Ofek Shaked

🥁 Sentra's dynamic duo, Noy Tal & Omri Limor are back with a new video! 📽 On this episode, they break down some of the most common questions we get from Sentra users. Excited for you to see this one, they really nailed the explanations 👏 If you missed the previous episode, check it out here 👇 https://lnkd.in/dHdYNxsj

26

2 Comments

🔒 Mastering Endpoint Security - Best Practices for 2024 🔓 Join our Check Point CheckMates Webinar on Onboarding & Best Practices for Harmony Endpoint (This time in English 😉 ), where Yehonatan Cohen will share his expertise and will dive into the best practices for deploying, optimizing, and boosting your Endpoint security experience with Harmony Endpoint. 📆 When - July 31. 💥 Register here - https://lnkd.in/dEddEWwN #Harmony #EndpointSecurity #BestPractices Check Point Software

64

1 Comment

Noy Tal and Omri Limor did an excellent job answering some of the top questions from Sentra users about our data security platform. They covered how Sentra classifies data, what shadow data is, how Sentra identifies it, and more. If you missed the previous episode where they answered some of the most searched DSPM questions, you can watch it out here 👇 https://lnkd.in/dxN5fjKr

44

1 Comment

📌 .NET Hooking – Harmonizing Managed Territory 🌐 https://lnkd.in/erU6PtGr #Pentesting #Hacking #Hacker #OffensiveSecurity #Pentest #RedTeam #BugBounty #Vulnerability #Testing #devsecops #OffensiveOperations #window_internals #PenetrationTesting #exploit #blueteam #infosec #cybersecurity #informationsecurity #security

1

🔔 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠 𝐀𝐥𝐞𝐫𝐭 :𝐅𝐑𝐄𝐄 𝐋𝐢𝐯𝐞 𝐂𝐫𝐚𝐬𝐡 𝐨𝐧 “𝐁𝐚𝐬𝐢𝐜 𝐌𝐚𝐥𝐰𝐚𝐫𝐞 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬” (2 hours) 📆 25th Sept(Wed) 2024 (7:00 pm IST - 9:00 pm IST) - Total duration 2 hours over zoom 👩‍🎓 𝐓𝐨𝐩𝐢𝐜𝐬 𝐂𝐨𝐯𝐞𝐫𝐞𝐝: 1️⃣ Approaching Malware Analysis and Lab Setup - tool selection 2️⃣Windows Internals quick overview - PE File, Virtual Memory, DLL, Windows API 3️⃣ Basic Malware Analysis - Static Analysis, dynamic Analysis, API logging and Analysis, Memory Analysis 4️⃣ Career options as a Malware Analyst The session would be be helpful if you want to pursue a career in the following areas related to Malware Analysis: 👉IR and Forensics 👉Threat Intelligence 👉SOC Analyst 👉Threat Hunting 👉Antivirus/ EDR/ Sandbox Engineer 👉Malware Detection Engineer 👉Work in Anti-Malware teams or Antivirus or EDR engine Developer in 𝐌𝐜𝐚𝐟𝐞𝐞, 𝐒𝐲𝐦𝐚𝐧𝐭𝐞𝐜, 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭, 𝐂𝐫𝐨𝐰𝐝𝐬𝐭𝐫𝐢𝐤𝐞, 𝐒𝐞𝐧𝐭𝐢𝐧e𝐥 𝐎𝐧𝐞, 𝐏𝐚𝐥𝐨 𝐀𝐥𝐭𝐨 𝐍𝐞𝐭𝐰𝐨𝐫𝐤𝐬, 𝐌𝐢𝐧𝐝𝐭𝐫𝐞𝐞, 𝐐𝐮𝐢𝐜𝐤 𝐇𝐞𝐚𝐥, 𝐙𝐬𝐜𝐚𝐥𝐞𝐫 and many more.. 👉Malware Developer for Red Teams 👉Other roles related to Malware Research, Malware Analysis and Reverse Engineering ➡ If interested, please fill up the form: https://lnkd.in/gdUc88W5 #Malware #Detection #APIAnalysis #Static #DynamicAnalysis #Ransomware

