Ruhr Security

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 17, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities mainly on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐏𝐇𝐏 | Buffer Overflow Vulnerability in GlibC Leading to Denial of Service and Arbitrary Code Execution, Affecting PHP When Translating Request Encodings To/From Certain Charsets, Unauthenticated Remote Attack | CVE-2024-2961 | https://lnkd.in/ge3fH4kN, https://lnkd.in/eAqxgJ8v, PoC: https://lnkd.in/eTeZ9bsZ 2. 𝐂𝐫𝐮𝐬𝐡𝐅𝐓𝐏 | Server Side Template Injection Vulnerability Leading to Remote Code Execution, Unauthenticated Remote Attack | CVE-2024-4040 | https://lnkd.in/d8BV2Kqm, https://lnkd.in/gDxwaC5T, PoC: https://lnkd.in/eNpHWc3b 3. 𝐒𝐢𝐞𝐦𝐞𝐧𝐬 𝐑𝐮𝐠𝐠𝐞𝐝𝐜𝐨𝐦 𝐀𝐏𝐄1808 | Command Injection Vulnerability in Palo Alto PAN Virtual NGFW Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-3400 | https://lnkd.in/gCEaFprm, https://lnkd.in/esUhXn5R, PoC: https://lnkd.in/e4VP6Vpy 4. 𝐖𝐨𝐫𝐝𝐩𝐫𝐞𝐬𝐬 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐜 𝐏𝐥𝐮𝐠𝐢𝐧 | SQL Injection Vulnerability Leading to Privilege Escalation and Account Takeover, Unauthenticated Remote Attack | CVE-2024-27956 | https://lnkd.in/gZmfvtMD, https://lnkd.in/eNUKaMrC 5. 𝐂𝐢𝐬𝐜𝐨 𝐀𝐒𝐀 𝐚𝐧𝐝 𝐅𝐓𝐃 | Improper File Validation Leading to Arbitrary Code Execution, Local Attack | CVE-2024-20359 | https://lnkd.in/diiv4QCE, https://lnkd.in/eDmXJ7q5, https://lnkd.in/ekcp9Shb #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 16, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities mainly on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐏𝐚𝐥𝐨 𝐀𝐥𝐭𝐨 𝐍𝐞𝐭𝐰𝐨𝐫𝐤𝐬 𝐏𝐀𝐍-𝐎𝐒 | Command Injection Vulnerability Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-3400 | https://lnkd.in/dNyHExrv, https://lnkd.in/guAqmSPE, PoC: https://lnkd.in/e4VP6Vpy 2. 𝐎𝐩𝐞𝐧𝐌𝐞𝐭𝐚𝐝𝐚𝐭𝐚 | Multiple Vulnerabilities Including Improper URL Validation, Authentication Bypass, and Expression Language Injection Leading to Remote Code Execution and Lateral Movement on Kubernetes Clusters, Unauthenticated Remote Attack | CVE-2024-28255, CVE-2024-28847, CVE-2024-28253, CVE-2024-28848, CVE-2024-28254 | https://lnkd.in/exNEttXb, https://lnkd.in/gVK9XU_y, PoC: https://lnkd.in/ehMWJmrx 3. 𝐂𝐢𝐬𝐜𝐨 𝐈𝐧𝐭𝐞𝐠𝐫𝐚𝐭𝐞𝐝 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐥𝐞𝐫 𝐖𝐞𝐛 𝐔𝐈 | Improper Input Validation Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-20356 | https://lnkd.in/eMiskGBn, https://lnkd.in/e2vsvgkJ, PoC: https://lnkd.in/eNxzKZJf 4. 𝐎𝐫𝐚𝐜𝐥𝐞 𝐖𝐞𝐛𝐋𝐨𝐠𝐢𝐜 | Protocol Vulnerabilities in T3/IIOP Leading to Sensitive Information Disclosure, Unauthenticated Remote Attack | CVE-2024-21006 | https://lnkd.in/eUNCm2Nq, https://lnkd.in/dYm8tY6j 5. 𝐒𝐩𝐫𝐢𝐧𝐠 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 | Improper URL Validation in UriComponentsBuilder Leading to Open Redirect and Server-Side Request Forgery Attacks, Remote Attack | CVE-2024-22262 | https://lnkd.in/eK3f-ZHn #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 15, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities mainly on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐏𝐚𝐥𝐨 𝐀𝐥𝐭𝐨 𝐍𝐞𝐭𝐰𝐨𝐫𝐤𝐬 𝐏𝐀𝐍-𝐎𝐒 | Command Injection Vulnerability Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-3400 | https://lnkd.in/dNyHExrv, https://lnkd.in/guAqmSPE 2. 