Smart Source Technologies, Inc’s Post

So this seems to be a major thing ATM where people with sec+ think they know enough to get a job. I was a CISSP, Data Scientist, C|EH, CCNA before I got one. I will never ignore you if you ask me but this is what I do. I've started setting up challenges for them to do like get Aurora agent lite setup with alerts and monitor your own systems with a hosted page and defend against me or vice versa. Depending how they do will depend on what I do for them. Knowing what to do and how to do it are two very different things. Most after the sec+ only have a theory knowledge so they get pumped. Out of about 40 I've recommended 3 for jobs. Plus have you ever seen blue teamers try defend the way I would in Kali with binaries on bare metal its hilarious. 🤣🤣

From the Securitybeat: Best to be Solarwinds Safe than Sorry While Solarwinds differ in their assessment, CISA prioritizes applying the patch to the "deserialization of untrusted data vulnerability that could allow for remote code execution." References: 1. https://lnkd.in/e5Quxra3 2. https://lnkd.in/e24aQV-3

HTTP status codes

Only in my first year, but already know I will find this useful in the coming years

⚠️ Critical Vulnerability in SolarWinds Web Help Desk Allows Remote Code Execution ❗ 🚨 18-10-2024 A critical vulnerability, CVE-2024-28988, was discovered in SolarWinds Web Help Desk, allowing attackers to execute remote code through a Java deserialization flaw. The vulnerability poses significant risks, potentially enabling attackers to take control of systems and cause data breaches. SolarWinds has released a patch (version 12.8.3 HF3) to fix the issue, urging users to update immediately. The collaboration between SolarWinds and ZDI highlights the importance of prompt vulnerability disclosures and security updates to prevent exploitation. Regular updates and security monitoring are recommended for protection. #CVE #SolarWinds #vulnerability #attacksurface

🚨 High Risk Alert! IBM Operational Decision Manager is vulnerable to remote code execution attack via JNDI injection. This is a serious issue as it allows an attacker to execute arbitrary code remotely. CVE-2024-22319 has been assigned to this vulnerability. Stay safe and update your systems! #IBM #OperationalDecisionManager #RemoteCodeExecution #OWASP #APIsecurity https://lnkd.in/g5PFwFz6

Approach to mainframe penetration testing on z/OS: We explain how mainframes work, potential attack vectors, and what to focus on when pentesting such systems.

Welcome to the #cissp 'Q of the D' !!!! Question 1197 / Day 1197 - DOMAIN - Software Development Security: (correct answer to be provided tomorrow) Show how smart you are & post your answers #cisspsuccess #isc2 #themoreyouknow Which of the following vulnerabilities would be likely to be discovered during penetration testing of a web application? (Choose ALL that apply) a. Weak password(s)  b. Cross-site scripting (XSS) c. Insufficient Logging & Monitoring d. Use of an insecure C# library e. Sensitive Data Exposure f. The use of Dynamic SQL Answer: _____