19

What should be the agenda for the upcoming CSA IL event during Cyber Week? You decide by completing the survey in the first comment

13

1 Comment

𝑯𝒂𝒗𝒆 𝒚𝒐𝒖 𝒆𝒗𝒆𝒓 𝒄𝒉𝒆𝒄𝒌𝒆𝒅 𝒕𝒉𝒂𝒕 𝒚𝒐𝒖𝒓 𝒆𝒎𝒂𝒊𝒍 𝒂𝒏𝒅 𝒑𝒉𝒐𝒏𝒆 𝒏𝒐. 𝒄𝒐𝒎𝒑𝒓𝒐𝒎𝒊𝒔𝒆𝒅 𝒊𝒏 𝒓𝒆𝒍𝒂𝒕𝒊𝒐𝒏 𝒕𝒐 𝒅𝒂𝒕𝒂 𝒃𝒓𝒆𝒂𝒄𝒉𝒆𝒔?  I checked my email. 𝘐𝘯 𝘋𝘦𝘤𝘦𝘮𝘣𝘦𝘳 2022, 𝘐𝘯𝘥𝘪𝘢’𝘴 𝘨𝘰𝘷𝘦𝘳𝘯𝘮𝘦𝘯𝘵-𝘢𝘱𝘱𝘳𝘰𝘷𝘦𝘥 𝘰𝘯𝘭𝘪𝘯𝘦 𝘵𝘳𝘢𝘷𝘦𝘭 𝘢𝘨𝘦𝘯𝘤𝘺 𝘙𝘢𝘪𝘭𝘠𝘢𝘵𝘳𝘪 𝘴𝘶𝘧𝘧𝘦𝘳𝘦𝘥 𝘢 𝘥𝘢𝘵𝘢 𝘣𝘳𝘦𝘢𝘤𝘩. 𝘛𝘩𝘦 𝘪𝘯𝘤𝘪𝘥𝘦𝘯𝘵 𝘪𝘮𝘱𝘢𝘤𝘵𝘦𝘥 𝘰𝘷𝘦𝘳 31𝘔 𝘤𝘶𝘴𝘵𝘰𝘮𝘦𝘳𝘴 𝘢𝘯𝘥 𝘦𝘹𝘱𝘰𝘴𝘦𝘥 23𝘔 𝘶𝘯𝘪𝘲𝘶𝘦 𝘦𝘮𝘢𝘪𝘭 𝘢𝘥𝘥𝘳𝘦𝘴𝘴𝘦𝘴. 𝘈𝘭𝘴𝘰 𝘪𝘮𝘱𝘢𝘤𝘵𝘦𝘥 𝘸𝘦𝘳𝘦 𝘯𝘢𝘮𝘦𝘴, 𝘨𝘦𝘯𝘥𝘦𝘳𝘴, 𝘱𝘩𝘰𝘯𝘦 𝘯𝘶𝘮𝘣𝘦𝘳𝘴 𝘢𝘯𝘥 𝘵𝘪𝘤𝘬𝘦𝘵𝘴 𝘱𝘶𝘳𝘤𝘩𝘢𝘴𝘦𝘥, 𝘪𝘯𝘤𝘭𝘶𝘥𝘪𝘯𝘨 𝘵𝘳𝘢𝘷𝘦𝘭 𝘪𝘯𝘧𝘰𝘳𝘮𝘢𝘵𝘪𝘰𝘯 𝘢𝘯𝘥 𝘧𝘢𝘳𝘦𝘴. 𝐋𝐞𝐭’𝐬 𝐜𝐡𝐞𝐜𝐤 𝐰𝐞𝐛𝐬𝐢𝐭𝐞 "𝐇𝐚𝐯𝐞 𝐈 𝐁𝐞𝐞𝐧 𝐏𝐰𝐧𝐞𝐝" (#𝐇𝐈𝐁𝐏) 𝐡𝐭𝐭𝐩𝐬://𝐡𝐚𝐯𝐞𝐢𝐛𝐞𝐞𝐧𝐩𝐰𝐧𝐞𝐝.𝐜𝐨𝐦/ HIBP allows users to check if their personal information, such as email addresses, usernames, or phone numbers, has been exposed in data breaches. We can sign up for notifications to be alerted if their email address appears in future data breaches. This tool also offers an API that developers can integrate into their applications to provide breach detection services for their users, enhancing overall security. #cybersecurity #data_breaches #FAFD #Forensic_Audit

