Jcrabapple @jcrabapple

0 posts0 participants0 posts today

**Stéphane Bortzmeyer** @bortzmeyer@mastodon.gougere.fr · Feb 18

Stéphane Bortzmeyer @bortzmeyer@mastodon.gougere.fr

#jeRecrute Pas moi mais le pitch dit « Rejoindre l’ANSSI, c'est contribuer à la sécurité de la Nation. C'est aussi incarner l’excellence française en matière de #cyberdéfense. » https://talents.ssi.gouv.fr/offresdemploi

talents.ssi.gouv.frPlateforme de recrutement de l'ANSSI - Agence Nationale de la Sécurité des Systèmes d'information - ANSSI - Agence nationale de la sécurité des systèmes d'information

**LavX News** @lavxnews@mastodon.cloud · Feb 14

Feb 14

LavX News @lavxnews@mastodon.cloud

The Rise of Intelligent Network Bots: A New Era in Cybersecurity

As the digital landscape evolves, so do the threats that accompany it. In a recent discussion, experts shed light on the emergence of intelligent network bots and their role in combating API attacks, ...

https://news.lavx.hu/article/the-rise-of-intelligent-network-bots-a-new-era-in-cybersecurity

#news #tech #CyberDefense

**LavX News** @lavxnews@mastodon.cloud · Feb 11

Feb 11

LavX News @lavxnews@mastodon.cloud

MIT's 'Oreo' Method Reinvents ASLR for Enhanced Cybersecurity

MIT CSAIL researchers have unveiled a groundbreaking method named 'Oreo' that significantly enhances the security of address space layout randomization (ASLR) against microarchitectural attacks. By ma...

https://news.lavx.hu/article/mit-s-oreo-method-reinvents-aslr-for-enhanced-cybersecurity

#news #tech #CyberDefense

**Pen Test Partners** @PTP@infosec.exchange · Feb 7

Feb 7

Pen Test Partners @PTP@infosec.exchange

The best ICS testing results don’t come from a single approach. Onsite testing has to be risk-averse, and lab testing can uncover deeper vulnerabilities. The key? A combined approach…

OT environments don't stand up to regular IT pen testing. Any pen tester that doesn't fully understand that could easily destroy systems and take out critical infrastructure.

By strategically selecting devices for lab testing based on onsite insights, you get the best of both worlds without unnecessary risk or cost.

In our latest blog, Head of Hardware Andrew Tierney explains how this method finds hidden threats in ICS networks: https://www.pentestpartners.com/security-blog/ics-testing-best-results-hint-blend-your-approach/

#cybersecurity #icsmonitoring #industrialsecurity

**Kunai Project** @kunai_project@infosec.exchange · Feb 7

Feb 7

Kunai Project @kunai_project@infosec.exchange

Kunai pushes further integration with MISP!

This week, we've made significant progress in bridging Kunai with @misp to enhance threat intelligence sharing. Our focus has been on developing kunai-to-misp, a new tool available at https://github.com/kunai-project/pykunai, which processes Kunai logs and creates MISP events to streamline collaboration.

With this, it is now possible to both update MISP from Kunai and feed Kunai from MISP using the misp-to-kunai tool. Here's a practical workflow example:

Analyze a #linux malware sample with Kunai Sandbox (https://github.com/kunai-project/sandbox)
Use kunai-to-misp on the collected Kunai logs
(Optional) Review attributes' IDS flag to maximize detections and reduce false positives
Use misp-to-kunai to distribute the results across all Kunai endpoints

Additionally, we're leveraging MISP’s data model to craft meaningful MISP objects and relationships, offering a clear visual representation of events inside MISP.

Try it out and let us know what you think!

#opensource #threatintel #threatdetection