Daily Briefing for 11.15.24

Attacks, Threats, and Vulnerabilities

CISA Warns of Two More Palo Alto Expedition Flaws Exploited in Attacks (SecurityWeek) CISA has added two more Palo Alto Networks Expedition flaws, CVE-2024-9463 and CVE-2024-9465, to its KEV catalog.

watchTowr Finds New Zero-Day Vulnerability in Fortinet Products (Infosecurity Magazine) The new vulnerability was named “FortiJump Higher” due to its similarity with the “FortiJump” vulnerability discovered in October

Fresh Phish: Harvesting Your Credentials Using Controversial Telegram Bots (INKY) Just as the popular messaging app Telegram makes the news for allowing criminal activity on its platform, a new credential harvesting phishing scheme surfaces.

Varonis Discovers New Vulnerability in PostgreSQL PL/Perl (Varonis) Varonis discovered a vulnerability (CVE-2024-10979) in the Postgres trusted language extension PL/Perl that allows setting arbitrary environment variables in PostgreSQL session processes.

Hunting the Mongoose: Discovering 10 Vulnerabilities in the Mongoose Web Server Library (Nozomi Networks) Our security analysis of the Mongoose Web Server Library’s TLS implementation identified 10 significant vulnerabilities.

Multiple DNS Actors linked to Domain Hijacking (Infoblox Blog) Learn how DNS threat actors hijack domains and use them in their malicious campaigns.

Trends

Leadership and Organization Benchmark Report| IANS Research (IANS) The 2024 Security Leadership and Org Benchmark Report is a deep dive into organizational design and compensation for security leader roles one level down from the CISO.

Marketplace

Silverfort Acquires Rezonate, Expanding its Cloud Identity Security Offering to Deliver the First Complete Identity Security Platform (Silverfort) With Rezonate’s acquisition, Silverfort continues to break down identity security silos across all enterprise environments, on-prem and in the cloud, for both human and non-human identities (NHIs), offering better and easier identity security from a single platform for its rapidly growing customer base

Products, Services, and Solutions

Versa Announces VersaONE, the Industry’s First Universal SASE Platform Across WAN, LAN, Data Centers, and Cloud (Versa Networks) Versa Announces VersaONE, the Industry’s First Universal SASE Platform Across WAN, LAN, Data Centers, and Cloud Converged Security and Networking Platform for Every Edge Reduces Risk, Improves Resilience, and Lowers Infrastructure Complexity and Cost Santa Clara, Calif. - Nov. 14, 2024 Versa, the global leader in Unified Secure Access Service Edge (SASE), today introduced the VersaONE™

Rubrik to Support Red Hat OpenShift Virtualization (Rubrik) Rubrik announces collaboration with Red Hat to integrate Red Hat OpenShift Virtualization with Rubrik Security Cloud, enhancing cyber resilience and data protection for modernized virtual environments.

1Password Joins the Microsoft Intelligent Security Association (BusinessWire) With Microsoft Sentinel and Microsoft Entra ID Integrations, 1Password Extended Access Management Delivers Advanced Real-Time Threat Visibility and Device Management to Microsoft Customers

Persona Announces Integration with Okta's Workforce Identity Cloud to Enhance Workforce Identity Security (PR Newswire) /PRNewswire/ -- Persona, a leading global identity platform, today announced a partnership with Okta to provide an automated identity verification solution to...

Litigation, Investigation, and Law Enforcement

Cybercrook devoid of boundaries gets 10-year prison stint (The Register) Serial extortionist of medical facilities stooped to cavernous lows in search of small payouts

For a complete running list of events, please visit the Event Tracker.

Events

SANS Holiday Hack Cybersecurity Challenge 2024: Snow-maggedon (Vienna, Nov 7 - Dec 2, 2024) Whether you're a first-time player or a seasoned participant, this year’s Holiday Hack brings exciting new features you won’t want to miss! We’ve introduced a new dynamic for this year: challenges will be gradually released in sync with the story, keeping the experience fresh and immersive. See challenges release dates and new features included.

CYBERSAT24 (Reston, Virginia, USA, Nov 18 - 20, 2024) CyberSat Summit has been at the forefront of the satellite industry’s burgeoning cybersecurity landscape since the event’s launch in 2017. Initially run as a single annual event, it morphed into two separate events in recent years – CyberLEO and CyberSatGov. This was done in response to changing market conditions, most notably the huge growth of LEO satellites and the corresponding rise of commercial interest in space. While CyberSatGov and CyberLEO were successful independently, the continued demand for LEO architectures and the ever-increasing collaboration between government and industry meant that these conversations needed to happen under one roof. As a result, 2024 will feature a single CyberSat event in November, where for the first time in its 7-year history, we will nearly double the event’s content offerings to include two concurrent tracks – one track titled “Space Infrastructure” and the second track titled “Space Data & Technology.” The “Space Infrastructure” track will continue CyberSat’s legacy focus on the overall satellite cybersecurity ecosystem and the protection of tangible assets like ground systems and satellite components, while the new “Space Data & Technology” track will focus on emerging technologies and the protection of space’s intangible assets like data. Keynotes, and a handful of general sessions, will contain talks that apply to all attendees.

CYBERSAT24 (Reston, Virginia, USA, Nov 18 - 20, 2024) CyberSat is the only space security event that successfully unites satellite, space, cyber, and government to educate on threat vectors and to thwart next-generation attacks.

CYBERWARCON (Arlington + Virtual, Virginia, USA, Nov 22, 2024) CYBERWARCON is a one-day conference in Arlington, VA focused on the specter of destruction, disruption, and malicious influence on our society through cyber capabilities. CYBERWARCON is not a hacker conference, or an ICS conference, or an international policy conference. The central purpose of this conference is to identify and explore threats. Participants and attendees come from a spectrum of backgrounds including the military and government, academia, the media, and the private sector.

AWS re:Invent (Las Vegas, Nevada, USA, Dec 2 - 6, 2024) AWS re:Invent offers learning sessions on many topics in a variety of formats and at various levels so you can expand your knowledge and grow your skills at a pace that is right for you. Select a topic from the list to learn more about these opportunities at re:Invent.