Tristan Gobillot

Important 𝐂𝐕𝐄 𝐀𝐥𝐞𝐫𝐭: CVE-2023-7028 This critical CVE (Common Vulnerability and Exposure) from 2023 affects GitLab and could allow attackers to take control of administrator accounts. What is CVE-2023-7028? This vulnerability exists in GitLab's password reset functionality. An attacker could potentially exploit it to gain access to an administrator account by providing two email addresses during the reset process. What can you do? If you're a GitLab administrator, prioritize patching your instance to the latest version immediately. GitLab recommends enabling two-factor authentication (2FA) for all users as an additional security measure, as it would prevent unauthorized access even if the password is compromised through this vulnerability. visit our website: www.hyper-ict.com Here's a helpful resource for more information: https://lnkd.in/d2MXaTMS #GitLab #CVE #VulnerabilityManagement #Cybersecurity #hyperict

1

🚨Here is a great discovery of a very interesting repository around a SOC based on 4 Open Source tools: 👉Wazuh: Real-time monitoring and alerting for security events. 👉DFIR-IRIS: Streamlined incident response and forensics capabilities. 👉Shuffle: Automated workflow management to streamline security processes. 👉MISP: Open source threat intelligence platform. ✅T-Guard - Nusantara ✔Verified link to the official repository 🔗https://lnkd.in/eRw6y3Ts ⚙As a reminder, T-Guard is a solution around a SOC that leverages the strength of leading open-source tools to provide solid protection for your digital assets. 🤝The integrated approach ensures comprehensive defense against a wide range of cyber threats, making your systems and data safer and more secure. ✅Complete documentation (installation, configuration) ✔Verified link to the official page 🔗https://lnkd.in/eSwQwYAc 🖼Image Source: https://lnkd.in/emmNMJcg 👨 💻Set up your Labs and have fun!! #soc #opensource #security #cybersecurity #blueteam

5

🖥 Windows 11 : activer les sous-titres en direct 👉 https://lnkd.in/ez_TRG8b #Tutoriel #Windows11 #SousTitres #Subtitles

2

⛔ GOOGLE CHROME BROWSER ⛔ Urgent Security update required ! Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild. Assigned the CVE identifier CVE-2024-5274, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Clément Lecigne of Google's Threat Analysis Group and Brendon Tiszka of Chrome Security on May 20, 2024. Type confusion vulnerabilities occur when a program attempts to access a resource with an incompatible type. It can have serious consequences as it allows threat actors to perform out-of-bounds memory access, cause a crash, and execute arbitrary code. The development marks the fourth zero-day that Google has patched since the start of the month after CVE-2024-4671, CVE-2024-4761, and CVE-2024-4947. #Google #Chrome #GoogleChrome #WeAreLoughTec #CyberSecurity Link to Article below ⬇ https://lnkd.in/gGbRxwWG

4

🚨High Risk Vulnerability Alert! 🚨: CVE-2024-3435 A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the 'apply_settings' function, allowing an attacker to manipulate the application's configuration by sending specially crafted JSON payloads. This could lead to remote code execution (RCE) by bypassing existing patches designed to mitigate such vulnerabilities. CVSSv3.1 Base Score: 8.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #lollms #parisneo #apisecurity #owasp https://lnkd.in/drxXWheK

7

Cyber Threat Intelligence ®: Vulnerability in Apache Project Lets Hackers Launch Supply Chain Attacks Researchers discovered a vulnerability in an archived Apache project, highlighting the risk of using outdated third-party dependencies, where attackers can exploit the way package managers prioritize public repositories to install a malicious package with the same name as a legitimate private dependency. https://lnkd.in/gscFyYQq

63

1 commentaire

White Knight Labs is thrilled to announce the next session of our Advanced Red Team Operations course, starting on June 6th & 7th. This training is tailor-made for red teamers, pentesters, and security professionals eager to elevate their skills. On Day 1, dive into setting up infrastructure with a focus on redirectors and protecting your setup. A key example includes using a HTTPS redirector to pass traffic over an internal AWS subnet via ProxyPass, effectively concealing the Cobalt Strike server and minimizing exposure. Think this sounds basic? It's just the beginning. We progressively delve deeper, challenging you to push the boundaries of what you know. Ready to level up your red teaming expertise? Join us for a transformative live training event. Reserve your spot now and take your red teaming to the next level! https://lnkd.in/g_AnHCFs #RedTeam #CyberSecurity #PenTesting #InfoSec #SecurityTraining #AdvancedTraining #WhiteKnightLabs #CyberDefense #EthicalHacking

