Sascha Schumann

The #Log4j2 flaw CVE-2021-44832 🚨 still poses a severe threat to global finance, warns this article. Despite fixes, breaches at Sisense & Snowflake show the vulnerability's dangerous impact.⚠️ The #RESCALE project, part of the #HorizonEurope initiative, aims to revolutionize supply chain security by minimizing threats and addressing critical cybersecurity challenges. Read more here: https://lnkd.in/dPhNrtER #RESCALE #HorizonEurope #SupplyChainSecurity

8

🚨 Critical PHP Vulnerability: Latest Discovery by Traceable ASPEN Traceable ASPEN has uncovered a critical RCE vulnerability (CVE-2024-4577) in PHP, affecting all versions installed on Windows. With a CVSS score of 9.8, this vulnerability poses a significant risk to your servers' security. Get the details here: 👉 https://bit.ly/4c0RIko Key points: 📌 The vulnerability allows attackers to inject arguments into the PHP process, potentially leading to remote code execution. 📌 It affects PHP versions 8.3 < 8.3.8, 8.2 < 8.2.20, and 8.1 < 8.1.29 on Windows. 📌 All XAMPP installations on Windows are vulnerable by default. For more details on the vulnerability and our recommendations, read our in-depth blog 👉 https://bit.ly/4c0RIko

8

🚨 Critical PHP Vulnerability: Latest Discovery by Traceable ASPEN Traceable ASPEN has uncovered a critical RCE vulnerability (CVE-2024-4577) in PHP, affecting all versions installed on Windows. With a CVSS score of 9.8, this vulnerability poses a significant risk to your servers' security. Get the details here: 👉 https://bit.ly/4c0RIko Key points: 📌 The vulnerability allows attackers to inject arguments into the PHP process, potentially leading to remote code execution. 📌 It affects PHP versions 8.3 < 8.3.8, 8.2 < 8.2.20, and 8.1 < 8.1.29 on Windows. 📌 All XAMPP installations on Windows are vulnerable by default. For more details on the vulnerability and our recommendations, read our in-depth blog.

5

1 Kommentar

🚨 Critical PHP Vulnerability: Latest Discovery by Traceable ASPEN Traceable ASPEN has uncovered a critical RCE vulnerability (CVE-2024-4577) in PHP, affecting all versions installed on Windows. With a CVSS score of 9.8, this vulnerability poses a significant risk to your servers' security. Get the details here: 👉 https://bit.ly/4c0RIko Key points: 📌 The vulnerability allows attackers to inject arguments into the PHP process, potentially leading to remote code execution. 📌 It affects PHP versions 8.3 < 8.3.8, 8.2 < 8.2.20, and 8.1 < 8.1.29 on Windows. 📌 All XAMPP installations on Windows are vulnerable by default. For more details on the vulnerability and our recommendations, read our in-depth blog 👉 https://bit.ly/4c0RIko

6

It's been a while since our latest blog post. Check out the newest one by Paweł Sroka, titled: "O-RAN Hierarchical Traffic Management for an Advanced V2X Scenario Covering Emergency and Cybersecurity Services", https://lnkd.in/dm3aABTZ The 5G and 6G wireless networks are characterized by high heterogeneity, introducing many new services and device types. This poses a serious challenge to RRM in RAN, due to the various imposed requirements, including those related to throughput, latency, or maintenance of continuity of service. To make the best use of the available radio resources, one of the proposed solutions to cope with such demands is to perform Traffic Steering (TS). In general, TS is responsible for routing user traffic through the most suitable resources that can be achieved, e.g., by performing flexible association of UEs to eNBs/gNBs. Examples of such approaches include load-balancing techniques or service-based TS. This blog describes a work that extends the application of TS in the O-RAN framework in the form of Hierarchical Traffic Management. We evaluate this approach in a challenging scenario of a heterogeneous network with high mobility, where behavior and used services change significantly over time. The considered use case assumes dynamic changes in the network over time, including the appearance of high-priority emergency services, such as Emergency Special Services and First Responders, and a challenging denial-of-service cyberattack in a high-demand situation. The demo described in this blog and its outcomes have been presented at the NTIA/ITS RIC Forum 2024, earlier this year. #openran #oran #allthingswireless #5G #cybersecurity #v2x #RIC #6G

