Cyber Defense @PlayStation - Χρη σιγάν ή κρείσσονα σιγής λέγειν - all views and opinions expressed are my own @dimitris@infosec.exchange
US|GR
Joined February 2011
- Tweets222
- Following437
- Followers222
- Likes198
“[un]prompted” is a new AI security conference for practitioners (unpromptedcon.org).
The first event was held in San Francisco earlier this month and the recordings are now live:
youtube.com/playlist?list=PL…
A reminder of what’s possible when public and private sector efforts align effectively.
justice.gov/usao-ak/pr/autho…
38th Chaos Communication Congress #38c3 recordings: media.ccc.de/c/38c3
I'm attending @BSidesAth tomorrow. Looking forward to insightful sessions and networking with fellow attendees!
💻 Yippee Ki-Yay Motha Hacka! 🟢 The #CTF is launched. Check your #MailingList email!
Participate, learn, enjoy, have fun. Thank you @hackthebox_eu for setting it up again this year! #BSidesAth 🟢 Our ML: mailchi.mp/d501e6339a3e/bsid… 🟢 bsidesath.gr 🟩
I’m #hiring for a SOC Manager at PlayStation! This is a full-time remote position in the United States.
grnh.se/ff333bee4us
CVE-2024-21893 (SSRF) can be chained to CVE-2024-21887 for unauthenticated command injection with root privileges (bypassing previous fix).
Take Ivanti hosts offline, rebuild and upgrade to the latest version that addresses all known vulnerabilities.
We have published our AttackerKB @rapid7 analysis for CVE-2024-21893, an SSRF vulnerability in the SAML component of Ivanti Connect Secure, that has recently been exploited in the wild, allowing attackers bypass the mitigation for an earlier exploit chain. attackerkb.com/topics/FGlK1T…
One more Ivanti CVE released today: CVE-2024-22024 forums.ivanti.com/s/article/…
Internet facing MOVEit Transfer hosts are being actively exploited via a critical 0day vulnerability (CVE-2023-34362), look for indicators of compromise.
- community.progress.com/s/art…
- rapid7.com/blog/post/2023/06…
- mandiant.com/resources/blog/…
New advisory and patches released for new critical MOVEit Transfer vulnerabilities: community.progress.com/s/art…
Another advisory about potential unauthorized access, this time recommending disabling all HTTP and HTTPs traffic to MOVEit Transfer: community.progress.com/s/art…
I’m #hiring for a Senior Cyber Threat Intelligence Analyst at @PlayStation! This is a full-time remote position in Germany.
grnh.se/545f13774us
#infosecjobs #cyberjobs #cybersecurity #threatintel #threatintelligence #cyberthreatintelligence #firstcti #FIRSTCTI22
Log4j 2.17.0 has been released in order to patch a high severity DoS vulnerability (CVE-2021-45105, CVSS 7.5) affecting all versions from 2.0-beta9 to 2.16.0.
logging.apache.org/log4j/2.x…