Łukasz Zymer

📧 𝗛𝗼𝘄 𝗱𝗼𝗲𝘀 𝗗𝗠𝗔𝗥𝗖 𝘄𝗼𝗿𝗸? Email remains one of the most exploited attack vectors — from phishing to spoofing. That’s where DMARC (Domain-based Message Authentication, Reporting & Conformance) comes in. It builds on SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) to add a strong layer of trust and visibility. Here’s how it works: 1️⃣ Email is sent from the sender. 2️⃣ Mail server receives and evaluates the message. 3️⃣ SPF confirms if the sender is authorized. 4️⃣ DKIM validates the authenticity of the email signature. 5️⃣ If both checks pass → ✅ email goes to the inbox. ❌ If either fails → DMARC policy applies (quarantine, reject, or drop). 📊 Reports are sent to the domain owner for visibility & tuning. 💡 With DMARC, organizations gain not just protection against fraud, but also actionable insights into who’s using their domain. 👉 Question for you: Do you think companies are doing enough to enforce DMARC — or is email security still being underestimated? 🔔 Follow e-Learn Cyber Security for more cybersecurity tips! #CyberSecurity #EmailSecurity #Phishing #DMARC #InfoSec

329

14 komentarzy

✔️ Secure by design, secure by default. From procurement to patching, #NIS2 requires security across the full system lifecycle. 📘 #ENISA’s guide supports implementation of secure development practices, change control and vulnerability management. 🔗 https://lnkd.in/dBbj-Dfu

86

2 komentarze

NEW BLUE MODULE DROP 🔵 Threat Analysis Tools 🔎💻 Level up your SOC game! Learn how to harness threat intelligence to detect, investigate, and defend against adversaries. From enrichment techniques to hands-on analysis workflows—you’ll gain the skills to stay one step ahead. ⚡ Ready to sharpen your defences? 👉 Start the Threat Analysis Tools module now https://lnkd.in/dS9UWQeP

313

5 komentarzy

Microsoft has released its September security updates. This included: • 81 vulnerabilities patched. • 0 vulnerabilities with evidence of exploitation. • 9 'Critical' rated. The ASD’s ACSC encourages all users to apply the available patch updates ASAP👉 https://lnkd.in/dHpTjmk8

91

1 komentarz

🚨 New CTI Labs: CVE-2025-53770 (ToolShell SharePoint RCE) 🚨 This critical zero-day vulnerability allows for a full, unauthenticated takeover of on-premise SharePoint servers and has already been added to the CISA KEV Catalog. With a public exploit now available, the threat is immediate. We've just launched two new CTI Labs giving teams hands-on experience with this exact threat from both sides of the attack. 🛡️ Defensive Lab: For System Admins, SOC Analysts, Incident Responders, and Threat Hunters to practice detection and response: https://hubs.ly/Q03yNqNm0 ⚔️ Offensive Lab: For Red Teamers, Penetration Testers, and Threat Hunters to understand and execute the exploit chain: https://hubs.ly/Q03yNq5w0 Prepare your teams for the real world. Get hands-on with CVE-2025-53770 today. #CTI #SharePointRCE #CVE

