Mitesh Wani

🔍📄 Introducing the NIST CSF 2.0 Audit Checklist for the Identify Function! Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF 1️⃣ Introduction to the Document: Step up your cybersecurity game with this comprehensive NIST CSF 2.0 Audit Checklist for the Identify function. This essential guide helps organizations assess and enhance their cybersecurity posture by identifying critical assets, risks, and vulnerabilities. 2️⃣ What's in the Document: This checklist provides a detailed framework to help you systematically evaluate the Identify function of the NIST Cybersecurity Framework. It includes comprehensive questions and guidelines covering asset management, business environment, governance, risk assessment, and risk management strategy. 3️⃣ Conclusion: Strengthen your organization's cybersecurity foundation with this NIST CSF 2.0 Audit Checklist for the Identify function. By implementing these practices, you can proactively manage and reduce cybersecurity risks, ensuring a more resilient and secure business environment. Download the document now and take the first step towards robust cybersecurity management! #nistcsf #nist #cybersecurity #identify #audit #checklist #infosec #compliance

572

27 Comments

Who is "kiberphant0m," the Threat Actor Behind the BSNL Security Data Breach? 🕵️‍♂️💻 'kiberphant0m,' a notorious Blackhat hacker infamous on the Dark Web. This alias has recently claimed responsibility for the breach of Bharat Sanchar Nigam Limited (BSNL), India’s prominent telecom company. 'kiberphant0m' is no stranger to high-profile cyber attacks. According to their Telegram group, this threat actor boasts possession of data from major financial institutions across the US, UK, Egypt, and India. The critical data stolen from these institutions is being sold on the dark web, posing a significant threat to global cybersecurity. BSNL Breach Details: This marks the second time in six months that BSNL has fallen victim to a data breach. This recent attack has resulted in the leak of 278GB of sensitive data, including: International Mobile Subscriber Identity (IMSI) numbers SIM card details Home location register data Critical security keys Alarmingly, this data is priced at just $5000 on the dark web. Key Questions Arising: ❓Were the necessary steps not taken after the first breach? ❓Is the security of customer data not the top priority? ❓ How effective and swift is the incident response team? ❓ What will be the long-term impact of this breach? Call to Action: Organizations must reassess their cybersecurity strategies, ensure all vulnerabilities are addressed, and prioritize customer data protection. It’s not just about responding to incidents, but proactively preventing them. Stay informed, stay secure! 🌐🔒 #CyberSecurity #DataBreach #BSNL #CyberThreats #Infosec #CyberAwareness

32

7 Comments

Some security teams and their members be like:- 1. Qualys and nessus chala deta hu, Red team bn gyi huehuehue🤡 2. Pentest? Ye kya bol rha hai vro? Av toh 4 ticket open kiye JIRA pr, qki Cookie attributes nai tha request mein. wo b toh pentest hai na? 🤡🤡 3. Are Are Are!!!! In-depth q ja rha bhai?? Qualys, tenable and acunatix toh hai hi Scan kr dega🤡🤡🤡🤡 Hamara toh Bug bounty program hai, hm P1 k liye $800 dete hain😾😾😾 4. Bhai tune XSS, Request smuggling report kiye toh kya hua? Documentation mein 1 extra line q add kr di? Documentation is important. Tujhe nhi aata pentest. And ironically they would be able to justify they are CORRECT.

118

2 Comments

🔎 Detecting the Mysteries of Malware: Exploring YARA & Sigma in Hack The Box 📦 In #HTB Academy, the YARA & Sigma module combines digital forensics, threat hunting and a touch of reverse engineering via static analysis on #Malware. YARA & Sigma rules can be found in a SOC Analyst’s toolkit to build robust security operations which enhances capabilities to detect and combat threats while #threathunting in Windows or Linux. From this module I was able to: 🎨Dive into the art of crafting and create precise YARA rules, both manually and with automation tools, and I applied the rules based on unique files, processes and memory dumps available. ⚡Leverage #Volatility to apply an investigative approach in extracting indicators into rules of detection, this involved process analysis and dissection of memory dumps as part of a forensic memory investigation. 🕸️ Define Sigma rules to translate into queries compatible with various SIEM systems i.e. Splunk, ElasticSearch, or QRadar. This translation process allows for seamless integration and application of Sigma rules across different platforms. The YARA & Sigma module was built well and can reinforce #DFIR and #MalwareAnalysis skills/capabilities. ⚙️Continuous learning and hands-on practice are the important to stay ahead in this ever-evolving field.