4

Israel's leading bank, Bank Leumi בנק לאומי, has strengthened its cybersecurity posture by deploying Elastic Security as their SIEM solution. As their operations evolved, the need for a more agile and robust security solution became clear. By adopting Elastic Security, Bank Leumi achieved: 🔍 60% reduction in log detection time—from hours to minutes 💰 40% decrease in total cost of ownership by consolidating data logging and SIEM operations 🛡️ 50% faster threat resolution thanks to Kibana dashboards and advanced detection rules Learn more about how Elastic Security empowers Bank Leumi’s SOC team. Read their full success story here: https://gag.gl/rIXi20 #Cybersecurity #SIEM #ElasticSecurity #DataProtection #CloudSecurity

1

☁ Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs New blog series by Wiz’s Merav Bar and Amitai Cohen covering strategies for tracking and defending against malicious cloud activity and threats. The post covers: - The cloud threat landscape - Cloud-specific atomic IOCs - Cloud-unique aspects of traditional atomic IOCs - Strategies for using atomic cloud IOCs Wiz has also started collecting public indicators of compromise in this repo: https://lnkd.in/gtbHXYRP Some great tactical advice, looking forward to future posts in the series! https://lnkd.in/gZfKRz37 #cybersecurity

95

4 Comments

This is how responsible disclosure should work... This year at #blackhat2024 Alon Leviev revealed two zero-days, tracked as CVE-2024-38202 (https://lnkd.in/ePMEU9dm) and CVE-2024-21302 (https://lnkd.in/e8kYYmv4), which enable downgrade attacks that can "unpatch" fully updated systems of Windows 10, Windows 11, and Windows Server, reintroducing old vulnerabilities. 💻 How It Works: These downgrade attacks manipulate the Windows update process, tricking it into rolling back OS components such as DLLs and the NT Kernel to outdated versions, while still displaying the system as fully updated. This exposes systems to past vulnerabilities that had been previously patched. 🛡️ Impact: According to Leviev, this means "the term 'fully patched' is meaningless," as this undetectable attack makes even the most secure Windows machines vulnerable to thousands of past threats. Remarkably, this attack bypasses even UEFI locks on virtualization-based security features without needing physical access. ⏲️ Microsoft's Response: Microsoft has acknowledged these vulnerabilities and issued advisories with mitigation advice, but a permanent fix is still in the works, six months after being reported. #CyberSecurity #InfoSec #MicrosoftWindows #VulnerabilityManagement #responsibledisclosure

19

🚨 Exciting news! Sentra's video series kicked off yesterday with our data security experts, Noy Tal and Omri Limor 🤩 They answer some of the most searched DSPM questions. This clip features Omri providing a very interesting explanation of Data Access Governance (DAG). Watch the full video below and subscribe to Sentra's Youtube channel for more👇 https://lnkd.in/dvJVMq2a

35

If you're interested in how a threat researcher from the Israeli NSA approaches SaaS Security, this is worth the short read. Nicely written, Tamar Cohen! #saassecurity #AIsecurity #Unit8200

11

#Israeli cyber exits hit all-time high of over $7 billion in 2023 The total sum of exits in the Israeli cyber sector in 2023 was the highest ever, but the number of exits decreased by 35% compared to its peak in 2021. The volume of funding rounds was the lowest in the past five years. https://lnkd.in/ey557Qfh For more information on open positions, we are working on globally with our Portfolio Clients then contact Andrew Robinson FREC, louise robinson or Rebecca Beauchamp call us on +44 (0)1923 312435. Why not follow Paradigm Recruitment on https://lnkd.in/gssS9BWN  #paradigmrecruitment #hiring #careers #startup #recruitment #IPO #cybersecurity #cybercareers #cyberjobs #startupjobs #cloud #cloudsecurity #security #cloudsecurity #AI #Boiometrics #Analytics #MachineLearning #ThreatIntelligence #DarkWeb

