Vicarius

🕷️🦹🏻♀️ Villain of the week 🦹🏻♀️🕷️ ℹ️ CVE-2024-49112 is a critical vulnerability in Microsoft Windows' Lightweight Directory Access Protocol (LDAP). It allows unauthenticated attackers to execute arbitrary code remotely by sending specially crafted LDAP requests. Vulnerabilities of this kind are severe and warrant immediate action to mitigate risks. ⚠️ How worried should you be? This vulnerability poses a serious threat due to its remote code execution capabilities and unauthenticated attack vector. Potential consequences include: - Unauthorized control of affected systems. - Data exfiltration and service disruptions. - The possibility of large-scale network compromise. 👷 Recommended actions: ✔️ Audit and detect potential vulnerable systems. ✔️Apply the latest security patches from Microsoft. ✔️ Restrict LDAP access to trusted networks and users only. ✔️ Monitor LDAP traffic for unusual or unauthorized activity. 🐺 Use these scripts from the Vicarius Research Team: 🔗 Detection: https://lnkd.in/gMq5YQgF 🔗 Remediation: https://lnkd.in/gPARCuSY Let us know if you need help securing your systems or understanding these steps further 🤝

What happens if you put lessons learned in vulnerability management in a box and tie it with a bow? Well, you get a wrapped gift 🎁 Happy holidays! Spread the joy with your coworkers and office neighbors!

Looks like ol' Saint Nick dropped a little Christmas EP! 💿🎶 🔊 https://lnkd.in/epW58fnQ 🔊 Idk about you, but I'm gonna be doing a whole lot of streaming this holiday season. Let us know what your favorite track is in the comments 👇 Have a Very Merry Hacking Christmas! 🎄

Playbooks anyone? 📓 Coach Nahuel gives us the rundown on his strategies he takes to the field 🏈 to win against exposure and tough opponents, aka CVEs. From system hardening for MITRE frameworks to incident response, Nahuel's playbooks are just the beginning of a championship team....which soon could turn into a dynasty 😉

🐧😈 Villain of the Week 😈🐧 CVE-2024-43451 is a critical vulnerability in Microsoft Windows, allowing attackers to obtain a user’s NTLMv2 hash with minimal interaction. This can lead to unauthorized access through pass-the-hash attacks, enabling attackers to impersonate users and access sensitive resources without credentials. 😯 How worried should you be? This kind of vulnerability carries a severe risk, with active exploitation reported in the wild. Potential consequences include: ✔ Unauthorized access to network resources. ✔ Credential theft leading to further compromises. ✔ Potential lateral movement and privilege escalation within the environment. 👷♀️ Recommended actions: 1. Detect vulnerable systems: Use our detection script to identify systems at risk of exploitation. 2. Mitigate the issue: - Disable NTLM authentication where possible. - Enforce SMB signing and Kerberos authentication. 3. Monitor Activity: Audit logs for unusual NTLM-related traffic and interception attempts. 👨🔬 Use these scripts from the Vicarius Research Team: 🔗 Detection: https://lnkd.in/g6ptiz9X 🔗 Remediation: https://lnkd.in/gkKdYH6M Let us know if you need help securing your systems or understanding these steps further 🤝

Back by popular demand! 🎭 Super Security Bros Nahuel Benitez Ryan Patton return to the stage to continue their scripting tour, unlocking numerous secrets along the way! P.S. They might sing some Christmas carols! 😜🎶

Have you been naughty or nice this year? 🎅 Well, that's none of my business. But what IS my business is the latest Patch Tuesday release from jolly ol' St. Microsoft. And here's what you need to know 👇📋 Hit the link if you need some assistance ✌️https://lnkd.in/grsSxFHe

In this duet rendition of The Christmas Song recorded by Nat King Cole, Vicarius singers put a cyber spin on this timeless tune 🎶🎻 Merry Hacking to you! 🌟🎄🎅🏻 Follow for more cyber parodies ☃️

Two days out from Part 2!! ✌️🎄 If you haven't yet, make sure you register here: https://lnkd.in/gkNCgsdA 🎅🎁🎅🎁🎅🎁 Ryan Patton Nahuel Benitez