43

🔒 BSNL Data Breach: Millions of Users at Risk! 📢 Attention cybersecurity professionals and BSNL users! India's state-owned telecom provider, BSNL, has suffered a major data breach exposing millions of users to significant threats. 🚨 What Happened? 🚨 A threat actor known as "kiberphant0m" compromised over 278GB of sensitive data, including: 📱 International mobile subscriber identity (IMSI) numbers 💳 SIM card details 🌐 Home location register (HLR) data 🔑 Critical security keys ⚠️ What are the potential risks? ⚠️ 🔒 SIM Cloning & Identity Theft 💸 Financial Losses 📴 Service Disruptions 🏴 National Security Threats This is the second data breach for BSNL in just six months, raising serious concerns about their data security practices. ❗ Why This Matters? ❗ The compromised data goes beyond typical user information. It includes critical operational data that could be used for sophisticated attacks not only on BSNL but also on interconnected systems, potentially impacting national security. 💡 What can you do? 💡 📣 Share Awareness: Let your network know about the BSNL breach and the potential risks. 📧 Urge BSNL to Act: BSNL needs to investigate the breach, improve security measures, and be transparent with their users. 🔐 Educate Users: Advise BSNL users to monitor accounts, enable two-factor authentication, and stay vigilant against phishing attempts. Let's work together to raise awareness and hold companies accountable for protecting user data! Learn more: https://lnkd.in/gsPTrykw #BSNL #DataBreach #Cybersecurity #cybersecurityawareness #vapt

12

📊Generative AI framework 🚀 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF #AI #AIGOVERANCE #GENAI #ARTIFICIALINTELLIGENCE #FRAMEOWRK

74

4 Comments

SOC Monitoring, has a weird anomaly and trend .. Developed, promoted and hoaxed by industry itself. "Everything is Tagged and Called, An Incident" This tendency of calling everything an incident dilutes so many things, both in monitoring & response. A lot of unclear processes, botched up responses and messed up ownership is because of this tendency. Top Things to Remember (And, Implement) 1. Alert is not an incident (even critical ones) 2. Incident is not a breach (till it is investigated) 3. Breach is when system access or data damage is in play Lot of orgs overload their system and bandwidth, with documentation of the alerts, considering them as an incident. That causes several unwarranted and unnecessary impacts and influences. 1. Noise levels in response eco system go way up 2. When a real incident takes place, it does not get attention 3. Culture becomes more documentation centric than response A lot of this happens, when you don't have a designed, stated and owned incident response process and plan adopted. When your response model (is-kind-of) is buried in monitoring model, this happens a lot. Focus on adopting a proper response plan and process. That saves the day, a lot more often, than just monitoring. #cyberattack #cyberbreach #breach #attack #incidentresponse #cyberincident #goal

19

🔍 Discover the NIST CSF 2.0 Audit Checklist for the Protect Function! 🔐 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF 1️⃣ Introduction to the Document: Enhance your cybersecurity framework with this detailed NIST CSF 2.0 Audit Checklist, specifically designed for the Protect function. This essential resource aids organizations in safeguarding their information systems and critical infrastructure. 2️⃣ What's in the Document: This checklist covers comprehensive audit steps to evaluate and enhance your protective measures, including access control, data security, and protective technologies. It offers practical guidance to ensure your organization meets the NIST CSF 2.0 standards and fortifies its defenses against cyber threats. 3️⃣ Conclusion: Strengthen your cybersecurity posture with this NIST CSF 2.0 Audit Checklist for the Protect function. By implementing these best practices, you can ensure robust protection of your sensitive data and critical assets. Download now to stay ahead of cyber threats and safeguard your organization. #NIST #NISTCSF #Infosec #Audit #Checklist #Cybersecurity #protect #Compliance #GRC

432

13 Comments

What is the difference between SOC and VAPT? SOC is focused on real-time monitoring and response to security incidents, while VAPT is focused on identifying and addressing vulnerabilities before they can be exploited by cyber attackers. Then why does any company interviewer ask SOC questions instead of VAPT? Is it possible for a ONE person to do VAPT as well as SOC?

