Kaseya’s Post

This weekend i setup Game Of Active Directory (GOAD), a pentest Active Directory LAB project. I wish i had this when i took the OSCP, CRTO, and even the OSEP. I will be using this lab to practice common attack techniques in a vulnerable AD environment. I did enhance the lab by adding EDR using Elastic Security SIEM for visibility and detection. 👀 Want to see the how I did the setup? Check the video link in the description. More content coming your way, including AD attacks (perfect for OSCP, CRTO, PNTP prep) and mastering C2 frameworks (great for OSEP prep). Let's level up together! 🌐💻 #EthicalHacking #CyberSecurity #ActiveDirectory #EDR

Milestone Systems have partnered with the Common Vulnerability and Exposures (CVE®) Program as a CVE Numbering Authority (CNA) to enhance cybersecurity further. “As a CVE Program partner, we will now publish mitigated vulnerabilities to the wider community, which will allow Milestone to coordinate and address potential issues even more effectively. This will further enhance our cybersecurity and continue to build trust in our XProtect® open platform video management software.” #CyberSecurity #ResponsibleTechnology #VideoTechnology #MakeTheWorldSee

Thomvell International is proud to welcome Veeam Software to Kuala Lumpur's 1st Ransomware Resilience Conference 2023. Veeam is the #1 leader in Data Protection & Ransomware Recovery. Veeam Data Platform advances enterprise grade recovery and ensures confidence in the face of disaster or cyber attacks so check out www.veeam.com to find out more about their products and solutions. For more info on #RR23, dm [email protected]

I have a new one :) Exploitation of external services as foothold for domain one and a pivot into a trusted 2nd domain. I had to get 12 of 14 flags and write a report with findings, reproduction writeup and executive summary in 10 days. I have passed with 100% and got the 14th flag on the fifth day. My report was 120 pages and probably the most comprehensive report I ever wrote. After this exam I really wonder, why I took so much time to get oscp... If you want oscp, do this one first then you don't have to worry about oscp preparation. #htb #cpts #cybersecurity

Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws. Multiple ransomware groups have begun to actively exploit recently disclosed flaws in Atlassian Confluence and Apache ActiveMQ. Cybersecurity firm Rapid7 said it observed the exploitation of CVE-2023-22518 and CVE-2023-22515 in multiple customer environments, some of which have been leveraged for the deployment of Cerber (aka C3RB3R) ransomware. Both vulnerabilities are critical, allowing threat http://ow.ly/aWmn1050vUr #InceptusSecure #UnderOurProtection

At Razdon, one ouf our products implies getting alerts when new CVEs are out. This implies building some automation and integrating with different CVE sources. One of our sources is National Institute of Standards and Technology (NIST), who tries as best as it can to keep track for all applications, but since it's a complex and time consuming job, they need help. That's why Razdon is doing it's best to work together with them in order to provide everybody a safe and reliable environment. Last week, we managed to identify some missing pieces (CPE) for one of our clients, so, we emailed NIST, they replied and now everything is "up to date". A lot of people don't know, but they've stated this a while ago: "As of December 2009, The National Vulnerability Database is now accepting contributions to the Official CPE Dictionary. Organizations interested in submitting CPE Names should contact the NVD CPE team at [email protected] for help with the processing of their submission." We think that collaboration in CyberSecurity is a must, so we encourange everybody to contribute as much as possible. #NIST #CyberSecurity #Razdon #CVE #CPE #Collaboration #Efforts #Startup

Over 50,000 Vulnerabilities Discovered in DoD Systems Through Bug Bounty Program Over 50,000 vulnerabilities have been submitted to the US Department of Defense (DoD) through its vulnerability disclosure program (VDP). The DoD Cyber Crime Center (DC3) reported on March 15, 2024, that it processed its 50,000th vulnerability since introducing its crowd-sourced ethical hacking scheme in November 2016. Unlike other bug bounty efforts, DC3’s VDP is a continuous scheme welcoming ethical hackers to find vulnerabilities within US military IT systems and report them to the DoD. Its launch in November 2016 followed a successful ‘Hack the Pentagon’ bug bounty program running on HackerOne. Follow and share for more: Instagram: https://lnkd.in/dAxTqR6d Twitter: https://twitter.com/zyzsec #infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness

We have some exciting news to share with you all!  🚀   🌟 We are thrilled to announce that we have achieved the Cyber Essentials certification, a government-backed scheme that helps us protect our organisation and our customers from cyber threats. Check out our Cyber Essentials Certificate here - https://lnkd.in/eJwGGV5m 🌟 But that’s not all! We've also launched our blog page on our website, where we will regularly share our insights and expertise on all topics related to Microsoft PPM - https://lnkd.in/eDAgT76m #cyberessentials #projectmanagement #microsoft365 #microsoftproject