#Cybersecurity | NE Minneapolis resident
Minneapolis, MN
Joined March 2013
- Tweets772
- Following1.8K
- Followers624
- Likes61
Total compromise of Barracuda CVE-2023-2868. Advisory is to replace physical devices, irrespective of firmware version or patch level!
#cve #vulnerability #vulnerabilitymanagement lnkd.in/g7FFhGKB
A recent #ransomware #cyberattack on Minneapolis Public Schools has left many of my local friend's and colleagues on edge. Personal Identifiable Information (#pii ) data of both students and staff have been posted on the #darkweb.…lnkd.in/gdsQWiAC lnkd.in/gTbK5vRf
Rapid7's new acquisition will be a huge value add to our customers, delivering #ransomware protection into the fold of an already impressive #cyberdefense portfolio.
#MDR #appsec #cloud #vulnerabilitymanagement #threatintelligence #siem lnkd.in/ghtw4R34
Project Sonar, one of Rapid7's research arm's has found that a significant number of ESXi servers are still vulnerable to CVE-2021-21974. Deny Server access, Patch, Develop a patch cadence, & Back up your VM's. lnkd.in/ggFP6XsW
Customer first approach from the Rapid7 team. Always focusing on #researchanddevelopment and pushing the needle for our customers' to stay ahead of #threatactors .
#threatintelligence #threatprotection lnkd.in/gj6tkriV
There have been an increase in Microsoft Exchange server compromises. A chaining of CVE-2022-41080 and CVE-2022-41082 are being compromised by threat actors to bypass URL rewrite mitigations. These unpatched, on-prem versions of Ex…lnkd.in/gyHKhpn5 lnkd.in/gE-PB2Eb
"Organizations that are running an affected version of OpenSSL should update to 3.0.7 when practical, prioritizing operating system-level updates and public-facing shared services with direct dependencies on OpenSSL. Emergency patching is not indicated." lnkd.in/giNfPH-K
Remediate - FortiOS/FortiProxy versions 7.0.7 and 7.2.2 fix this #vulnerability. We recommend upgrading to the latest versions of affected software immediately. lnkd.in/gsAYi8RW
Microsoft has confirmed two zero-day vulnerabilities in Microsoft Exchange Server. CVE-2022-41040 and CVE-2022-41082 are unpatched and being used in “limited, targeted attacks.” lnkd.in/gRTkVu25
This is very cool - Take a test drive of the newest version of Velociraptor DFIR. What is Velociraptor? Velociraptor was developed for #digitalforensics and incident response (#dfir) professionals who need a powerful and efficient way to hunt for and moni…lnkd.in/gDU5Xhyi
Looking forward to next weeks Beers with Engineers. Join us Wednesday August 24th from 3pm to 6pm at FAT PANTS BREWING in Eden Prairie. This event brings local Minnesota #infosec professionals together to have a beer or two and enjoy the conversation. lnkd.in/gKZmF8D7
Have you ever heard of the term 'Onionland'? What do you know about the #darkweb, or #deepweb ? If you ask (many) people, they generally have no idea what you are talking about. Below you will find a high level overview.
A small portion of the internet…lnkd.in/gjs5Vs9z
Rapid7 has discovered a vulnerability with Zyxel firewalls. If you have the following models, USG FLEX 100, 100W, 200, 500, 700USG20-VPN, USG20W-VPNATP 100, 200, 500, 700, 800VPN 50, 100, 300, 1000. Patch CVE-2022-30525 & remove th…lnkd.in/gxNVhHNN lnkd.in/g6fckTEg
No rest for the wicked. Raspberry Robin Malware infecting removable USB drives. Searching for fodhelper.exe on the drive can help determine the threat. lnkd.in/gazjHup3
Ready to say goodbye to alert fatigue? We hear you – and InsightIDR, Rapid7's #XDR and #SIEM solution, is here to help. Check out a few key features and learn more here: r-7.co/3QC4co6 lnkd.in/g8quf6MV
#cloud spend can add up - curb your spend with these tips:
1. If you have multiple instances, look into the volumes to identify if they are actually attached.
2. Check your load balancers and make sure they are attached to an in…lnkd.in/gqTifjFp lnkd.in/gSN596S7
Threat intelligence reduces the likelihood organizations succumb to major #breaches or regulatory fines. Is your #cybersecurity team monitoring your external attack surface for:
#phishing #domains?
#leaked #credentials?
#hacking c…lnkd.in/gQPdrv-y lnkd.in/gpepHJTu
Ever heard of #spring4shell or #log4j? If you are in #cybersecurity you have. These vulnerabilities, and ultimately attacks occur at the Application level. Is your #applicationsecurity up to snuff? lnkd.in/gJUCiEWC