@Hart_Jason

Double award winning Cyber Security Expert, Visionary in the World of Cyber Security and a Forbes Technology Council Member #Cyber_Security #Disruption

 Bristol, England UK
jasonhart.co.uk
Joined July 2009
  • Tweets2.5K
  • Following1K
  • Followers6.7K
742Media
I recently had a great chat with @stiennon on Scaling Cybersecurity into a Business Process - check the podcast out: em360tech.com/podcast/rapid7…
1
3
1,140
🎉 Announcement! I've just signed with @WileyGlobal to publish my upcoming book. This book demystifies complex concepts and guides businesses in transforming security strategies into real-world solutions. Thanks to @stiennon and @jimminatel for their incredible support.
1
1
5
312
My recent poll on LinkedIn is very telling - The lack of Cyber Effectiveness is scary. Read more here: linkedin.com/posts/hartjason…
1
220
Aligning The SOC As A Cost Of Doing Business hubs.li/Q02crfZJ0 Written by @Hart_Jason of @rapid7
1
1
238
After delving into Dan Sullivan's insightful "The Gap and the Gain," I'm eager to explore how its principles, with a unique twist, can profoundly influence our approach to operationalising cybersecurity for enhanced effectiveness. linkedin.com/posts/hartjason…
224
Jason Hart retweeted
Raj Samani@Raj_Samani3 Oct 2023
We have now posted our @rapid7 analysis into CVE-2023-40044, a .NET deserialization vulnerability affecting the Ad Hoc Transfer module of WS_FTP Server. Now available on @AttackerKb - H/T @stephenfewer attackerkb.com/topics/bn32f9… #infosec #cybersecurity

Rapid7 Analysis: CVE-2023-40044

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the...

rapid7.com
4
4
906
Jason Hart retweeted
Raj Samani@Raj_Samani5 Oct 2023
Our latest @rapid7 analysis details CVE-2023-22515, "a critical privilege escalation vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center" more details here: rapid7.com/blog/post/2023/10… #infosec #cybersecurity

CVE: Zero-Day Privilege Escalation in Confluence Server & Data Center | Rapid7 Blog

On 10/4/2023, Atlassian published a security advisory on CVE-2023-22515, a privilege escalation vulnerability affecting Confluence Server & Data Center.

rapid7.com
2
1
858
🚨 Security Alert 🚨 CVE-2023-42793 is a critical authentication bypass in JetBrains TeamCity CI/CD servers. Stay vigilant and update your systems ASAP! Read more: rapid7.com/blog/post/2023/09… #CyberSecurity #InfoSec #CVE2023 #TeamCity #Rapid7
222
How To Cultivate A Thriving Security Culture hubs.li/Q022ClLm0 Written by @Hart_Jason of @rapid7
1
1
172
"🔒 Building a strong security culture is crucial in today's digital landscape. Check out my lastest Forbes article on how to cultivate a thriving security culture for your organization! 💼💻 #Cybersecurity #SecurityCulture #TechTrends Read more: forbes.com/sites/forbestechc…
1
111
What do you do when you notice the Anti-Virus license has expired on the car wash that you are about to use ??#carwash_with_expired_AV
114
In February 2023, a well-known initial access broker called “Bassterlord” was observed in XSS forums selling a guide on breaking into corporate networks. The guide, which included chapters on SSL VPN brute forcing, was being sold for $10,000 USD.
1
337
When several other forums started leaking information from the guide, Bassterlord posted on Twitter about shifting to a content rental model rather than selling the guide wholesale.
1
208
Rapid7 obtained a leaked copy of the manual and analyzed its content. Notably, the author claimed they had compromised 4,865 Cisco SSL VPN services and 9,870 Fortinet VPN services with the username/password combination test:test
1
1
488
Anonymised log entry where an attacker attempts a (failed) login to the ASA SSL VPN service. The analysis of log files across different incident response cases, frequently observed failed login attempts occurring within milliseconds of one another, pointing at automated attacks
Read the full blog here: https://www.rapid7.com/blog/post/2023/08/29/under-siege-rapid7-observed-exploitation-of-cisco-asa-ssl-vpns/

ALT Read the full blog here: https://www.rapid7.com/blog/post/2023/08/29/under-siege-rapid7-observed-exploitation-of-cisco-asa-ssl-vpns/

114
Today, I bring to your attention a compelling case that underscores the critical need for Operationalising Cybersecurity 🚀. The recent findings from @Rapid7's Managed Detection and Response (MDR) teams provide a poignant example. rapid7.com/blog/post/2023/08…

Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs | Rapid7 Blog

Rapid7’s managed detection and response (MDR) teams have observed increased threat activity targeting Cisco ASA SSL VPN appliances (physical and virtual) dating back to at least March 2023, including...

rapid7.com
107
Jason Hart retweeted
Rapid7@rapid713 Jul 2023
We're pleased to share that Rapid7 CTO @Hart_Jason helped to secure @EM360Tech's Most Popular Podcast of Q2, 2023! See why it reached breaking numbers with the EM360 audience here: r-7.co/3OlHZfb
2
3
1,669
Jason Hart retweeted
Raj Samani@Raj_Samani3 Aug 2023
Our latest @rapid7 analysis details CVE-2023-35082, a new vulnerability that allows unauthenticated attackers to access the API in older unsupported versions of MobileIron Core (11.2 and below). rapid7.com/blog/post/2023/08… #infosec #cybersecurity H/T @stephenfewer
3
6
935
🚨💻 Exciting news! Check out my latest Forbes article on "Maximizing Cybersecurity Impact with Protection Level Agreements" 🔒🔥 Learn how Protection Level Agreements (PLAs) can bolster your Cybersecurity defenses and reduce risks. Read it here hubs.li/Q01ZMpDN0
1
1
77
Available on @AttackerKb is our analysis detailing CVE-2023-20887 an unauthenticated command injection vulnerability in VMware Aria Operations for Networks. Details/IoCs here: attackerkb.com/topics/gxz1cU… #infosec #cybersecurity
4
2
772
Our new @rapid7 advisory details three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway. Note: CVE-2023-3519 is known to be exploited in the wild. rapid7.com/blog/post/2023/07… #infosec #cybersecurity
2
1
2
1,301
Load more