Dieudonné MIAFFO

🎣 Phishing Kit ANTAI - Agence nationale de traitement automatisé des infractions deployed! 👉 As many, this kit exfiltrate stolen data into a Telegram Messenger channel. 🔬 By analyzing this kit (which is done automatically by StalkPhish.io), we can recover the exfiltration configuration cc: Cybermalveillance.gouv.fr ANTAI - Agence nationale de traitement automatisé des infractions -- 👉 Detected by StalkPhish.io - follow us and take a look at our website and data to increase your fraud/phishing/brand impersonation detection. #cybersecurity #fraud #phishingkit #yara #frenchtech

4

2 Comments

🔥🚀 Big News from rConfig! 🚀🔥 This morning, during a demo call with a key account, we got asked a crucial question: "Why Laravel and PHP for our NCM product?" 🤔 With the upcoming European Cyber Resilience Act designating NCM as a Tier 1 critical app, the framework and development process we choose are critical. And here’s why our choice is unbeatable: DID YOU KNOW? 🧠 In our nearly 15-year history, rConfig has only had 3 CVEs – and that was way back in our V3 days (non-Laravel). We’re now rocking V7 with even insane security features! 🛡️ But wait, there's more! Our upcoming release features over 815 test suites running nearly 5000 individual assertions. Talk about thorough testing and quality assurance! 🔍✅ And for the cherry on top, rConfig can scale on a single server to handle over 20,000 network devices concurrently. Show me a Python app that can do that! 💥💡 🚀🎉 The future is looking bright, and we’re just getting started. Proud to be part of a team that’s setting new standards in network configuration management! 🌐💼 Reach out if your interested in joining us! #TechInnovation #NetworkManagement #rConfig #Laravel #PHP #SecureSoftware #HighScalability #CRAACT

19

[ #API ] Boost Your App with #AI - Effortlessly ⚡️ 💡 What if Your App could Learn and Respond Smarter ? 🚨 FREE VERSION 📍With #ChatMotor.ai, Power-up your application with OpenAI’s API. for example : Automate translation, transcription, and even bulk Excel processing — perfect for developers and decision-makers alike. Whether you want real-time notifications or error handling, ChatMotor handles it. 📍Key Features: * Bulk Excel programming through MotorLargeRequestLines * Categorization, sentiment analysis, and entity extraction * Automatic retry mechanisms for HTTP requests 🔗 Why Not ? ** Try ChatMotor today for free! Visit https://lnkd.in/eg4Xj37t  and ** Chatmotor.ai for more information #SWdevelopment #Innovation

1

Guinea pig tech ? "ChatGPT Exposes Its Instructions, Knowledge & OS Files" ➡ According to Mozilla, users have a lot more power to manipulate ChatGPT than they might realize. OpenAI hopes those manipulations remain within a clearly delineated sandbox. ➡ This is very fresh tech, and hopefully, you don't trust it with any sensitive information. connected=hacked cloud=leak #cybersecurity #ai #openai #chatgpt https://lnkd.in/eRazYBMS

18

Threat actors are extremely fast to exploit zero days on publicly exposed resources ! Don't let them take the advantage, make sure you master your SBOM (software bill of material) and that you patch timely ! "Massive PSAUX ransomware attack targets 22,000 CyberPanel instances" ⚠ Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attack that took almost all instances offline.⚠ connected=hacked #cybersecurity #psaux #patchmanagement https://lnkd.in/eyz49zpZ

11

#IntruderWizard app, who wants to struggle converting sentences to numbers when there is an app that does it for you, plus the next release will tell you what to type into the keypad as demonstrated in the video. Available on Google Play today ! https://lnkd.in/e6WPkESH Want to see what else we do? https://lnkd.in/eXgNdNcu #BatteryWizard #BinaryWizard #VirtualWiring the list goes on just visit the website to see more. Think we should develop an app to make your tasks simple? Connect or follow to see what else comes next ! Andrew #TheServiceEngineer

