Grímur Grímursson

Cyber Designations: OFAC has designated the following 5 individuals and entity for their connections to the Intellexa Consortium, a software development group alleged to develop and export surveillance tools to authoritarian regimes: Artemis Artemiou, the general manager and a board member of an Intellexa Consortium company; Felix Bitzios, the beneficial owner of an Intellexa Consortium company used to supply spyware to a foreign government; Andrea Nicola Constantino Hermes Gambazzi, the beneficial owner of 2 Intellexa Consortium members designated pursuant to Executive Order 13694; Merom Harpaz, a top executive of the Intellexa Consortium; Panagiota Karaoli, the director of multiple Intellexa Consortium entities; and Aliada Group, an entity based in the British Virgin Islands and member of the Intellexa Consortium, which enable transactions for the network.   Designations over Human Rights Abuses in Georgia: OFAC, alongside the Department of State, has also designated the following individuals: Zviad Kharazishvili, the Georgian Ministry of Internal Affairs Special Task Department Chief; Mileri Lagazauri, a deputy to Kharazishvili; Zurab Makharadze and Konstantine Morgoshia, the leaders of an allegedly violent extremist group. These 4 designations are made for alleged involvement in serious human rights abuses committed in response to peaceful protests in Georgia – Department of State press release. The DoS has also imposed visa restrictions on over 60 Georgian individuals and their families who are said to be undermining democracy in Georgia. #Sanctions #Russia #EUCommission #ExportControl #TradeWar #TSECS #SanctionsUpdate #TurkishSociety #Sanctions #USA #OFAC #BIS #TradeUpdates #GlobalTrade #TradeCompliance #InternationalRelations #EconomicSanctions #TradeRegulations #TurkishExports #TradePolicy #SecurityMatters #ForeignPolicy #ComplianceNews #EconomicSecurity #CrossBorderBusiness

1

"OSCs must retain artifacts used as evidence for the assessment for the duration of the validity period of the certificate of assessment, and at minimum, for six years from the date of certification assessment as addressed in 32 CFR 170.17(c)(4). The OSC is responsible for compiling relevant artifacts as evidence and having knowledgeable personnel available during the assessment. The organizational artifacts are proprietary to the OSC and will not be retained by the assessment team unless expressly permitted by the OSC. To preserve the integrity of the artifacts reviewed, the OSC creates a hash of assessment evidence (to include a list of the artifact names, the return values of the hashing algorithm, and the hashing algorithm used) and retains the artifact information for six years. The information obtained from the artifacts is an information collection and is provided to the C3PAO for uploading into the CMMC instantiation of eMASS." The above text is from the DoD's June 21, 2024 submission to the Federal Register. It describes the expected information collection level-of-effort for a CMMC Level 2 assessment. Some more information: The DoD expects evidence collection and archival, assessment planning and results, C3PAO records about their assessment staff, and submission of data into CMMC eMASS to take 525 hours on average, per assessed company. This is just the effort related to paperwork. It doesn't cover the time spent interviewing or demonstrating the system. It doesn't cover the time preparing. Bottom line? The DoD seems 𝒅𝒆𝒕𝒆𝒓𝒎𝒊𝒏𝒆𝒅 to get their defense contractors cyber-secure, no matter the cost. They are treating this as seriously as the defenses for our key military and government installations, and looking at a timeline of just a few years to get our manufacturing and military support base resilient to cyber-attack. If you're ready to start working seriously on NIST SP 800-171 and #CMMC compliance, or want to get scheduled for your certification assessment, give my team at Kieri Solutions - Authorized C3PAO a call. We specialize in helping companies become compliant without outsourcing their control of IT to a third party. Read more about the DoD's submission below: https://lnkd.in/eTFi9dVK

51

47 comentarios

As continuos observers in #LATAM region, we've identified in #Chile activity of ransomware groups, such as #Meow, #RansomHub, #Akira, exploting vulnerabilities like listed below: 1. CVE-2018-13379: Vulnerability in Fortinet SSL VPN. 2. CVE-2017-11882: Affects Microsoft Office, allowing remote code execution. 3. CVE-2012-0158: Vulnerability in Microsoft Windows. 4. CVE-2012-0143: Affects Microsoft Excel. 5. CVE-2010-3333: Vulnerability in Microsoft Word. #Cyber #IncidentResponse #MDR #SOC #Malware #Ransomware

