Carlos Eduardo Espinal MBE’s Post

This is a great example of why federal customers love runZero! "Jim, we solve this with a simple query to runZero"... Awesome! We’re saving them: -Days, if not Weeks of time and delay towards resolving CVEs & KEVs.   -Avoiding unnecessary, time consuming scans.  -The persistent worry of the Unknown assets that have infiltrated your enterprise. Legacy tools do not have this degree of efficiency, or fidelity!  Both of which are required for Zero-Trust architectures and your peace of mind. #zerotrust #cmmc #cybersecurity #incidentresponse

runZero customers can respond quickly with a simple search to verify if they are running any TeamCity products within their networks and ensure they get updates/patching to mitigate the vulnerability risks. No need to wait and rescan... runZero customers can quickly query across the existing asset inventory to rapidly respond to 0 days like these 2 for TeamCity. "product:TeamCity" Check out the details below for more context on the vulns and how to leverage runZero to mitigate risk of emerging threats.

Today i completed the Blue CTF on TryHackMe where i explored the famous EternalBlue vulnerability to gain access to the target machine and find the flags.

This here is a great example of why federal customers love runZero! We’re saving them: -Days, if not Weeks of time and delay towards resolving CVEs.   -Avoiding unnecessary, time consuming scans.  -The persistent worry of the Unknown assets that have infiltrated your enterprise. Legacy tools and other CAASM solutions do not have this degree of efficiency, or fidelity!  Both of which are required for Zero-Trust architectures and your peace of mind. #cybersecurity #zerotrust #securitycompliance #assetmanagement #asset #caasm

🔍🔒 Network Penetration: Mr. Robot's Playground (Medium Level) 🔓🌐 Explore the intriguing world of network penetration in this medium-level challenge inspired by Mr. Robot! 🤖🔓 🚀 Machine Name: Mr. Robot's Playground 📊 Difficulty Level: Medium 📝 Description: Dive into the depths of network security as you navigate through a series of challenges, uncovering hidden vulnerabilities and cracking codes along the way. 🔍 Steps to Success: Scanning & Enumeration: Utilize Nmap to conduct a thorough scan, revealing open ports and services. Web Exploitation: Navigate through a WordPress site, employing stealth tactics to exploit vulnerabilities and gain access. Flag Hunting: Track down elusive flags hidden within the system, cracking passwords and overcoming obstacles. Privilege Escalation: Ascend to higher privileges by exploiting system vulnerabilities, unlocking restricted areas and gaining control. 🌟 Stay Curious, Stay Focused: Embark on this exhilarating journey through Mr. Robot's world, each step bringing you closer to unraveling its mysteries! #MrRobot #CTF #HackingAdventure #NetworkPentesting #InfoSec #WebExploitation #CaptureTheFlag #PrivilegeEscalation #StayCurious

WOW! Got to say I am impressed by defcon.run ... In order to figure out where the group is running from and the meet up time, they placed a hidden clue on their website (https://defcon.run/). What I love about this exercise is just like we hack our customers at CovertSwarm (as a swarm utilizing human-led attack chains based on expertise), I needed to follow a similar cadence: 1. Initial Vulnerability - (So after looking through their website I found the initial clue) 2. Lateral Movement (Since I was not an expert in this area, I pinged a few members of the hive like Dahvid Schloss and Paul W. who were able to give me hints to further decode the clue and move laterally) 3. Crown Jewels (With our 2 major clues and momentum, I pinged the wider hive, just like our customers have the ability to do for help, and within minutes the famous Ibai Castells cracked the code and led us to the Crown Jewels) I won't share the output, as I don't want to ruin the fun, but if you are stuck ping me :). So excited to be joining the wider hive at CovertSwarm for my first DEF CON conference. Now all I need to do is tell my coach to add it to my training plan. 🏃♂️ ☀ 👟 #desertrun #defcon32 #hackerswhorun #ethicalhacking #covertswarm #defconrun #defcon.run

hey #connections Today i have solved my first challenge room on TryHackMe. The name of challenge is pickle rick ➡ 🌐 https://lnkd.in/dNEWz9Rz This is included one in the web fundamentals path ⬇ 🔗 https://lnkd.in/dyzVbBh5 The reason is completing path but after completing this challenge, i think i will continuing the challenge journey. TryHackMe Challenge room is full of practical work which is useful for testing my skills. After completing the this room the web fundamentals path is completed. #tryhackme #firstctf #challenge #webfundamentals #cysec #happyhacking 😇

JetBrains disclosed two serious #vulnerabilities in TeamCity On-Premises. #CVE-2024-27198 allows access to TeamCity with admin privileges without authentication. #CVE-2024-27199, is a path-traversal vulnerability allowing attackers to perform limited administrative actions without proper authentication. Learn more about the vulnerability: https://lnkd.in/eu-qE7md Use runZero to find TeamCity on your network: https://lnkd.in/e3adckJJ #runzero #rapidresponse

In this #cyberdefenders lab, we investigated a #pcap file from a server that was the victim of an attack. The attackers exploited a critical vulnerability affecting #Apache #ActiveMQ, identified as #CVE-2023-46604, which has a #CVSS score of 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H).

Missed Upwind's eBPF meetup? You can still view it 👀 🐝   Upwind's Tel Aviv meetup featured the following: ⏺ Peter McConnell diving into eBPF and Golang for libpam ⏺ Moshe Hassan provided insights into eBPF security applications and attacker perspectives If you missed the meetup and would like to learn more - we've got you covered. You can view the recording by clicking on the link at the bottom of the post, or view Peter McConnell's deep-dive blog on the topic. These resources will equip you with the fundamentals of eBPF, explore its practical applications in security, and demonstrate how it can elevate your security posture. You'll also see eBPF in action through real-world case studies. Up and Upwind! 🏄♂️ https://lnkd.in/ezYCZnXD https://lnkd.in/eMEenuCC https://lnkd.in/e97q_cND #eBPF #meetup #TelAviv #infosec #Golang #libpam #cloudsecurity