Windham Wong

🔍 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗔𝘄𝗮𝗿𝗲𝗻𝗲𝘀𝘀: 𝗖𝗮𝗻 𝘆𝗼𝘂 𝘀𝗽𝗼𝘁 𝘁𝗵𝗲 𝗱𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝗯𝗲𝘁𝘄𝗲𝗲𝗻 𝘁𝗵𝗲𝘀𝗲 𝘁𝘄𝗼 𝗨𝗥𝗟𝘀? ✅ maybank2u.com ❌ maybank2u.com (looks identical, right?) This is a real phishing trick using homoglyph attacks — replacing characters with lookalike letters from other alphabets like Cyrillic, making malicious links seem legitimate. 💡 𝗘𝘅𝗮𝗺𝗽𝗹𝗲: The letter “а” (Cyrillic) looks like “a” (Latin), but it leads to a completely different domain. 🔐 𝗪𝗵𝘆 𝗶𝘁 𝗺𝗮𝘁𝘁𝗲𝗿𝘀: Many users unknowingly click these links in emails or texts, giving hackers access to sensitive info like banking credentials or personal data. 🛡️ 𝗛𝗼𝘄 𝘁𝗼 𝘀𝘁𝗮𝘆 𝘀𝗮𝗳𝗲: • Never click suspicious or unexpected links. • Always manually type trusted URLs. • Use browser extensions that detect homograph attacks. • Hover over links to preview real destinations. • Enable 2FA where possible. 👁️‍🗨️ 𝗜𝗳 𝗶𝘁 𝗹𝗼𝗼𝗸𝘀 𝘀𝘂𝘀𝗽𝗶𝗰𝗶𝗼𝘂𝘀, 𝗶𝘁 𝗽𝗿𝗼𝗯𝗮𝗯𝗹𝘆 𝗶𝘀. Let’s help our network stay cyber-aware. Share this with someone who needs to see it. 🧠💻 #CyberSecurity #PhishingAwareness #SocialEngineering #InfoSec #CyberAwareness #LinkedInLearning #StaySafeOnline #EmailSecurity For More Security Updates, Follow: Kaaviya Balaji

4,056

170 Comments

Dependency-Track enables security teams to continuously monitor and analyze Software Bill of Materials (SBOMs) to detect vulnerable dependencies before they are deployed to production. Integrating Dependency-Track with Wazuh provides visibility into software supply chain risks. Centralizing software supply chain vulnerability data within your SOC workflows helps organizations detect and respond to potential risks within application dependencies. Our new blog post, Integrating Dependency-Track with Wazuh, demonstrates how to integrate Dependency-Track with Wazuh to enhance software supply chain security. Read more: https://ow.ly/B3lO50WuyRJ, #InformationSecurity #CyberSecurity #OpenSource

173

2 Comments

𝗧𝗼𝗽 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 𝘁𝗼 𝗟𝗲𝘃𝗲𝗹 𝗨𝗽 𝗬𝗼𝘂𝗿 𝗖𝗮𝗿𝗲𝗲𝗿 𝗶𝗻 𝟮𝟬𝟮𝟱 🔐 Whether you're defending systems (Blue Team), attacking them to make them stronger (Red Team), or leading strategy, there’s a certification path for you: 1️⃣ Blue Team (Defensive Security) – Security+, CySA+, GCFA, GCIH 2️⃣ Red Team (Offensive Security) – eJPT, OSCP, OSEP, OSEE 3️⃣ Leadership – CISM, CISA, CISSP, CGEIT Pro Tip: Start with foundational certs, then specialize in Red, Blue, or Leadership tracks based on your career goals. Which track are you on – Blue, Red, or Leadership? 🔔 Follow e-Learn Cyber Security for more cybersecurity tips! #CyberSecurity #Certifications #BlueTeam #RedTeam #InfoSec #CareerGrowth

748

23 Comments

💥 Certified Malware Analysis Beginners (CMAB) is live! Whether you're just getting started in malware analysis, want to understand how modern threats behave, or are preparing to dive into reverse engineering — CMAB is your gateway into the world of malware dissection. 🔬 Why CMAB? This hands-on certification teaches you how to analyze real-world malware samples using professional tools in a safe lab environment. You’ll go from static inspection to behavioral analysis — uncovering hidden payloads, persistence techniques, network indicators, and more. 🧪 What You'll Learn ✅ Analyze malicious PDFs and EXEs ✅ Reverse Android APKs and detect mobile threats ✅ Monitor malware behavior in real time ✅ Identify indicators of compromise (IOCs) ✅ Use industry-grade tools for memory and file system analysis 🎯 Pass Score: 75% 🔐 Designed For: Aspiring malware analysts, SOC analysts, security researchers To pass the Certified Malware Analysis Beginners (CMAB) exam, you should understand Windows OS internals (processes, registry, filesystem), be familiar with malware categories and threat behaviors, and know how to use core tools like Procmon, Autoruns, Regshot, PE-bear, x64dbg, FLOSS, APKTool, JADX, and MobSF. You must be able to safely analyze PDF and EXE malware, reverse Android APKs, detect persistence and IOCs, and perform both static and behavioral analysis inside an isolated lab using VirtualBox or VMware. Basic command-line skills in both Windows and Linux are also essential. Interested? I'm releasing a coupon limited to 300 people so you can try the test! Link: https://lnkd.in/dKHTe8PK Coupon: CMAB100OFF #malwareanalysis #cmab #redteam #cybersecurity #blueteam #incidentresponse