𝐏𝐨𝐬𝐭𝐠𝐫𝐞𝐒𝐐𝐋 𝐩𝐠𝐀𝐝𝐦𝐢𝐧 | Improper Path Validation Leading to Remote Code Execution, Unauthenticated Remote Attack | CVE-2024-3116 | https://lnkd.in/ddGR8d_d, PoC: https://lnkd.in/eNWWDiSt 3. 𝐃-𝐋𝐢𝐧𝐤 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐀𝐭𝐭𝐚𝐜𝐡𝐞𝐝 𝐒𝐭𝐨𝐫𝐚𝐠𝐞 | Hard-Coded Credentials and Command Injection Vulnerability Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-3272, CVE-2024-3273 | https://lnkd.in/gXaZreFp, https://lnkd.in/dcpzEcBm, PoC1: https://lnkd.in/e5P4M3_C, Poc2: https://lnkd.in/efwyPJde 4. 𝐀𝐝𝐨𝐛𝐞 𝐂𝐨𝐦𝐦𝐞𝐫𝐜𝐞 𝐚𝐧𝐝 𝐌𝐚𝐠𝐞𝐧𝐭𝐨 𝐎𝐩𝐞𝐧 𝐒𝐨𝐮𝐫𝐜𝐞 | Improper Input Sanitization Leading to Arbitrary Code Execution, Authenticated Remote Attack | CVE-2024-20720 | https://lnkd.in/gtM9VAEt, https://lnkd.in/eq-teqS2 5. 𝐑𝐮𝐬𝐭 𝐒𝐭𝐚𝐧𝐝𝐚𝐫𝐝 𝐋𝐢𝐛𝐫𝐚𝐫𝐲 | Improper Argument Validation Leading to Remote Code Execution on Windows, Unauthenticated Remote Attack | CVE-2024-24576 | https://lnkd.in/etxnudQY, https://lnkd.in/gVT5Arxr, PoC: https://lnkd.in/eMiAY4Fi #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 14, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities mainly on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐗𝐙 𝐔𝐭𝐢𝐥𝐬 | Malicious Code in Upstream Library Tarballs Leading to SSHD Authentication Bypass, Unauthenticated Remote Attack | CVE-2024-3094 | https://lnkd.in/dbRpu-EX, PoC: https://lnkd.in/dzP5-cXa 2. 𝐆𝐫𝐚𝐟𝐚𝐧𝐚 | Broken Object Level Authorization Vulnerability Allowing Low-Privileged Users to Compromise Data Integrity, e.g., Deleting a Snapshot in a Different Organization, Remote Attack | CVE-2024-1313 | https://lnkd.in/dgzeZ2mm | PoC: https://lnkd.in/dtST-ZFG 3. 𝐀𝐩𝐚𝐜𝐡𝐞 𝐂𝐥𝐨𝐮𝐝𝐒𝐭𝐚𝐜𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐒𝐞𝐫𝐯𝐞𝐫 | Multiple Vulnerabilities, When Chained, Leading to Authentication Bypass, Sensitive Information Disclosure, and Privilege Escalation, Unauthenticated Remote Attack | CVE-2024-29006, CVE-2024-29007, CVE-2024-29008 | https://lnkd.in/dP5T93EJ, https://lnkd.in/dv-vVEt5 4. 𝐅𝐨𝐫𝐭𝐢𝐧𝐞𝐭 𝐖𝐢𝐫𝐞𝐥𝐞𝐬𝐬 𝐋𝐀𝐍 𝐌𝐚𝐧𝐚𝐠𝐞𝐫 | Improper Input Validation Leading to Remote Code Execution, Unauthenticated Remote Attack | https://lnkd.in/dQaGiCfe, https://lnkd.in/d3-nVD9s, PoC: https://lnkd.in/dB_uUzFK 5. 𝐈𝐯𝐚𝐧𝐭𝐢 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐒𝐞𝐜𝐮𝐫𝐞 𝐚𝐧𝐝 𝐏𝐨𝐥𝐢𝐜𝐲 𝐒𝐞𝐜𝐮𝐫𝐞 | Multiple Vulnerabilities Including Heap Overflow, Null Pointer Dereference, and XML Entity Expansion Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-21894, CVE-2024-22052, CVE-2024-22053, CVE-2024-22023 | https://lnkd.in/ddxpHxpC, https://lnkd.in/ggrP5K2G #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

