TCG’s Post

Learning from past mistakes - one of the most crucial things we need to do in cybersecurity but also in most other aspects of life! The #crowdstrike outage was one of the largest IT-outages and this might be a good reason why we should analyze and learn from it. Here are two great articles about what happened and what can be done to prevent things like that in the future. https://lnkd.in/eH5KGW6M https://lnkd.in/e8CvRQQe

Finally, it is here! Secure access to any application, any resource, from wherever you are! Reduced complexity and increased security, what more could you ask for? Read the blog to see how you can play with a trial today. https://lnkd.in/eD7bdJ-4

A critical vulnerability, CVE-2024-3400: A command injection vulnerability in the Palo Alto GlobalProtect, has been discovered, posing a significant risk. For detailed insights, refer to this comprehensive article: https://lnkd.in/eT2erKDA Additionally, access a backdoor sample here: https://lnkd.in/eqwvgfvf (UPSTYLE Backdoor - update. py ) Gain further understanding and analytics, from Palo Alto's unit42 analysis + C2 server addresses, here: https://lnkd.in/ecHKzM8a Stay vigilant!!!!!!! #cybersecurty #cyberaware #cyberthreat #paloalto @zeroday

If your MSP is not patching, you are vulnerable. CorpInfoTech can help, we monitor 24/7. Remember, updating/patching is part of your cybersecurity plan. #patchtuesday #patchmanagement #managedserviceprovider #ManagedITservices https://lnkd.in/ezyFBhHQ

"One of the primary weaknesses remains open source software (OSS). It is attractive to attackers because it is used by everyone and is ubiquitous — and the log4j incident demonstrates its reach." Insights from our VP of Security Research Erez Yalon on the current state of #softwaresupplychain threats in a SecurityWeek article by Kevin Townsend https://lnkd.in/gM7P2qB7  #CheckmarxSecurity #opensourcesecurity #applicationsecurity

Navigating the Complexities of Computer Security: Safeguarding Your Digital World - https://lnkd.in/dqHVfJVH

Palo Alto Networks #vulnerability CVE2024-3400 is only exploitable when running PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 firewalls configured with GlobalProtect gateway or GlobalProtect portal (or both) and device where telemetry enabled. 🛡 #securityvulnerability #cybersecurity #technology #cyber https://lnkd.in/eW6BHRDz

🤯 Who is to blame but yourself? There is a lack of effective vulnerability and patch management processes. 🚒 A critical security flaw in Microsoft Defender SmartScreen, with an available patch since February 2024, is being exploited to deliver info-stealers like ACR Stealer, Lumma, and Meduza. The flaw is CVE-2024-21412, and it is rated 8.1. 😱 There was ample time for detection and remediation. However, cybersecurity teams and admins are still struggling with prioritization and patching all impacted assets faster or completely. #cybersecurity #security #defender #MSdefender #patching #vm #vulnerabilitymanagement #cve

The recent CrowdStrike update led to significant disruptions, with many companies experiencing complete operational downtime. This highlights the critical need for resilient and adaptable cybersecurity strategies that blend into business operations holistically. In our role as CISOs, it’s crucial to emphasize proactive threat detection, thorough patch management, and strong incident response protocols, but in a balance with the business. We must ensure our cybersecurity frameworks are robust enough to handle such unexpected challenges – we never know just how long these disruptions will last, or the ripple effects that occur. Our focus should always be on minimizing downtime and maintaining operational continuity for our organizations. #Cybersecurity #IncidentResponse #CISO #SystemResilience

The US government, through the Cybersecurity and Infrastructure Security Agency (CISA) and FBI, has called on software manufacturers to prioritize the eradication of operating system (OS) command injection vulnerabilities. This plea follows a series of significant threat actor campaigns in 2024 that capitalized on OS command injection flaws within network edge devices to infiltrate user systems. #Cybersecurity #CISA #FBI #SoftwareManufacturers #Vulnerabilities #CyberThreats https://lnkd.in/e9svpJ5T