Hacker-grupper kompromitterer sikkerheds-testnings-applikationer for at bryde ind og bevæge sig lateralt inden for virksomheds-miljøer
Ifølge Pentera Labs er flere Fortune 500-virksomheder og sikkerheds-udbydere blevet hacket ved hjælp af denne teknik
Målrettede apps omfattede blandt andet #OWASP #JuiceShop, #DVWA og #Hackazon
https://pentera.io/blog/exposed-cloud-training-apps-pentera-labs/
Hackers exploit security testing apps to breach #Fortune500 firms
Threat actors are exploiting misconfigured web applications used for security training and internal penetration testing, such as DVWA, OWASP Juice Shop, Hackazon, and bWAPP, to gain access to cloud environments of Fortune 500 companies and security vendors.
#TASMAC nameboard themed #JuiceShop Board ( #JuiceMAC )
#MondayFunday Credits: #Whatsapp
Die #DKB reagiert humoristisch erniedrigend auf eine Anfrage zu einer potentiellen unautorisierten Buchung:
"vielen Dank für Ihre Anfrage. Wir wissen, wie wichtig Ihnen eine schnelle Rückmeldung ist, und bedauern sehr, dass Sie diesmal länger warten mussten.
Falls Ihr Anliegen zu den von der DKB ausgegebenen Karten inzwischen gelöst ist, müssen Sie nichts weiter unternehmen. Ihre schriftliche Anfrage wird nicht weiter bearbeitet."
Was für eine Frechheit. Was für ein Saftladen. #juiceshop
First day of #osco2024 !!! I am looking forward to our keynotes. For one @bkimminich with his #JuiceShop !
#OWASP #DSOMM and #JuiceShop User Day are coming to Global AppSec SF!
Explore techniques for delivering effective secure coding workshops using Juice Shop and strategies for tailoring #appsec initiatives with the DevSecOps Maturity Model (DSOMM).
Learn more & REGISTER: https://sf.globalappsec.org/
Join the shared User Day of @owasp #DSOMM and #JuiceShop on Sep 25th, the day before #GlobalAppSec San Francisco 2024! The agenda includes intros, demos, workshops and even a live CTF:
https://owasp.org/www-project-juice-shop/#div-userday2024
Register now on https://www.eventbrite.com/e/owasp-global-appsec-san-francisco-2024-tickets-723699172707 because seats are very limited!
Wait, you haven't registered for the Open Security Conference yet? Then be quick and secure your package now - space is limited! 🚀
✅ Register: https://register.opensecurityconference.org
💡 Learn from our keynote speakers Björn Kimminich and Yvonne Johnson: https://opensecurityconference.org/conference/keynotes
💜 Thrive on the osco values: https://opensecurityconference.org/about/values
See you at this special kind of security event on October 4-6 close to Frankfurt/Main, Germany 😎
#cybersecurity #security #InfoSec #OWASP #JuiceShop #OpenSpace #osco #osco24 [lisi]
#cryptohagen
The New Oil
Deepak Kumar Vasudevan
muelli
Janina Nemec
owasp_juiceshop 🧃
OWASP Foundation
Open Security Conference