Matthew Bates

🔧 I was inspired by SCADA-Common-File-Extensions.tsv -Information Trust Institute (ITI) GitHub and created a Python script to automate this list. While there is another script, ICSExtearch, a PowerShell script for Windows, my script works on any system—Linux, Windows, and Mac. This tool is handy for ICS engineers to find sensitive ICS files (pc5, apa, s5d ...etc) on their systems. You can download load the script here :  https://lnkd.in/dZA3hwzA #icssecurity #otsecurity

82

3 Comments

Windows PHP server owners patch now - PHP ADDRESSED CRITICAL RCE FLAW POTENTIALLY IMPACTING MILLIONS OF SERVERS Researchers at cybersecurity firm DEVCORE discovered a critical remote code execution (RCE) vulnerability, tracked as CVE-2024-4577, in the PHP programming language. An unauthenticated attacker can exploit the flaw to take full control of affected servers. https://lnkd.in/gq3VMaQp (Thanks Critical Insight for the reminder)

13

5 Comments

I’ve written a number of posts on testing and rolling out security controls safely on my blog including this one from 2020 ~ Better Testing for Better Outcomes. I have a bunch of others in a thread on X (sorry it’s the easiest right now) and on my blog. Taking the time to properly test and building tests into the software itself can prevent a lot of pain later. I explain how to do that in my posts and show examples of things not properly tested as well. https://lnkd.in/gcJ-PeG

10

4 Comments

🔍 Unlock access to our Free Detection Engineering Kickstart course and Project! If you're venturing into a career in Detection Engineering, this course is a must! Plus, learn how to get a free Splunk Enterprise license for 60 days to use for your new project! Comment “Access” and I'll send you the details straight to your inbox! #cybersecurity #ellingtoncyberacademy #engineering #siem

14

12 Comments

🚨 CISA Alert: Urgent Update Needed for Apache Flink Vulnerability A critical vulnerability (CVE-2020-17519) has been added to the CISA Known Exploited Vulnerabilities Catalog. Ensure your systems are secure by updating to the latest versions. 👇 Learn more: https://lnkd.in/e29Bx-Bj --- #TuxCare #linux #cybersecurity #opensource #technology #ransomware #linuxsecurity #software #hacking #devops #privacy

11

I've been hearing more and more to prioritize SCA findings utilizing CISA's known exploited vulnerabilities (KEV) catalog. I wondered how many, if any, of these impacted open source software. Comparing GitHub's security advisory database and KEV, there are ~112 (+/- 5 because of sloppy scripting). That is 0.5% of reviewed advisories, assuming GitHub has properly assigned CVE aliases. To be honest, this is more than I expected. Suggesting it could in fact be a meaningful prioritization tool. But more needs to be considered.

8

6 Comments

What does security debt (old, unresolved flaws in code) look like across applications in your organization? Perhaps similar to one of these 20 anonymous organizations we sampled during a recent analysis of #appsec scan data. Each rectangle represents a different organization, which is subdivided into sections corresponding to the size of its active applications. The color applied to those applications measures their density of security debt. You can think of this as a depiction of the shape and status of the application attack surface for each organization. Organization 4 is relatively clear of debt across most of its applications, with a few exceptions in the lower right corner. Organization 9 below it shows pretty much the opposite trend—one tiny debt-free application floats alone in a sea of debt. Other organizations in this sample exhibit a relatively even distribution of debt across applications (e.g., Org 14) to an application attack surface that runs the gamut of debt density (e.g., Org 6). So, what makes one organization look so different from another when it comes to the distribution of security debt across their applications? Is it possible for teams to reverse indebtedness for the applications they develop and manage? Download the full report from Veracode, with analysis by Cyentia Institute, to find out! Get is here: https://lnkd.in/evh5jm2Z #softwaresecurity #applicationsecurity #devsecops #devops

53