ELLIO

‼️ Want to learn more about network fingerprints and how to use them to investigate threats, hunt malicious activity, or block unwanted traffic at the perimeter? 🗓️ Date: This Friday (Oct 24, 2024) 🧢 Topic: How apply modern network fingerprints (JA4, JA4+, MuonFP…) in security operations to enhance your existing security stack ✅ Using JA4 fingerprints to identify and #block specific library traffic ✅ Leveraging #MuonFP fingerprints for #behavioral and #anomaly #detection ✅ Lessons learned from misimplemented fingerprints that caused visibility and security gaps ✅ Useful #implementation #tips and actionable insights REGISTER HERE: https://lnkd.in/eX9U5yum

Glad to see Vlad Iliushin, head of cybersecurity at ELLIO, share his take on using #network #fingerprints in defense operations at BSidesNYC this weekend! 👍

Excited to run a hands-on workshop at BSidesNYC this Saturday! We’ll dive into modern passive #networkfingerprints MuonFP and JA4 - their strengths, limits, and how to use them in real-world defense workflows. 🛠️ Interactive Networking Fingerprinting Walkthrough 🗓️ October 18, 2025 at 3pm 📍 Track: Workshop (L.61)   See you there!

🔌 ELLIO #Traefik Plugin with Pangolin (YC S25) is now live in Technical Preview! Get started here 👉 https://lnkd.in/eXvkXRus Key benefits: ✅ Real-time defense against IP threats (scans, brute-force attacks, etc.) ✅ Dynamic IP blocking ✅ Custom allowlisting to secure smooth legitimate traffic ✅ Enforce “deny by default, allow selectively” policies for sensitive services ✅ Restrict traffic by source IP, not just by user or resource #LawrenceSystems

The AMTSO Cyber Research Conference continues into day two! The key theme remains clear: how to effectively test, validate, and trust cybersecurity tools in a world transformed by AI, automation, and evasive threats. Proud to see Vlad Iliushin, CEO of ELLIO and AMTSO President, open the conference yesterday.

🩵 Thanks to everyone who met with us yesterday at it-sa – Home of IT Security in Nuremberg, Germany! It was great to catch up, exchange ideas, and talk about how ELLIO can support defense against mass exploitation, reconnaissance activity, and IP-based threats. #itsa

‼️Attention‼️ ELLIO Research Lab observed a surge in reconnaissance and initial access attempts against #PaloAlto GlobalProtect. - 30%+ originate from a single ASN - 65%+ share the same MuonFP & JA4 fingerprint combination

Thrilled to share a significant security finding! We've recently been credited with CVE-2025-9495, an authentication bypass vulnerability affecting Carrier HVAC 's vitogate 300, as detailed in the latest CISA advisory : https://lnkd.in/grc55CgF This discovery highlights the critical importance of continuous security research and collaboration in safeguarding our digital infrastructure. At MicroSec, we're committed to contributing to a more secure cyberspace. A huge thank you to Cybersecurity and Infrastructure Security Agency for their swift advisory and to the team at Carrier HVAC for their collaboration in addressing this. Special thanks to the reconnaissance insights provided by platforms like Censys , Modat and Shodan for enabling such discoveries. 🔒 If you want to strengthen the cyber resilience of your infrastructure against such ICS/OT vulnerabilities, connect with us: 📩 [email protected] | 🌐 www.microsec.io Vishram Mishra Shashank N. Navil Joijode MicroSec #CyberSecurity #VulnerabilityResearch #CVE #RouterSecurity #InfoSec #Microsec

Every packet tells a story. Explore the milestones we’ve picked that shaped #networksecurity and how we do network #fingerprinting today. 📖 Read the full blog post here: https://lnkd.in/e4qnsVzc

Hey cybersec community, 🔥New #opensource tool - #TCP #Fingerprint #Firewall (Recon Shield) is now live on GitHub! TCP Fingerprint Firewall is a eBPF-based network security tool that leverages TCP fingerprinting to detect and block malicious and promiscuous network scanners with high speed and accuracy. It combines the power of XDP (eXpress Data Path) for inline packet processing with MuonFP's advanced TCP fingerprinting capabilities, allowing you to identify and block reconnaissance activities before they can map your network infrastructure. Unlike traditional firewalls that operate on simple port/IP rules, TCP Fingerprint Firewall uses MuonFP-based fingerprints - subtle TCP header characteristics that identify scanning tools like #Nmap, #ZMap, and #Masscan, as well as specific operating systems or device fingerprints.   🧢 Authors behind the tool: Vlad Iliushin (ELLIO) and Ken Webster, who presented TCP Fingerprint Firewall at Black Hat Arsenal this August. More info at GitHub: https://lnkd.in/epaMqiRJ