452

100 Comments

⚠️ FREE Challenge: AI-powered ransomware PromptLock, the first AI-powered ransomware. It uses a local AI model to create cross-platform malicious scripts in real time, autonomously targeting and encrypting data. 🛠️ Type: Malware Analysis 👤 Role: Security Analyst 💪 Difficulty: Medium

76

🚨 New CTI Lab: CVE-2025-9074 (Docker Container Escape) 🚨 Pvotal Technologies reported a critical Docker Desktop vulnerability (CVE-2025-9074, CVSS 9.3) that exposes the Docker Engine API without authentication. Organizations that depend on containerization in their development teams face serious risks, including compromised developer workstations and an increased possibility of supply chain attacks. 🛡️ We've just launched a new defensive lab covering this vulnerability, giving your teams hands-on experience to detect, defend against, and mitigate this critical vulnerability. 👉 Designed for System Administrators, Developers, SOC Analysts, Incident Responders, and Threat Hunters to practice real-world detection and response. Read more about this vulnerability and, if you’re an Immersive customer, give this lab a go now here: https://hubs.ly/Q03G0-K50 ⚡ Strengthen your teams defenses. Get hands-on with CVE-2025-9074 today. #CTI #CyberSecurity #CyberDefense

49

APIs are the backbone of modern software, enabling seamless communication between different systems. In the newly published #OWASP #APISecurity Top 10 (2023), critical vulnerabilities are highlighted that could jeopardize your applications. Key Highlights Include: - Broken Authentication - Unrestricted Resource Consumption - Server-Side Request Forgery (SSRF) https://lnkd.in/gDB6gZwb

29

1 Comment

⚠️ CISA has issued Emergency Directive 25-03, ordering U.S. federal agencies to patch two Cisco ASA/FTD zero-days (CVE-2025-20333 & CVE-2025-20362) exploited in widespread attacks. 🛡️ Agencies must disconnect compromised or end-of-support devices and patch all others by September 26, with exploitation linked to the ArcaneDoor campaign. ➡️ https://lnkd.in/eC8gyseY #cybersecurity #cisco #zeroday

66

🚨 New Release: SOC Analyst Study Notes Part 3: Threat Hunting Threat hunting is a necessity. Part 3 of our SOC Analyst Study Notes dives deep into how modern SOCs proactively identify stealthy threats using tools like MITRE ATT&CK, Sigma, Velociraptor, OSQuery, Splunk, Zeek, YARA, and more. Whether you’re an L1 analyst or a detection engineer, this guide walks through: 💡Structured, unstructured, and entity-driven hunting 💡Building testable hypotheses 💡Use case workflows (APT malware, insider exfiltration) 💡Toolkits across cloud, endpoint, OT 💡Threat hunting metrics & HMM model Designed to help cyber professionals hunt smarter across enterprise, cloud, and ICS environments. 🧠 Built using practical insights from: MITRE ATT&CK | YARA | SigmaHQ | ZEEK | OSQuery |Velociraptor DFIR | Elastic | Splunk | Microsoft Sentinel | Amazon Web Services (AWS) GuardDuty | Dragos | Claroty | MISP | Cortex XSOAR | and more. #SOC #ThreatHunting #Cybersecurity #MITREATTACK #SOCAnalyst #EDR #SIEM #YARA #SigmaRules #CyberOps #Infosec #BlueTeam #DetectionEngineering #SecurityAnalytics #CyberThreats #IncidentResponse #Zeek #OSQuery #Velociraptor #Splunk #Elastic #OTSecurity

35

2 Comments

🔐 𝗜𝗔𝗠 𝘃𝘀 𝗣𝗔𝗠: 𝗞𝗲𝘆 𝗗𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝗰𝗲𝘀 🔐 1️⃣ IAM (Identity & Access Management): Manages who can access what (e.g., email, apps) for all users (employees, customers, vendors). 🛠️ Tools: Okta, Azure AD, ForgeRock. 2️⃣ PAM (Privileged Access Management): Controls access to sensitive systems (e.g., servers, databases) for privileged users. 🛠️ Tools: CyberArk, BeyondTrust, HashiCorp. 3️⃣ IAM = General access | PAM = Admin-level access Which is more relevant to your organization? Let me know! 👇 🔔 Follow Tech Talks for expert tips and updates on top tech courses like Cybersecurity, BigData, DevOps, AI, ML, Development, Testing, Marketing & more! #Cybersecurity #IAM #PAM #TechTrends #AccessManagement #Security

1,178

31 Comments