SafeBreach

SafeBreach is a proud sponsor of #Splunkconf20, stop by our virtual booth to see how to test controls with your Splunk SIEM and automate remediation with Splunk Phantom. Join us at the virtual conference on October 20th21st: http://ow.ly/myA050BXJXv #infosec #bas #cybersecurity

Zoom default settings for many call-in enterprise users are insecure. SafeBreach CTO Itzik Kotler explains design flaw: preexisting users must explicitly add passcode requirement for phone attendees. Read more in this advisory: https://safebreach.com//Security-Advisory-Insecure-Default

Does your complex security stack have gaps? Join top CISOs as they discuss how continuously validating security controls can seal gaps, catch overlaps and secure the stack. Register here to reserve your spot on Oct 22 at 2pm ET: http://ow.ly/uCeN50BRSid #informationsecurity #cybersecurity #bas #ciso

Justify Security Investments by Validating the Effectiveness of Security Controls. An ISE Fireside Webinar @ 2pm ET, October 22 with #2BSecure, SafeBreach, #SiliconValleyBank http://ow.ly/Y4sh50BRcnD #informationsecurity #cybersecurity #ciso #bas

Cybersecurity Observatory releases its carefully-researched 2020 view of the #infosec landscape in the UK, featuring SafeBreach as running the most attack methods (now 18,000 and growing) of all BAS providers. We continuously test and visualize the entire kill chain as part of validating the entire security ecosystem of an enterprise. http://ow.ly/zk6C50BKl7o #informationsecurity #bas #cybersecurity

Iran-Based Threat Actor exploits VPN vulnerabilities, and SafeBreach covers you by addressing US-CERT AA20-259A with additions to our Hacker's Playbook. Learn about these vulnerabilities: http://ow.ly/YnGR50Bt0KF #infosec #bas #cybersecurity

North Korea's #BeagleBoyz are targeting financial institutions to initiate fraudulent international money transfers and ATM cash outs. These bank robberies pose severe operational risk. Learn more about the latest US CERT here: http://ow.ly/eCHs50BbcRd #cybersecurity #FASTCash

Our Peleg Hadar and Tal Be'ery of ZenGo discover CVE-2020-1464 is a ZeroDay that went unfixed for 2 years. #KrebsOnSecurity digs into how that happened: http://ow.ly/k31X50B1Fj0 #vulnerabilities #informationsecurity #Microsoft #BAS #cybersecurity

Microsoft just issued patches for over 100 CVEs. According to Krebs, the most elite of them " is CVE-2020-1337, a bypass of the patch for CVE-2020-1048 found by researchers Peleg Hadar and Tomer Bar of SafeBreach Labs. http://ow.ly/RTtW50AX0vS #Microsoft #informationsecurity #vulnerabilities #bas #cybersecurity

SafeBreach Labs found the CVE-2020-1048 in January, then found a bypass to the path for it. That's now fixed in CVE-2020-1337 issued today. Make sure to update your Windows 10 with the latest patch: http://ow.ly/XM5150AWYg3 #informationsecurity #cybersecurity #vulnerabilities

Dark Reading video: SafeBreach Labs found vulnerabilities in 15-year-old code in Windows Print Spooler; local users can gain privileges or easily launch a DoS attack. Watch the video. http://ow.ly/sfxC50ATFNd #stuxnet #cybersecurity #informationsecurity

We are honored that Shira Akov of SafeBreach has been named to the Top 100 #WomenInCybersecurity for 2020 by Cyber Defense. Congratulations to Shira and the other 99 women leaders on receiving this award! http://ow.ly/T7eN50ASY6x #informationsecurity #cybersecurity

Unify breach and attack simulation (BAS) with risk-based vulnerability management, threat intelligence to move from reactive to highly proactive - and more effective - cybersecurity. Blog explains. http://ow.ly/yZYc50ASLcz #informationsecurity #threatintelligence #bas