1

🚨High Risk Vulnerability Alert! 🚨: CVE-2024-3435 A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the 'apply_settings' function, allowing an attacker to manipulate the application's configuration by sending specially crafted JSON payloads. This could lead to remote code execution (RCE) by bypassing existing patches designed to mitigate such vulnerabilities. CVSSv3.1 Base Score: 8.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) #lollms #parisneo #apisecurity #owasp https://lnkd.in/drxXWheK

7

https://lnkd.in/e36_QRXJ In this video, we walk through a sophisticated attack scenario where the attacker successfully compromises a machine with Windows Defender enabled. Starting with a malicious executable, the attacker gains a Netcat shell and proceeds to install the Atera remote access tool via an MSI setup file. Despite Windows Defender being active, the attacker escalates privileges, executing PowerShell with system-level access. Using the Atera tool, they import and run a Mythic C2-generated executable to establish a persistent callback, allowing full control over the system even after the Netcat shell is intentionally terminated. This demonstration highlights how attackers can bypass security measures to maintain persistent access. #redteam #redteamops #ethicalhackers #penetrationtesting #pentesters #cybersecurity #infosec

33

2 Comments

A recently disclosured #vulnerability (CVE-2024-8474) in OpenVPN Inc. Connect left millions of users potentially exposed to #cyberattacks. The flaw, present in versions before 3.5.0, allowed the app to log the configuration profile’s private key in clear text within the application log.

5

[ #SQLi ] How to Protect Against SQL injection ? #SQLiFixer is your first Line of Defense against SQLi Attacks AI is a powerful resource against SQL injection attacks. AI-powered SQLiFixer provides a key protection where traditional methods fall short. " AI-powered SQLiFixer solution elevates your security against SQL Injection threats " ✨ How patented SQLiFixer protects against SQL injection ? Unlike traditional security approaches that identify risks and require extensive manual correction, SQLiFixer automates the entire process, including tags and documentation of corrections. SQLiFixer sophisticated algorithm analyze patterns and rewrites vulnerable code into prepared statements with customized parameterized queries. This process ensures that data and code are distinctly separated, therefore protecting against SQL injection. ✨ Why Choose SQLiFixer? - Immediate Correction of SQLi Vulnerabilities: Essential before each deployment, each code review, or for urgent security needs. and no manual - Enhanced Application Security: By incorporating SQLiFixer into your development lifecycle, you preemptively fix vulnerabilities before deployment, reducing the risk of data breaches, fostering a proactive rather than reactive security strategy. - Peace of Mind: Ensuring your application is shielded against SQL injection attacks offers confidence to both developers and end-users, building trust in your software. ✨ SQLiFixer is an essential component of a comprehensive security strategy. SQLiFixer works seamlessly with other security measures to provide a multi-layered defense, ensuring that your applications are resilient against (future) vulnerabilities. Implementing SQLiFixer helps maintain a proactive security posture, enhancing your organization's overall protection and compliance. 📍Step Up Your Security Game! Don’t wait for attackers to exploit vulnerabilities. Visit us at sqlinjectionfixer.com (or sqlifixer.com) to see how SQLiFixer can fortify your applications against SQL injection attacks. Secure your operations, protect your data, and maintain peace of mind with just a click. ⚡️ Let's discuss! How is AI shaping your approach to cybersecurity? #WebSecurity #SQLInjection #CyberSecurity #AI #DataProtection #SQLiProtection

2

The rise of (evil) robots - cyber meeting safety in autonomous systems Join me on June 18, 2024 at The Technical Cybersecurity Conference Le Phare Citadelle - BSides Strasbourg https://bsides-sxb.fr/ When it comes to securing safety certified system such AMR (Autonomous Mobile Robot), the safety might be considered as a black-box that isn’t or shouldn’t be influenced by security attacks, but the opposite is the right approach. Security experts and security architects should assess the safety systems embedded in their products, how they can be tampered, and they should map threats that can tamper with the safety building blocks of their product and the right mitigations to secure them. Safety focuses on the potential result of an occurrence defined as a risk. Something will be identified as a Safety problem if there is an unacceptable risk of damage to people, property, or the environment. Safety (and Functional Safety) deal with random and unintentional events - accidents and failures where Security deals with intentional acts. It is not possible to be truly Safe without also being Secure. If you are developing a product with safety aspects that talk will provide you insights on protecting a safety certified system form cyber security attacks as well maintaining the system’s safety aspects under all scenarios. #myintelstory #AMR #iamintel #cybersecurity #cyberdefense #securityarchitecture #conference #conferences #event #bsides #June #Strasbourg

