilities #SoftwareSecurity

23

1 Comment

This is how responsible disclosure should work... This year at #blackhat2024 Alon Leviev revealed two zero-days, tracked as CVE-2024-38202 (https://lnkd.in/ePMEU9dm) and CVE-2024-21302 (https://lnkd.in/e8kYYmv4), which enable downgrade attacks that can "unpatch" fully updated systems of Windows 10, Windows 11, and Windows Server, reintroducing old vulnerabilities. 💻 How It Works: These downgrade attacks manipulate the Windows update process, tricking it into rolling back OS components such as DLLs and the NT Kernel to outdated versions, while still displaying the system as fully updated. This exposes systems to past vulnerabilities that had been previously patched. 🛡️ Impact: According to Leviev, this means "the term 'fully patched' is meaningless," as this undetectable attack makes even the most secure Windows machines vulnerable to thousands of past threats. Remarkably, this attack bypasses even UEFI locks on virtualization-based security features without needing physical access. ⏲️ Microsoft's Response: Microsoft has acknowledged these vulnerabilities and issued advisories with mitigation advice, but a permanent fix is still in the works, six months after being reported. #CyberSecurity #InfoSec #MicrosoftWindows #VulnerabilityManagement #responsibledisclosure

19