𝐔𝐧𝐩𝐚𝐭𝐜𝐡𝐞𝐝 𝐡𝐚𝐜𝐤𝐞𝐫-𝐫𝐞𝐥𝐞𝐯𝐚𝐧𝐭 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬: 𝐓𝐡𝐞 𝐦𝐨𝐬𝐭 𝐛𝐫𝐮𝐭𝐚𝐥 𝐫𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 𝐚𝐭𝐭𝐚𝐜𝐤 𝐯𝐞𝐜𝐭𝐨𝐫 𝐚𝐜𝐜𝐨𝐫𝐝𝐢𝐧𝐠 𝐭𝐨 𝐒𝐨𝐩𝐡𝐨𝐬. Based on the experiences of 2,974 organizations hit by ransomware in the last year, attacks exploiting unpatched hacker-relevant vulnerabilities are particularly brutal for their victims [1], e.g., 4X higher overall attack recovery costs ($3M vs. $750k for compromised credentials) Slower recovery time (45% took more than a month vs. 37% for compromised credentials) The proportion of ransomware attacks that began with an exploited vulnerability varies considerably by industry:     Highest: energy, oil/gas, and utilities – 49% of attacks Lowest: construction and property – 21% of attacks 𝐖𝐡𝐚𝐭 𝐜𝐚𝐧 𝐨𝐧𝐞 𝐝𝐨? Check attack surface management (https://lnkd.in/eJt57Knc)! or reach out to Abhilash H. 😊 #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement [1] https://lnkd.in/ex7UX7PN

📢 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐁𝐫𝐞𝐚𝐜𝐡 𝐨𝐟 𝐭𝐡𝐞 𝐌𝐨𝐧𝐭𝐡 𝐕𝐢𝐜𝐭𝐢𝐦: 𝐔.𝐒. 𝐂𝐲𝐛𝐞𝐫 𝐃𝐞𝐟𝐞𝐧𝐬𝐞 𝐀𝐠𝐞𝐧𝐜𝐲 March, 2024 83% of security breaches involved external actors, according to Verizon 2023 Data Breach Investigations report (https://lnkd.in/d5fbvWT). The three primary ways in which attackers accessed an organization are exploitation of vulnerabilities, stolen or default credentials, and social engineering. In our weekly top 5 hacker-relevant vulnerabilities (https://lnkd.in/ehT46MMy), we have been reporting on vulnerabilities, which are pertinent to threat actors. In this ongoing series (https://lnkd.in/eNedvmCJ), we will provide monthly updates on selected security breaches associated with the reported vulnerabilities. 𝐀𝐟𝐟𝐞𝐜𝐭𝐞𝐝 𝐔𝐧𝐢𝐭: CISA, the Cybersecurity and Infrastructure Security Agency, which is a component of the United States Department of Homeland Security responsible for cybersecurity and infrastructure protection across all levels of government, coordinating cybersecurity programs with U.S. states, and improving the government's cybersecurity protections against private and nation-state hackers 𝐈𝐦𝐩𝐚𝐜𝐭: Access to critical information about the interdependency of U.S. infrastructure, and the chemical security assessment tool, which houses private sector chemical security plans 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲: Ivanti Connect Secure and Policy Secure Gateway | Authentication Bypass and Command Injection Vulnerabilities Leading to Remote Code Execution, Unauthenticated Remote Attack | CVE-2023-46805, CVE-2024-21887, CVE-2024-21893 | First appearance on our top 5 hacker-relevant vulnerabilities list in week 2, January 2024 𝐑𝐞𝐟𝐞𝐫𝐞𝐧𝐜𝐞: https://lnkd.in/ehDQgNE3 #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

xz-utils Backdoor: Supply Chain Compromise Affecting xz-utils Data Compression Library Versions 5.6.0 or 5.6.1, CVE-2024-3094... xz-utils is data compression software and may be present in Linux distributions. The malicious code may allow unauthorized access to affected systems. CISA recommends developers and users to downgrade xz-utils to an uncompromised version, such as xz-utils 5.4.6 Stable. Incomplete analysis of the vulnerability suggests that it targets a specific RSA function used in sshd! Check your version with  xz --version

