XM Cyber’s Post

🛡️ Safeguard your #Kubernetes clusters! Our latest blog unveils how to block attack paths that could compromise your system. Discover how to visualize threats, prioritize fixes, and reinforce your defenses. It's time to neutralize, not just manage threats!

On average, one out of every 16 organizations are impacted weekly by Server-Side Template Injection (SSTI) attacks. And here’s literally everything and each possible scenario in which Attackers leverage this vulnerability to exploit various system archs READ the Full Article for a Detailed info 👇🏻 REPOST to spread the word 🔁 FOLLOW to keep yourself updated ’bout Cyberspace and Emerging Threat Landscape

"In an era dominated by digital innovation, application security (AppSec) stands as a critical frontier in safeguarding organizations from evolving cyber threats. Join us for a comprehensive exploration of the current AppSec landscape. We'll unpack emerging threats, common vulnerabilities, and the ever-evolving world of application security. You’ll learn practical tips to help you establish guardrails and proactively address top AppSec risks in your organization. In this webinar, you will: - Understand the wide range of AppSec risks, including everything from common vulnerabilities to sophisticated exploits. - Explore real-world scenarios to learn practical insights into overcoming common AppSec challenges. - Learn how to align security practices with agile development methodologies, ensuring security is not a bottleneck, but rather an integral part of the development lifecycle. - See how cutting-edge technologies enhance AppSec best practices and enable teams to keep pace with the dynamic nature of application threats. Get ahead of bad actors and elevate your organization's defenses against top AppSec risks." https://lnkd.in/e7dPMQyR

Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199): JetBrains has fixed two critical security vulnerabilities (CVE-2024-27198, CVE-2024-27199) affecting TeamCity On-Premises and is urging customers to patch them immediately. “Rapid7 originally identified and reported these vulnerabilities to us and has chosen to adhere strictly to its own vulnerability disclosure policy. This means that their team will publish full technical details of these vulnerabilities and their replication steps within 24 hours of this notice,” the company stated today. This also means that proof-of-concept and full … More → The post Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199) appeared first on Help Net Security.

🔍 Manual source code repo searches for vulnerabilities? Not anymore! Infoblox's journey from manual intervention to automated security with #AnchoreEnterprise is a must-read for all security pros. 🔗 https://lnkd.in/eY4aFAvq #ContainerSecurity #VulnerabilityManagement

We have a new security blog for your review.

Combining both the auth bypass and path traversal vulnerabilities, attackers can access sensitive resources.

Layered security approach ✔️ effective Network segmentation + automatic patching + password rotation policy + zero-trust network access https://lnkd.in/gmfUBFwt

Vulnerabilities need to be patched quickly, but 28% of IT professionals take at least three weeks to do so. In this week’s #FocalPoint, they break down why that happens and share tactics that can help reverse this increasingly dangerous trend ⬇️. Its a good read.

📢 𝗪𝗲𝗲𝗸𝗹𝘆 𝗧𝗼𝗽 𝟱 𝗛𝗮𝗰𝗸𝗲𝗿-𝗥𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 Calendar Week 5, 2024 With more than 10.000 vulnerabilities having critical and high severity scores per year, among questions that arise for prioritization are: Is the vulnerability being used by threat actors? Is there a Proof of Concept available online? To this end, we provide our weekly top 5 of hacker-relevant vulnerabilities on the server side (https://lnkd.in/ehT46MMy). Product | Vulnerability | CVE | References 1. 𝐑𝐮𝐧𝐂 | Leaked File Descriptors Leading to (Docker) Container Escape and Unauthorized Access to the Underlying Host Operating System, Local Attack | CVE-2024-21626 | https://lnkd.in/dzGJ5nVh, https://lnkd.in/gXkX5Ssb, PoC: https://lnkd.in/eCRXFj36 2. 𝐈𝐯𝐚𝐧𝐭𝐢 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐒𝐞𝐜𝐮𝐫𝐞 𝐚𝐧𝐝 𝐏𝐨𝐥𝐢𝐜𝐲 𝐒𝐞𝐜𝐮𝐫𝐞 | Privilege Escalation and Server-Side Request Forgery Vulnerabilities Leading to Authentication Bypass and Sensitive Information Leak, Remote Attack | CVE-2024-21888 & CVE-2024-21893 | https://lnkd.in/gx9at2Z6, https://lnkd.in/exhFd-s3, https://lnkd.in/eif8BE3D 3. 𝐆𝐢𝐭𝐥𝐚𝐛 | Improper Input Validation Leading to Directory Traversal and Arbitrary Code Execution, Authenticated Remote Attack | CVE-2024-0402 | https://lnkd.in/gnnscQGB, https://lnkd.in/ePSZjJxB 4. 𝐉𝐞𝐧𝐤𝐢𝐧𝐬 | Arbitrary File Read Vulnerability Leading to (Sensitive) Information Disclosure, Unauthenticated Remote Attack | CVE-2024-23897 | https://lnkd.in/gHe4ZCFM, https://lnkd.in/gMMKdk6k, PoCs: https://lnkd.in/emN_A_Rk, https://lnkd.in/e4qFxCAa 5. 𝐀𝐭𝐥𝐚𝐬𝐬𝐢𝐚𝐧 𝐂𝐨𝐧𝐟𝐥𝐮𝐞𝐧𝐜𝐞 𝐃𝐚𝐭𝐚 𝐂𝐞𝐧𝐭𝐞𝐫 𝐚𝐧𝐝 𝐒𝐞𝐫𝐯𝐞𝐫 | Template Injection Vulnerability Leading to Remote Code Execution, Unauthenticated Remote Attack | CVE-2023-22527 | https://lnkd.in/gRGpREQS, https://lnkd.in/dxEAYd2G, PoC: https://lnkd.in/d-qwh3sh #ruhrsecurity #cybersecurity #vulnerability #vulnerabilitymanagement #attacksurface #attacksurfacemanagement #exposuremanagement