23

Warning: Rolling out passwordless authentication via the FIDO2 standard can be undermined if you don't properly secure sessions that take place after authentication. The details here: https://lnkd.in/dc_gYt8C #FIDO2

2

https://lnkd.in/eisY49nb It is big topic not only for #localfirst and #decentralized apps but for #microservices and #sdk . We need to consider not only #versioning of service but readers and writers and some times go forward and make data items and methods and actions version aware . Let’s talk about challenges of #schemawvolution

1

Missed Upwind's eBPF meetup? You can still view it 👀 🐝   Upwind's Tel Aviv meetup featured the following: ⏺ Peter McConnell diving into eBPF and Golang for libpam ⏺ Moshe Hassan provided insights into eBPF security applications and attacker perspectives If you missed the meetup and would like to learn more - we've got you covered. You can view the recording by clicking on the link at the bottom of the post, or view Peter McConnell's deep-dive blog on the topic. These resources will equip you with the fundamentals of eBPF, explore its practical applications in security, and demonstrate how it can elevate your security posture. You'll also see eBPF in action through real-world case studies. Up and Upwind! 🏄‍♂️ https://lnkd.in/ezYCZnXD https://lnkd.in/eMEenuCC https://lnkd.in/e97q_cND #eBPF #meetup #TelAviv #infosec #Golang #libpam #cloudsecurity   

26

1 Kommentar

🎊 The new version of Energy Logserver 7.4.3 is now available! 🎊 Energy Logserver has recently released a new version of the platform — 7.4.3. The vendor has added many new features and improved the existing ones. Here are just a few of them:  ✔️ Improved database query management  ✔️ Network Probe — a new component of the system  ✔️ Advanced AI with the use of scientific models  ✔️ Improved licensing service  ✔️ Improved audit of GUI actions Find out about all the improvements and innovations in version 7.4.3 at this link: ➡️ https://lnkd.in/eHKfT6tg #EnergyLogserver #SoftwareUpdate #NewRelease #Logging 

12

1 Kommentar

🎊 The new version of Energy Logserver 7.4.3 is now available! 🎊 Energy Logserver has recently released a new version of the platform — 7.4.3. The vendor has added many new features and improved the existing ones. Here are just a few of them:  ✔️ Improved database query management  ✔️ Network Probe — a new component of the system  ✔️ Advanced AI with the use of scientific models  ✔️ Improved licensing service  ✔️ Improved audit of GUI actions Find out about all the improvements and innovations in version 7.4.3 at this link: ➡️ https://lnkd.in/eHKfT6tg #EnergyLogserver #SoftwareUpdate #NewRelease #Logging 

2

🔍 Nmap Ping Sweep: How to Scan Networks for Live Hosts Nmap ping sweep is an essential skill to have in your hacking toolkit. It lets you quickly identify live hosts on a network you can target and is a crucial step in any penetration test. Our latest article will teach you how to: 1. Perform a ping sweep using the powerful network mapping tool Nmap. 2. Save this output to a file of your choice. 3. Discover advanced Nmap options to optimize your scans. 4. Bypass firewalls and filters to ensure your scans are successful. Equip yourself with the knowledge to scan networks and identify live hosts effectively with Nmap. Dive into our detailed guide here 👉 https://lnkd.in/gP9_RWrf Boost your penetration testing skills with our step-by-step tutorial and master the art of network scanning today!

4

WATCH: Silverfort's Dor Segal give an overview on bypassing modern authentication methods to SSO from #RSAC2024. READ our story on Segal's session from #RSA here: https://bit.ly/4bM38YP #cybersecurity #infosec #ITsecurity

2

New blog post: DUCTF 2024 ESPecially Secure Boot Writeup by Daniel Hodson. We're happy to publish a new blog post about exploiting a Secure Boot vulnerability (CVE-2018-18558) in older versions of the esp-idf framework for the ESP32 series of microcontrollers. While the write-up is focused around a DownUnderCTF 2024 challenge, the issue is very much real-world. In fact, we've seen this same construct multiple times when doing security audits, so think it's a great case study. If you're in the embedded/IoT sector, responsible for device security, and are looking for a trusted partner for penetration testing and security assessment activities - please get in touch! https://lnkd.in/gwfZ-4Rt

14