23

Check Your Accounts: 10 Billion Passwords Exposed in Largest Leak Ever. The article says : "check your passwords". I tell you : "still using password only?". It's not a blame it's like, if you use only a password it means you don't care and you are not worried about that platform being hacked. 10 billion stolen passwords become useless if you use notifications, MFA, FIDO, passphrases with two or three layers of authentication. So if you are eventually worried, take the chance to never use "just" the password anymore, knowing that almost all passwords belonging to humans have been #pwned. 🫶 Ten billion passwords, run the math, and add a factor or two to your logins now, mate... https://lnkd.in/dK8CAsR6 🔑👀

2

🆕 𝐍𝐞𝐰 𝐅𝐫𝐞𝐞 𝐋𝐚𝐛: 𝐑𝐞𝐝 𝐒𝐭𝐞𝐚𝐥𝐞𝐫 🚨 We're thrilled to bring you our latest Free Lab: 𝐑𝐞𝐝 𝐒𝐭𝐞𝐚𝐥𝐞𝐫! As part of the Threat Intelligence team in the SOC (Security Operations Center), you will face a crucial challenge. An executable file has been discovered on a colleague's computer, and it’s suspected to be linked to a Command and Control (C2) server, indicating a potential malware infection. 🔍 In this lab, you will: - Investigate the suspicious executable by analyzing its hash. - Discover and analyze critical data. - Gather valuable insights to other SOC members and the Incident Response team. 📘 Category: Threat Intel 🛠️ Tools you'll use: #VirusTotal #Whois #ThreatFox #MalwareBazaar 🔗 https://lnkd.in/de8iSBBA 🔥 Time to tackle this lab and enhance your cybersecurity skills. Have a fantastic week, and happy analyzing! 😃 #DFIR #SOC #Infosec #Cybersecurity #ThreatIntel

33

Usually, I don't name the ransomware victims in my posts, even though most of them have already been announced on the ransomware leak sites. But since Krispy Kreme has already been all over the news, I'm comfortable sharing their name in this case. Anyway, the Play ransomware gang claims that they are going to publish the following tomorrow on Winter Solstice day, December 21, 2024 - "Krispy Kreme operates in over 30 countries through its unique network of fresh doughnut shops, partnerships with leading retailers, and a rapidly growing Ecommerce and delivery business with nearly 12,000 fresh points of access.comment: Private and personal confidential data, clients documents, budget, payroll, accounting, contracts, taxes, IDs, finance information and etc. For now part of the data have been published, If there no reaction full dump will be uploaded." Play mentioned clients documents, but somehow I doubt that this particular dump will have a lot of very sensitive third-party data. I could be wrong. Anyway, if you are a Krispy Kreme client, maybe you have a corporate account for catering, I'd take a look and see what they leak.

4

🎅 Santa didn't bring you a Secure Exchanges license ? I understand how sad it is, but wait, even for shared mailboxes it's affordable ! (will link in comment) 🫠 Can't resist to using a tool that allow you to keep your data out of attackers, out of sneaky providers ! 🛻 Side note, I just bought new tires for my ATV, and the cost of it represent years of secure exchanges services !! There is no reason you keep your sensitive data exposed in your O365 or Gmail mailbox anymore !! connected=hacked, don't let a BEC (business email compromise) or personal email compromise ruin your day, with secure exchanges, there is nothing sensitive left in your mailbox. #cybersecurity #emailsecurity #privacy

15

1 Comment