Apurva Goenka

You know what this tells me? Federal agencies are still missing the most basic security hygiene and still need a reminder not to use Adobe Flash Player on their Windows XP devices which were EOL on April 8, 2014. 🤦‍♂️ Kudos to Cybersecurity and Infrastructure Security Agency agency for the reminder! #cybersecurity #infosecurity #riskmanagement #infosecurity

33

4 Comments

The newest Action1 release of Vulnerability Management today is set to partially address the NIST NVD Backlog Crisis. Action1 is now able to detect software vulnerabilities for applications listed in Software Repository even if the vulnerability data is not yet available in the National Vulnerability Database (NVD). Given the alarming slowdown of NIST NVD updates, this critical capability adds the much-needed visibility over many previously undetected vulnerabilities and allows to automate their remediation: https://lnkd.in/g6UY-iF7 As of right now 18,000+ CVEs are unanalyzed. National Institute of Standards and Technology (NIST) has still a long way to go in terms of analyzing newly published CVEs. As of September 21, 2024, 72.4% of CVEs (18,358 CVEs) in the NVD have yet to be analyzed, VulnCheck said, adding "46.7% of Known Exploited Vulnerabilities (KEVs) remain unanalyzed by the NVD (compared to 50.8% as of May 19, 2024)." It's worth noting that a total of 25,357 new vulnerabilities have been added to NVD since February 12, 2024, when NIST scaled back its processing and enrichment of new vulnerabilities.

26

For security researchers interested in starting with reverse engineering Windows drivers IOCTLs, I highly recommend checking out my PDF presentation from my H2HC 2023 talk. It's a comprehensive resource to help you get started! https://lnkd.in/dchEYnNg #exploit #afd #reversing #vulnerability #ioctl #ioring #windows

169

9 Comments

Gap Assessment? Mock Assessment? Certification Assessment? Conformity Assessment? Joint Surveillance Voluntary Assessment? NIST SP 800-171 Assessment? CMMC Level 1 Assessment? CMMC Level 2 Assessment? CMMC Level 3 Assessment? Control Assessment? DIBCAC Assessment? Seriously, who knew there are so many types of assessments that occur in the CMMC & NIST SP 800-171 ecosystem today!!! If you don't understand the nuanced differences between all of these types of assessments, this whitepaper, "A Greenhorn's Guide to All of the Assessment Types" may help to clear it all up. At least until DoD provides their next set of updated documents... Like all of our content Peak InfoSec, there is no marketing passthrough where we collect your information. Everything is provided free of marketing and advertising gimmicks. ================================================= Peak InfoSec Homepage: https://peakinfosec.com As the CMMC Churns Episodes: https://lnkd.in/eVGYGs3g Contact Peak InfoSec for Support: https://lnkd.in/e8sM_2Z3 Email: [email protected] ================================================= #cuicon #cmmc #cmmc2 #32cfrpart2002 #32cfrpart170 #infosec #informationsecurity #compliance #cybersecurity #cui #fci #cmmcab #thecyberab #nist800171 #defenseindustry #defensecontractors #defensecontracting #grc #manufacturing #dfars #manufacturingindustry #dib #satellite #satellitecommunications #satellitesystems #managedserviceprovider #msp #managedsecurityservices #mssp #DoD #GovCon #governmentcontracting #SmallBusiness #contracts #contractors https://lnkd.in/eFtmQ6mf

12

1 Comment

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

Hey LinkedIn Community, I just took the CNSP exam and passed with merit. I want to thank the The SecOps Group for this opportunity. The exam covered diverse topics and wasn't too hard, but having basic and intermediate knowledge of networking and protocols is essential. It also included questions about ports, their TCP and UDP versions, and how they react when behind or not behind a firewall. Additionally, Windows and Linux topics were well covered. There were two questions on topics I hadn't encountered before, which made me realize the importance of those subjects. It's a lesson that nothing is less important in security, and the most dangerous attacks can come from unexpected areas. There was also a question (number 32 for me), about hashing algorithms. I'm confident there was no correct answer, so I chose "blowfish" instead of "bcrypt." I believe it was a mistake in the question, as "bcrypt" seems more appropriate. Additionally, other options technically fit the question, but they don't have the same properties or criteria for identification. I hope The SecOps Group will take a look into this matter. Overall, the exam was well-made, and I'm grateful for the opportunity. Keep learning and growing in your careers! Best wishes for success and good health to everyone.