14

🚀 Last but not least, in my KubeCon Highlights Part 2 video, I talked to Anaïs Urlichs about her work at Aqua Security in the open source team on #Trivy, a comprehensive cloud-native security scanner. 💡Trivy features a Kubernetes operator for integrating security scans within a cluster, allowing engineers and SREs to manage and visualize security scans through familiar observability tools easily. Trivy also can scan for vulnerabilities, configurations, exposed secrets, license issues, and RBAC configurations, emphasizing its open source nature and availability for use through GitHub, local CLI, CI/CD pipelines, and within Kubernetes clusters. ➡️ Learn more about Trivy in the full interview on YouTube: https://lnkd.in/gWFR6eNx #opensource #cloudnativesecurity #cncf #kubecon #kubernetessecurity

6

🚨High Risk Vulnerability Alert! 🚨: CVE-2024-4024 An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker with their Bitbucket account credentials may be able to take over a GitLab account linked to another user's Bitbucket account, if Bitbucket is used as an OAuth 2.0 provider on GitLab. CVSSv3.1 Base Score: 7.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #gitlab #bitbucket #apisecurity #owasp https://lnkd.in/dr8yXiDh

7

🎉Happy New week family 😌 Today we explain the difference between Virtual machines (#vm) and App service in #Azure. 👉🏼 Which one of them should you use ? 💻 Go for #VMs if you need that deep level of control, especially if you're migrating older apps that have specific needs or if you’re familiar with managing your own environment. 🧑‍💻Choose #App Service if you're building #web apps and want Azure to handle the #infrastructure stuff, like scaling. It's great when you want to focus more on the code and less on the setup. 👉🏼Here are some quick tips for choosing: 1. Complexity:Need detailed control? Go with VMs. Prefer simplicity? Choose App Service. 2. Cost:VMs can be costly as they’re always running, while App Service might be more budget-friendly depending on your usage. 3. Migration: Moving a legacy app? VMs could simplify the process. 😌We hope this helped. If you need more clarifications on topics like this, follow us for more💪

2

How to Install Sublime Text on Ubuntu (and Other Linux Distros) https://lnkd.in/eQSdYMpf

1

CVE-2023-52251 and CVE-2024-32030 Exploit PoCs: Apache Kafka Remote Code Execution Vulnerability > 0.7.2 https://lnkd.in/g2-4f5BQ We would like to thank GitHub for sharing this information. #security #bugbountytips #bugbounty #infosecnews #cybersecurity #pocnews #exploit #apachekafka #apachekafkavulnerability #vulnerability #rce #exploitpoc

6

Is your web app using Telnet or FTP? It's time for an update... 😉 Secure protocols in web applications go a long way in preventing session hijacking at the networking level. In this article, we have packed the best practices for implementing TLS and secure protocols in your application to make them safer. #sessionHijacking #appDesign #applicationSecurity #securingWebApps #negativePID https://lnkd.in/eM-cWtWt

