Strata Information Group (SIG)’s Post

📄 Get our in-depth guide 📄 read how proactive penetration testing can fortify your university's IT infrastructure. ⚫ Protecting students’ personal data.  ⚫ Guarding your institution’s intellectual property and research data.  ⚫ Preserving your institution’s reputation and promoting credibility.  ⚫ Maintaining student and faculty trust.  ⚫ Preventing disruptions to university operations.  ⚫ Securing donor support and funding for academic initiatives. ⚫ Complying with HIPAA, NIS/CMMC, FERPA, GLBA, PCI, or GDPR requirements. #cybersecurity #cyber #analytics #dataprotection #pentesting #datasecurity

Remember yesterday's post? 👉 https://lnkd.in/djN_RiVy We've actually just added automatic detection for #DMARC misconfigs in our Network Vulnerability Scanner! The best part? 🤩 You can use it for free on the website or with a free account! Check out the links in the comments to start a scan! ⬇️⬇️⬇️ #penetrationtesting #ethicalhacking #informationsecurity

We are seeing more and more traction in higher education not only for the convenience of implementing and use of our solution but when security and proper identification/authentication is most important. please reach out for a free consultation and POC today #identitymanagement #accesscontrol #multifactorauthentication

Hai networks 😍... Today's knowledge about technology 😊... Topic: NMAP-network mapper Explanation: Nmap is used to discover hosts and services on a computer network by sending packets and analyzing the responses. Nmap provides a number of features for probing computer networks, including host discovery and service and operating system detection. In other words when we scan the IP address using NMAP it gives us the informations like whether it is connected or not connected, which type of OS is this, ports, services, and it also tell whether it has any vulnerabilities 🧐... It is defined as powerful versatile open source tool and it is a type of Network Scanning Tool... Happy learning 💫... stay tuned ✌🏻... #newtechnology #nmap

🚨 High Risk Vulnerability Alert! 🚨: CVE-2024-31978 A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system. CVSSv3.1 Base Score: 7.6 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #siemens #sinecnms #apisecurity #owasp https://lnkd.in/djvaXdVG

Traditional vulnerability assessments cost in excess of £1,000 a day and are usually reported once a year. Our network vulnerability scanning service costs significantly less and provides monthly reports, so you're always on top of you're always on top of your vulnerability exposure. Learn more 👉 https://bit.ly/462nNpN #NetworkSecurity #CostEffective #CyberProtection

My response to questions about 2FA how secure it really is and what is better https://lnkd.in/dUUGX-ZP

🚨High Risk Vulnerability Alert! 🚨: CVE-2023-34282 D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. A crafted authentication header can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-20910. CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #dlink #apisecurity #owasp https://lnkd.in/daxq7rTq

[CVE-2024-8579: HIGH] Critical vulnerability in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 found. Exploit can be initiated remotely via buffer overflow in setWiFiRepeaterCfg function. Vendor alerted but no response. Public disclosure made, potentially used for attacks. https://lnkd.in/exZiNu2R

🚨High Risk Vulnerability Alert! 🚨: CVE-2023-41195 D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18815. CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #dlink #apisecurity #owasp https://lnkd.in/daDVmD-W