Panos Georgakopoulos

⚠️ FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User | Read more: https://lnkd.in/d3Zy4JW2 ✅ CVE-2025-52970 lets attackers bypass authentication to log in as any user on FortiWeb systems. ✅ FortiWeb 7.0-7.6 versions are vulnerable. ✅ Attackers manipulate cookie parameters to force zero-filled encryption keys. #cybersecuritynews #vulnerability

473

11 σχόλια

🔐 𝗜𝗔𝗠 𝘃𝘀 𝗣𝗔𝗠: 𝗞𝗲𝘆 𝗗𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝗰𝗲𝘀 🔐 1️⃣ IAM (Identity & Access Management): Manages who can access what (e.g., email, apps) for all users (employees, customers, vendors). 🛠️ Tools: Okta, Azure AD, ForgeRock. 2️⃣ PAM (Privileged Access Management): Controls access to sensitive systems (e.g., servers, databases) for privileged users. 🛠️ Tools: CyberArk, BeyondTrust, HashiCorp. 3️⃣ IAM = General access | PAM = Admin-level access Which is more relevant to your organization? Let me know! 👇 🔔 Follow Tech Talks for expert tips and updates on top tech courses like Cybersecurity, BigData, DevOps, AI, ML, Development, Testing, Marketing & more! #Cybersecurity #IAM #PAM #TechTrends #AccessManagement #Security

1.178

31 σχόλια

📢 Kaspersky Global Research and Analysis Team (GReAT) experts have conducted a detailed analysis of ToolShell—a cluster of Microsoft SharePoint vulnerabilities that attackers are actively exploiting. 🔍 ToolShell flaws originate from an incomplete fix for CVE-2020-1147, first reported in 2020. They are easy to exploit, provide significant access to compromised infrastructure, and can be overlooked during remediation. As a result, systems may remain vulnerable, allowing attackers to stay on the network. 📡 Kaspersky Security Network telemetry shows exploitation attempts across Egypt, Jordan, Russia, Vietnam, and Zambia with targets in government, finance, manufacturing, forestry, and agriculture. Our solutions proactively detected and blocked ToolShell attacks before the vulnerabilities were publicly disclosed. 💡 To stay safe, promptly update any vulnerable software and protect all servers with a reliable solution capable of detecting vulnerability exploitation, even zero-day attacks. Thanks to its Behaviour Detection component, Kaspersky Next shields users from attempts to exploit these vulnerabilities. In this post, our GReAT experts explain why Microsoft’s original fix was easy to bypass and share real-world ToolShell attack insights. Read the full analysis: https://lnkd.in/dEsu7zw3 #Kaspersky #CyberSecurity #ToolShell #MicrosoftSharePoint

102

6 σχόλια

INTRODUCTION TO THE MODULES 📚 MODULE+: EMPOWERING CARRERS IN CYBERSECURITY. Empowering Careers in Cybersecurity” is a comprehensive, inclusive training designed to support individuals from all backgrounds in entering and advancing within the cybersecurity field. It guides participants in understanding the evolving cybersecurity landscape, mapping their transferable skills, identifying potential career pathways, and developing long-term strategies for career growth. It delivers highly actionable job-seeking strategies, including how to craft standout resumes and cover letters, optimise LinkedIn profiles for cybersecurity recruiters, master both cybersecurity interviews, and build an impactful personal brand and professional portfolio. Throughout, the training integrates a strong focus on diversity, equity, and inclusion, challenging assumptions, addressing bias in hiring, and offering tools and insights tailored for underrepresented and non-traditional candidates. Learners also gain access to practical resources: resume template, interview Q&A samples, webinars, and more. 👉 See you soon on the platform For more information about the project: https://lnkd.in/dpennwyu #cyberagent #cybereducation

130

3 σχόλια

💡 𝗧𝗵𝗶𝘀 𝗶𝘀 𝘄𝗵𝗮𝘁 𝗵𝗮𝗽𝗽𝗲𝗻𝘀 𝘄𝗵𝗲𝗻 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗯𝗿𝗲𝗮𝗸𝘀 𝗱𝗼𝘄𝗻… In cybersecurity (and any team effort), poor communication can lead to: 👉 Wasted time & duplicated work 👉 Critical alerts being missed 👉 Teams working against each other instead of together Strong communication = stronger defense. It’s not just about tools and processes — it’s about people staying aligned, sharing context, and working toward the same goal. Remember: Clear communication is the first line of security. 🔐 🔔 Follow Cyber Threat Intelligence ® for more cybersecurity tips! #CyberSecurity #Teamwork #Communication #SOC #InfoSec