35

5 Comments

It’s great to see Cybersecurity and Infrastructure Security Agency’s efforts in stepping up to fill the CVE enrichment gap that the National Institute of Standards and Technology (NIST) NVD has neglected to address. #cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement

83

7 Comments

Looking to break into cybersecurity? The GIAC Foundational Cybersecurity Technologies (GFACT) certification covers the foundational skills needed for a future in this growing field. Learn computers, tech, and security fundamentals – the basics that every cybersecurity pro needs! Learn more here: https://lnkd.in/eB7Uu77J #GIAC #CertifyGIAC #GFACT

9

New episode of The Hacker's Cache Podcast is out now! #3 Best Way to Learn Active Directory Hacking Skills ft. Robert O'Connor Listen to the full episode on your favorite podcast app or watch the video version on YouTube! Go to https://lnkd.in/gagmNBn2 to get the link to your preferred platform. #Cybersecurity #InfoSec #PenetrationTesting #PenTesting #PenTester #Hacker #Hacking #EthicalHacker #EthicalHacking

20

2 Comments

A great update today on NIST NVD and a big win for cybersecurity... 👏 The National Institute of Standards and Technology (NIST) has taken a significant step forward for the future of the National Vulnerability Database (NVD). I'm grateful that NIST has prioritized funding for the NVD, ensuring it is appropriately resourced, which greatly benefits national security. "NIST has awarded a contract for additional processing support for incoming Common Vulnerabilities and Exposures (CVEs) for inclusion in the National Vulnerability Database. We are confident that this additional support will allow us to return to the processing rates we maintained prior to February 2024 within in the next few months. In addition, a backlog of unprocessed CVEs has developed since February. NIST is working with the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) to facilitate the addition of these unprocessed CVEs to the NVD. We anticipate that that this backlog will be cleared by the end of the fiscal year." Stephen Shaffer Sasha Romanosky Tom Lawrence ✅ Sandy Radesky Anthony Bettini Chris Madden Chris Hughes Dan Lorenc Tony Turner Kevin Poireault Catalin Cimpanu Ben Edwards 🐿️ Brian Martin Adrian Sanabria Jerry Gamblin Tanya Brewer #cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement

197

18 Comments

In my latest video, I explain some code I developed to speed up exfiltration of data in a Blind RCE attack. Shout out to Dana Epp for the original code! https://lnkd.in/eUCDkjZh

7

2 Comments

Are you a hospital with a website that integrates google and meta user tracking? Check out this interesting case in MA where the prosecution attempted to use the state wiretap law for scraping user data: https://lnkd.in/ehN-CeB6

2

Articles such as this are interesting, but how useful are they for hunting, and developing protections/detections, really? https://lnkd.in/g_iC9eQr These articles come with great graphics, and provide a high-level overview of what's happening, but is there anything immediately actionable here? Jai M.

14

8 Comments

Calling all #SOC analysts! Sevii just integrated with the National Institute of Standards and Technology (NIST) NVD database for CVE search. Get access to the latest vulnerability data in seconds by asking Sevii about incidents. #NIST #NVD #AI #CyberSecurity

27

1 Comment

Save The Data" Ransomware Tabletop Exercise Sponsored by Rubrik: Open to NJ GMIS Members! Save The Data offers a dynamic re-creation of a real-life ransomware attack scenario, providing attendees with a comprehensive understanding of the challenges and complexities involved in incident response. Participants will immerse themselves in simulated incidents to gain firsthand experience of cyber threats' impact on organizational operations and reputation. This event, sponsored by Rubrik, is not a product pitch; it's a strategic thought exercise designed to empower attendees with the knowledge and skills necessary to combat cyber threats effectively. Registration Information: Secure your spot at Save The Data by RSVPing no later than June 4, 2024 using the following link: https://lnkd.in/ezCB88Hz Please note that space is limited, so early registration is encouraged.

5