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 13, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities mainly on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐀𝐝𝐨𝐛𝐞 𝐂𝐨𝐥𝐝𝐅𝐮𝐬𝐢𝐨𝐧 | Improper Access Control Vulnerability Leading to Arbitrary File System Read and Write, Unauthenticated Remote Attack | CVE-2024-20767 | https://lnkd.in/dzC-uyVN, https://lnkd.in/eN8FtVw3, PoC: https://lnkd.in/eWFsU4Ef 2. 𝐀𝐒𝐏 .𝐍𝐄𝐓 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 | Deserialization Vulnerability Caused by Internal Object URI Leak Leading to Remote Code Execution, Unauthenticated Remote Attack | CVE-2024-29059 | https://lnkd.in/dMEWDcZv, PoC: https://lnkd.in/dyMFdifU 3. 𝐅𝐨𝐫𝐭𝐢𝐧𝐞𝐭 𝐅𝐨𝐫𝐭𝐢𝐂𝐥𝐢𝐞𝐧𝐭 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐒𝐞𝐫𝐯𝐞𝐫 | SQL Injection Vulnerability Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2023-48788 | https://lnkd.in/eVbyvuXs, https://lnkd.in/gRGpREQS, PoC: https://lnkd.in/ewSPWHxe 4. 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐱𝐜𝐡𝐚𝐧𝐠𝐞 𝐒𝐞𝐫𝐯𝐞𝐫 | Various Vulnerabilities Leading to Privilege Escalation and Remote Code Execution, Remote Attack | CVE-2024-26198, CVE-2024-21410, CVE-2023-36439 | https://lnkd.in/etFgu6dH 5. 𝐈𝐁𝐌 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐃𝐞𝐜𝐢𝐬𝐢𝐨𝐧 𝐌𝐚𝐧𝐚𝐠𝐞𝐫 | JNDI Injection Vulnerability Leading to Arbitrary Code Execution via REST API, Unauthenticated Remote Attack | CVE-2024-22319 | https://lnkd.in/ewhF9ipJ, PoC: https://lnkd.in/e8_wGfT4 #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 12, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities mainly on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐈𝐁𝐌 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐃𝐞𝐜𝐢𝐬𝐢𝐨𝐧 𝐌𝐚𝐧𝐚𝐠𝐞𝐫 | JNDI Injection Vulnerability Leading to Arbitrary Code Execution via REST API, Unauthenticated Remote Attack | CVE-2024-22319 | https://lnkd.in/ewhF9ipJ, PoC: https://lnkd.in/e8_wGfT4 2. 𝐀𝐫𝐭𝐢𝐜𝐚 𝐏𝐫𝐨𝐱𝐲 | Deserialization Vulnerability Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-2054 | https://lnkd.in/er3imvYb, PoC: https://lnkd.in/eMcAE2PT 3. 𝐏𝐫𝐨𝐠𝐫𝐞𝐬𝐬 𝐊𝐞𝐦𝐩 𝐋𝐨𝐚𝐝𝐌𝐚𝐬𝐭𝐞𝐫 | Command Injection Vulnerability in the Web Interface of the Appliance Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-1212 | https://lnkd.in/d3UrxDJ4, PoC: https://lnkd.in/eX698muM 4. 𝐅𝐨𝐫𝐭𝐫𝐚 𝐅𝐢𝐥𝐞𝐂𝐚𝐭𝐚𝐥𝐲𝐬𝐭 | Path Traversal and Arbitrary File Upload Vulnerabilites Leading to Remote Code Execution, Unauthenticated Remote Attack | CVE-2024-25153 | https://lnkd.in/dcTYvskT, PoC: https://lnkd.in/dsDm4Mv4 5. 𝐓𝐞𝐥𝐞𝐫𝐢𝐤 𝐑𝐞𝐩𝐨𝐫𝐭 𝐒𝐞𝐫𝐯𝐞𝐫 | Deserialization Vulnerability Leading to Arbitrary Code Execution, Unauthenticated Remote Attack | CVE-2024-1800 | https://lnkd.in/eMGfwQRb #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement

Enjoyed being at the lovely networking event, the European Cyber Security STARtup Award, held at the cozy G Data CyberDefense location in Bochum. Thank you to all the organizers, and good luck to the finalists. #ecsoawards #cybersecurity #networking #cube5 #bochum #gdata