2

I'm excited to share with you the first episode of our new video series: Sentra 101! 📽 In this episode, learn how Sentra's technology leverages advanced algorithms to swiftly discover and accurately classify your data. Want to stay on top of all your changing data? Hear from data security expert (data team lead), Daniel Suissa. Watch the full video below 👇

54

1 Comment

Dear Linkedin network, if you need a guy who is passionate on innovative in-the-wild zero-day exploit detection and advanced vulnerability research (Windows platforms only), please let me know. :) Meanwhile, I will be on a mixed style of vacations and personal projects. I will continue to work on my stuff such as EXPMON (https://pub.expmon.com), so maybe you will see more activities from @EXPMON_, maybe.. :) (follow @EXPMON_ at Twitter/X for fresh discoveries and activities) During the last 1.5 years, I've published several of my original research addressing previously-unknown zero-days and attack vectors in Outlook/Office/Windows on CPR blog site, as well as driven exploit detection innovations internally across products. I'm proud of the work (I did save my publications as PDFs, as I treat them as "arts" :)), and hopefully it helped and will help the industry/community for better detection and defense in long term. I tried to go the way "performing research to understand how it works" and "using knowledge gained from research to drive itw exploit detection". The mission continues, regardless. :) * Following are the Publications and Links. Resurrecting Internet Explorer: Threat Actors Using Zero-day Tricks in Internet Shortcut File to Lure Victims (CVE-2024-38112) https://lnkd.in/d_vm7_Pt The Risks of the #MonikerLink Bug in Microsoft Outlook and the Big Picture https://lnkd.in/gzTWUVs5 The Obvious, the Normal, and the Advanced: A Comprehensive Analysis of Outlook Attack Vectors https://lnkd.in/gv5HAac6 Abusing Microsoft Access "Linked Table" Feature to Perform NTLM Forced Authentication Attacks https://lnkd.in/dJbYj4DX QueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service https://lnkd.in/gGFsmCUw

58

I'm excited to share Sentra's new video series starring our dynamic duo, Noy Tal and Omri Limor! In this first episode, Omri and Noy answer some of the most searched DSPM questions. This clip features Omri providing a very interesting explanation of Data Access Governance (DAG). 🎥 Check out the full video in the comments below.

36

3 Comments

Extensive Use of ORB Proxy Networks by State Actors to Elude Detection approaching Israeli customers. Based on our research and ongoing monitoring of cyber-attacks, we've discovered a concerning trend: China-linked state-backed hackers are increasingly utilizing operational relay box (ORB) networks for cyber spying. These networks function like compromised computers and servers, which are controlled by cybercriminals who provide access to various hacker groups. The lifespan of an IPv4 address of an ORB node can be as short as 31 days These networks are exceptionally difficult to detect and attribute blame to because they're widely dispersed and constantly changing. As a result, companies struggle to defend against them as hackers exploit diverse resources worldwide. With Revive Cloud, we integrate threat intelligence feeds, empowering us to identify and thwart these hackers swiftly. Our customers receive real-time updates on various proxy types, including ORB proxies, enabling them to recognize and mitigate these threats effectively and in real-time, thereby safeguarding against emerging cyber risks. Reach out to us today for swift and straightforward deployment to strengthen your organization against cyber threats.

25

What’s happening with Tenable in Israel? Check out our new LinkedIn and Instagram pages for the latest on events, activities, news and research. LinkedIn: https://lnkd.in/gFRd-6nR Instagram: @TenableIsrael

6

This Cybersecurity Month, what are the main security issues you’re focusing on? AI has been a major buzzword, but one of the most interesting and relevant topics in recent years is the paradox of AI and data privacy. The paradox - AI requires large amounts of data to improve, but privacy concerns limit how much can be used. As AI depends on personal information for accuracy, the growing demands for privacy and stricter regulations create major challenges. Organizations should find the right balance between utilizing data for AI and safeguarding individual privacy. This often involves techniques like anonymization to protect sensitive information. As part of this month, I’d like to share a blog I recently wrote about this topic ⬇

19