92

5 komentarzy

🛡️ 𝗧𝗼𝗽 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗠𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴 𝗧𝗼𝗼𝗹𝘀 𝗬𝗼𝘂 𝗦𝗵𝗼𝘂𝗹𝗱 𝗞𝗻𝗼𝘄 Active Directory (AD) is at the core of identity and access management in most organizations. Keeping it secure and healthy is critical — but it requires the right monitoring tools. Here are some of the top AD monitoring solutions featured in the infographic 👇 1️⃣ Exploration & Auditing 🔎 Active Directory Explorer – Lightweight browsing & editing 📋 Netwrix Auditor – Auditing, reporting & compliance 🛡️ Lepide Active Directory Auditor – Tracks changes & ensures compliance 2️⃣ Performance & Health Monitoring ⚙️ SolarWinds Server & Application Monitor – Real-time performance insights 📊 Paessler PRTG Network Monitor – Comprehensive AD health checks ☁️ LogicMonitor – Cloud-based AD monitoring 3️⃣ Security & Threat Protection 🛡️ Semperis Directory Services Protector – Resilience & real-time protection 👤 SentinelOne Singularity for Identity – Identity threat detection 🔐 Varonis – Data security & deep analytics 4️⃣ Reporting & Management 🧰 Quest Active Administrator – All-in-one management & auditing 📑 Quest Enterprise Reporter – Detailed AD configuration & permissions visibility 📊 AD FastReporter & CJWDEV AD Info – Customizable reporting tools 🌐 ManageEngine ADManager Plus – Web-based AD management & reporting ⚡ AD Pro Toolkit – Pre-built reporting & automation 5️⃣ Cloud & Hybrid Monitoring ☁️ Site24x7 – Cloud-based AD monitoring with insights 🌍 Anturis Active Directory Monitor – Monitoring across mixed environments 🔄 Softerra Adaxes – Automation with advanced reporting 💡 Whether you’re focused on security, compliance, or performance, these tools can help strengthen and streamline your AD operations. 👉 Which Active Directory tool is your go-to, and why? 🔔 Follow Cyber Press ® for more cybersecurity tips! #CyberSecurity #ActiveDirectory #IdentityManagement #Infosec #MonitoringTools #Compliance #Security

79

6 komentarzy

CVE-2025-53770 (CVSS 9.8) and CVE-2025-53771 - also known as the SharePoint Zero Days - allow unauthenticated attackers to seize control of servers, steal cryptographic keys, and plant persistent backdoors. What started as 75 confirmed breaches has now grown to 400+ organizations worldwide, including major corporations and U.S. government agencies. If you run on-prem SharePoint, immediate mitigation is essential. 🔍 Explore key remediation strategies: https://xtra.li/4lPqP7L

37

1 komentarz

APIs are the backbone of modern software, enabling seamless communication between different systems. In the newly published #OWASP #APISecurity Top 10 (2023), critical vulnerabilities are highlighted that could jeopardize your applications. Key Highlights Include: - Broken Authentication - Unrestricted Resource Consumption - Server-Side Request Forgery (SSRF) https://lnkd.in/gDB6gZwb

29

1 komentarz

Microsoft is sharing details from ongoing investigations of threat actors exploiting vulnerabilities targeting internet-facing on-premises SharePoint servers. As of this writing, Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon, exploiting these vulnerabilities. In addition, we have observed another China-based threat actor, tracked as Storm-2603, using the exploits. https://msft.it/6044sE1ua Microsoft has released new comprehensive security updates for all supported versions of SharePoint Server (Subscription Edition, 2019, and 2016) that protect customers against these new vulnerabilities. Microsoft assesses that threat actors will continue to integrate the exploits into their attacks against unpatched on-premises SharePoint systems. Customers should apply these updates immediately to ensure they are protected: https://msft.it/6045sE1ux Read our blog to get TTPs, IOCs, and protection, detection, and hunting guidance:

283

4 komentarze

Advanced capability needs a clear path, not just a stack of tools. The TÜV SÜD Advanced Certificate in Cyber Security (ACCS) is a structured route to advanced responsibilities with hands-on labs and a credential that employers recognise. What it covers: ✔️ Network security, application security and cloud security, AI and data privacy ✔️ Incident and risk management, ISO 27001 auditing and implementation ✔️ Scenario exercises and simulations to turn theory into practice ✔️ Credit for selected industry certifications to accelerate progress Who should attend: 👩‍💻 Security and network administrators, developers, analysts 👩‍💻 IT risk and compliance professionals moving into advanced roles We are introducing ACCS career path at ‘Cyber Cred: Certify, Defend, Evolve – Empowering the Digital Future’ 24 Sep 2025 • Novotel Mumbai International Airport Details & registration: http://spkl.io/6049AuqCz #CyberSecurity #CareerGrowth #TUVSUD

39