4

1 Comment

Topics covered: -> Incident Handling -> Cyber Kill Chain -> Incident Handling Process Overview -> Preparation Stage (Part 1) -> Preparation Stage (Part 2) -> Detection & Analysis Stage (Part 1) -> Detection & Analysis Stage (Part 2) -> Containment, Eradication, & Recovery Stage -> Post-Incident Activity Stage https://lnkd.in/dnbRTRsN

2

1 Comment

Free Interactive Demo on Android Bug Bounty by The Hacktivists! Agenda for the Demo: 👉 Introduction to Android Application Security 👉 Overview of Common Vulnerabilities 👉 Advanced Exploitation Techniques 👉 Live Demonstration 👉 Q&A Register below to join us Tomorrow, 2nd May, at 9:15 PM (India time). The demo is free to attend, but limited seats are available. 📝 Register now for a Free Demo Session! 👉 Register now for our free demo by clicking this link: https://lnkd.in/gHjYtpCM 👉 Method 2 to reserve your seat: https://lnkd.in/gdqDTcvv 👉 What is included in the Android Bug Bounty Training?: https://lnkd.in/gG_uXfX 🎯 Upon completing the training program, you will receive a certificate of completion from The Hacktivists and 35 CPE Credits. Contact Details: 📌 E-Mail: info@thehacktivists.in  📌 WhatsApp: https://wa.me/919680981337  📌 Website: https://lnkd.in/g9T7Rt3X #thehacktivists #bugbounty #cybersecurity #mobilesecurity #android #hacking #freedemo #hackerone 

1

1 Comment

PCI DSS V-4.0 Requirement 1: Install and Maintain Network Security Controls. ◾ 1.3 Network access to and from the cardholder data environment is restricted. ◾ 1.3.1 Inbound traffic to the CDE is restricted as follows: • To only traffic that is necessary. • All other traffic is specifically denied.                                               🖋 This ensures only necessary traffic reaches the systems storing or processing CHD. It filters out unauthorized traffic, reducing the risk of attackers compromising the CDE. ◾ 1.3.2 Outbound traffic from the CDE is restricted as follows: • To only traffic that is necessary. • All other traffic is specifically denied.                                                      🖋 This is basically the opposite of whereas you safeguard traffic attempting to exit the CDE. This requirement is to prevent malicious individuals who are already in the network from communicating with an untrusted external host. All outbound traffic should be evaluated to ensure it follows established, authorized rules. 🔺 Some of the benefits of restricted access are reduced risk of unauthorized access and data breaches. This can also minimize the damage of a breach by restricting access. Hackers will only be able to access the data they have permission to see, limiting the amount of exposed CHD. Following these requirements demonstrates your commitment to data security and helps you comply with other relevant regulations. 🔺 Have you ever been to a physical location of a bank and when you reach the front door, they are required to buzz you in to enter. And when you exit the bank, you are again trapped between two doors, and they buzz you back outside if you are deemed worthy. Yeah, it’s kind of like that. Monitor what enters and exits your CDE..... 🔐 💳

26

🔍 Introducing the Cyber Security Program Audit Guide! Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF 📘 What’s Inside: An overview of the guide and its purpose in enhancing your cybersecurity efforts. What is in the document: Detailed risk assessment procedures, control evaluation steps, compliance checklists, and best practices for continuous improvement. Conclusion: Equip your team with essential tools and knowledge to bolster your cybersecurity posture. Stay proactive and secure in an ever-evolving digital landscape. #cybersecurity #audit #isms #auditguide #auditprocess #riskmanagement #compliance #grc #infosec

77

6 Comments

Designing a secure system? Remember these key aspects: - Integrate security within the design - Implement encryption, authentication, and authorization - Manage vulnerabilities effectively - Ensure audit and compliance - Prioritize data protection and privacy - Stay updated on the impact of new emerging technologies on your application. Thanks for ByteByteGo very helpful sheet 👍👍👍👍👍 #secure_design #grcico

85

1 Comment

📅🔐 Introducing The InfoSec Annual Calendar! Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF Stay ahead of the game with this comprehensive InfoSec Annual Calendar! This essential document outlines key cybersecurity initiatives and tasks that need to be carried out throughout the year to ensure robust information security. 🚀 What's in the Document: A month-by-month breakdown of crucial InfoSec activities. Detailed tasks to enhance your security posture. Key initiatives to mitigate risks and protect sensitive information. Timelines for policy reviews, audits, training sessions, and more. 🔍 Conclusion: Empower your organization with a structured approach to information security. This InfoSec Annual Calendar is designed to help you plan, execute, and monitor your security efforts effectively. Download it now and make 2024 your most secure year yet! #cybersecurity #infosec #annual #calendar #securityinitiatives #ISMS

46

7 Comments

Exfiltrate WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability. video: https://lnkd.in/gwszdzXu #dataexfiltration #cve #cybersecurity #informationsecurity #whatsapp

11

I've published a writeup for ALL forensics challenges from ICMTC CTF 2024 (Qualifications phase). I hope all readers derive benefits from reading it ❤️. Thanks to (Military Technical College – الكلية الفنية العسكرية). #ICMTC #CTF #cybersecurtiy #digitalforensics

28

2 Comments