1

Which Specific Areas of Our Infrastructure Will Be Tested During a Pentest? This is a common question IT leaders ask when considering a penetration test. Here’s a guide to help you understand what to expect. If you find it valuable, please like so that it may help someone else! 🫱🏼‍🫲🏽 𝐒𝐡𝐨𝐫𝐭 𝐀𝐧𝐬𝐰𝐞𝐫: Anything explicitly part of the scope can be tested. However, there are important considerations to keep in mind: 𝐎𝐛𝐣𝐞𝐜𝐭𝐢𝐯𝐞𝐬 𝐌𝐚𝐭𝐭𝐞𝐫  As we discussed in our last post about the goals of a pentest, the most important thing is to define clear objectives. A good pentesting company will help you plan these objectives and suggest specific areas to test based on your needs. 𝐓𝐚𝐢𝐥𝐨𝐫𝐞𝐝 𝐓𝐞𝐬𝐭𝐢𝐧𝐠 𝐏𝐥𝐚𝐧  A pentesting firm will tailor a testing plan to your organization’s unique needs. They will suggest areas to test after understanding your objectives, ensuring the plan aligns with your business goals. 𝐁𝐮𝐬𝐢𝐧𝐞𝐬𝐬 𝐈𝐦𝐩𝐚𝐜𝐭 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬 Conducting a business impact analysis is crucial. This helps identify the biggest risks specific to your business and understand your relevant attack surface. Focusing on critical aspects first allows you to allocate resources effectively and manage smaller risks as your security matures. 𝐏𝐫𝐨𝐝𝐮𝐜𝐭𝐢𝐨𝐧 𝐄𝐧𝐯𝐢𝐫𝐨𝐧𝐦𝐞𝐧𝐭 𝐂𝐨𝐧𝐬𝐢𝐝𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 Testing production environments without a solid plan can lead to disruptions and potential access to sensitive data. It's essential to: • Limit testing to environments that mirror production but do not contain actual production data. • Plan for any potential impacts to production environments to avoid legal and operational issues. 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐧𝐜𝐲 𝐚𝐧𝐝 𝐄𝐱𝐩𝐞𝐫𝐭𝐢𝐬𝐞 With the right pentest firm, you will be equipped to: • Identify the areas that pose the biggest risks to your business. • Focus on those critical areas with well-defined objectives and scope. • Develop a strong plan for testing production environments if necessary. A successful pentest is more than just checking boxes. It’s about aligning the testing with your business goals and ensuring the key areas of your infrastructure are thoroughly assessed. This approach gives you the confidence that your most critical assets are protected. Have you considered these factors in your pentesting plans? Share your thoughts below! P.S. If you found this helpful, feel free to share it with your network ♻️ #Cybersecurity #PenetrationTesting #Ecommerce #Technology

3

This is a common question IT leaders ask about pentesting 🤔 . The answer can vary depending on the pentesting firm, but we like to focus on the following: Align Objectives and Business Goals First, you need to know the objectives of your pentest and align them with your business goals. Once you know what you want to achieve and the systems to be tested, a good pentesting firm will tailor your needs, and recommend specific types or a combination of them to meet your assessment goals. Tailoring the Approach A tailored approach means combining different pentesting types that meet your goals and address your organization’s risks. For example, an application or network pentest might be recommended in most cases. Or, if your organization leverages the cloud, the assessment can also include this type. "𝘛𝘩𝘦 𝘬𝘦𝘺 𝘪𝘴 𝘯𝘰𝘵 𝘵𝘰 𝘢𝘭𝘪𝘨𝘯 𝘵𝘩𝘦 𝘰𝘳𝘨𝘢𝘯𝘪𝘻𝘢𝘵𝘪𝘰𝘯 𝘵𝘰 𝘵𝘩𝘦 𝘱𝘦𝘯𝘵𝘦𝘴𝘵 𝘵𝘺𝘱𝘦𝘴, 𝘣𝘶𝘵 𝘵𝘰 𝘢𝘭𝘪𝘨𝘯 𝘵𝘩𝘦 𝘱𝘦𝘯𝘵𝘦𝘴𝘵 𝘵𝘺𝘱𝘦𝘴 𝘵𝘰 𝘴𝘦𝘳𝘷𝘦 𝘵𝘩𝘦 𝘰𝘳𝘨𝘢𝘯𝘪𝘻𝘢𝘵𝘪𝘰𝘯 𝘣𝘦𝘴𝘵." Beyond Compliance Hackers are constantly trying anything to breach your security. A thorough and well-planned pentest can go a long way in helping you secure your business. It’s not just about compliance—it’s about real security. A good pentesting firm will work with you to determine the best types of tests for your organization. This tailored approach ensures that you get the most value and security from your pentests. What types of penetration tests have you considered for your business? Share your thoughts below! P.S. If you found this helpful, feel free to share it with your network ♻️ #Cybersecurity #PenetrationTesting #Ecommerce #Technology

4