112

7 σχόλια

Microsoft has released its September security updates. This included: • 81 vulnerabilities patched. • 0 vulnerabilities with evidence of exploitation. • 9 'Critical' rated. The ASD’s ACSC encourages all users to apply the available patch updates ASAP👉 https://lnkd.in/dHpTjmk8

91

1 σχόλιο

🚨 New CTI Labs: CVE-2025-53770 (ToolShell SharePoint RCE) 🚨 This critical zero-day vulnerability allows for a full, unauthenticated takeover of on-premise SharePoint servers and has already been added to the CISA KEV Catalog. With a public exploit now available, the threat is immediate. We've just launched two new CTI Labs giving teams hands-on experience with this exact threat from both sides of the attack. 🛡️ Defensive Lab: For System Admins, SOC Analysts, Incident Responders, and Threat Hunters to practice detection and response: https://hubs.ly/Q03yNqNm0 ⚔️ Offensive Lab: For Red Teamers, Penetration Testers, and Threat Hunters to understand and execute the exploit chain: https://hubs.ly/Q03yNq5w0 Prepare your teams for the real world. Get hands-on with CVE-2025-53770 today. #CTI #SharePointRCE #CVE

92

5 σχόλια

On July 18, CrowdStrike Falcon Complete and Adversary OverWatch identified and blocked a wave of exploitation attempts targeting two newly disclosed Microsoft SharePoint zero-day vulnerabilities — now known as ToolShell. 📌 Hundreds of exploit attempts have already been stopped by the Falcon platform. 🔧 Microsoft has released patches, but exploitation is ongoing in unpatched environments. Our latest blog breaks down the attack chain, how the Falcon platform detects and blocks it, and what defenders need to know to stay protected. Read the full post: https://lnkd.in/gzkX65SY

898

16 σχόλια

🔐 𝗦𝗜𝗘𝗠 𝘃𝘀 𝗦𝗢𝗔𝗥 𝘃𝘀 𝗫𝗗𝗥 – 𝗪𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗗𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝗰𝗲? 🔐 In cybersecurity, it’s essential to understand the tools protecting your organization: 🔹 SIEM: Collects and analyzes security data to identify threats. Great for monitoring and compliance. 🔹 SOAR: Automates security workflows and incident responses to speed up reaction times. 🔹 XDR: Provides a unified approach to detect and respond to threats across endpoints, networks, and cloud. Each offers unique capabilities for better security. Choose the right solution for your needs! 🔔 Follow e-Learn Cyber Security for more cybersecurity tips! #CyberSecurity #SIEM #SOAR #XDR #ThreatDetection #TechTrends

294

11 σχόλια

Advanced capability needs a clear path, not just a stack of tools. The TÜV SÜD Advanced Certificate in Cyber Security (ACCS) is a structured route to advanced responsibilities with hands-on labs and a credential that employers recognise. What it covers: ✔️ Network security, application security and cloud security, AI and data privacy ✔️ Incident and risk management, ISO 27001 auditing and implementation ✔️ Scenario exercises and simulations to turn theory into practice ✔️ Credit for selected industry certifications to accelerate progress Who should attend: 👩‍💻 Security and network administrators, developers, analysts 👩‍💻 IT risk and compliance professionals moving into advanced roles We are introducing ACCS career path at ‘Cyber Cred: Certify, Defend, Evolve – Empowering the Digital Future’ 24 Sep 2025 • Novotel Mumbai International Airport Details & registration: http://spkl.io/6049AuqCz #CyberSecurity #CareerGrowth #TUVSUD

39

Curious to see how identity threat protection works 𝘪𝘯 𝘢𝘤𝘵𝘪𝘰𝘯? Join Aryan Taheri, CEH and Daryl Romano for real-world demonstrations of how to mitigate identity threats 🛑 You'll walk away with knowledge on how to: 💣 Detect and respond to MFA bombing ⚠️ Identify brute-force attempts from compromised hosts 💪 Surface and respond to user brute force attacks Whether you're part of IAM or the SOC team, a security architect or leader, if you're looking to gain tips on how to shift from reactive containment to proactive identity threat mitigation, sign up now👉 https://lnkd.in/gyDgEV26 #SOC #ThreatDetection #MFA

23