4

EU’s DORA regulation explained: New #riskmanagement requirements for financial firms https://buff.ly/3M6woyh #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance

1

EU’s DORA regulation explained: New #riskmanagement requirements for financial firms https://buff.ly/3M6woyh #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance

2

🔍 Quick OSINT tip: Usernames often live in the URLs of websites, making 𝐢𝐧𝐮𝐫𝐥 a helpful Google Dork for OSINT investigators. For example, you’re tracking a target with the username jsmith1234. By searching: inurl:jsmith1234 Google will surface URLs where that username appears—often leading to multiple profiles or accounts on forums, blogs, or social media. It’s one of the effective ways to find a target’s online presence. This technique has located everything from obscure forum posts to social media accounts. Give it a try, and let me know—what’s your favourite Google Dork? 👇

152

13 comentarios

New feature in TaskForce 2024.6! 🎉 With the new TaskForce update, you can combine various ports into a group in Express mode. Each group has different settings of target folder, file format, type of hash to calculate, and case report fields. #dfir #digitalforensics #forensicimaging

13

Charlas MainTrack #EKO2024 🚀 📌 Martin Doyhenard, Security Researcher at PortSwigger 💡 “Gotta Cache Em All: Bending the rules of web cache exploitation”: In recent years, web cache attacks have become a popular way to steal sensitive data, deface websites, and deliver exploits. We've also seen parser inconsistencies causing critical vulnerabilities like SSRF and HTTP Request Smuggling. This raises an intriguing question: what happens if we attack web caches' URL-parsers? In this session, I'll introduce two powerful new techniques that exploit RFC ambiguities to bypass the limitations of web cache deception and poisoning attacks and inflict some serious damage. First, I'll introduce Static Path Deception, a novel technique to completely compromise the confidentiality of an application. I’ll illustrate this with a case study showing how such a breach can be replicated in environments like Nginx behind Cloudflare and Apache behind CloudFront, using just their default configurations. Next, I'll present Cache Key Confusion, and show how to exploit URL parsing inconsistencies in major platforms, including Microsoft Azure Cloud. I’ll then show how to achieve arbitrary cache poisoning and full denial of service in OpenAI and countless platforms. After this, I'll reveal how to supercharge these vulnerabilities with a live demo that blends Cache Key Confusion with a “non-exploitable” open redirect. By modifying the response of a static javascript file, I'll show how to execute arbitrary JS code cross-domain. Finally, I’ll explain how to leverage HTTP/0.9 request smuggling in order to generate custom responses with an arbitrary cache key to tamper any resource and take full control of a vulnerable website. Attendees will depart armed with a set of innovative techniques for uncovering concealed bugs, along with a definitive methodology to find and exploit these and other URL or HTTP discrepancies. To facilitate this, I'll provide an open-source tool to detect all discussed vulnerabilities, plus a lab to level-up your cache exploitation skills! ✅ Esta charla será dictada en español. 📍 EKOPARTY 2024 - 13, 14 y 15 de noviembre en el CEC - Buenos Aires  🎟️ ¡Registrate! >> entradas.ekoparty.org 📅 Podés ver la agenda completa en ekoparty.org/agenda 

10

#riskmanagement "The CRA has introduced a novel, and potentially quite worrying, approach to #cybersecurity legislation by combining elements of fundamental rights protection (albeit in a limited capacity) with product-specific cybersecurity requirements. The CRA mandates that products with digital elements, although compliant with the product specific requirements, must not pose risks to the health or safety of individuals, or conflict with obligations under union or member states laws designed to protect fundamental rights. Both national market surveillance authorities and the European Commission are empowered to enforce these regulations. They can require companies to mitigate risks, withdraw, or recall noncompliant products from the market, on the basis that they conflict with obligations under EU or domestic member states laws designed to protect fundamental rights." "If the European Commission intended to develop an analogue to the Alien Torts Statute, which allows the removal of products from the European Market (as opposed to enabling a claim to be made against the technology company itself), this should be in a separate and distinct piece of legislation and not delivered as part of a cybersecurity regulation. "   https://buff.ly/3ziZ6cA #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

The latest update for #Trustwave includes "7-Step Guide to Properly Scoping an Offensive Security Program" and "Trustwave SpiderLabs Reveals the Ransomware Threats Targeting Latin American Financial and Government Sectors". #Cybersecurity #MDR #infosec https://lnkd.in/dAFsV2s9

1