Charles Flond

@wiz_io Getting your hands dirty. Create an AWS account, play with it, spawn a Kali Linux and have some fun. Fundamental understanding of the different OSI layers is also very useful to understand the different type of attack vectors. So worth reading books or watching videos about it.

🚨 Calling All Cloud Security Veterans! 📢 What piece of advice or resource would you give to someone starting out in #cloudsecurity?

New threat targeting #VMwareESXi servers! 12% are vulnerable to CVE-2021-21974, but don't panic 💆‍♀️. Patch your servers, stay vigilant, and stay informed on prevention 🔍💡 We've got you covered — check out our blog for expert tips on #RansomwarePrevention: wiz.io/blog/ransomwar…

Antivirus and EDR solutions tricked into acting as data wipers ⏭️ ça c’est une méthode d’attaque bien vicieuse…. bleepingcomputer.com/news/security/…

Researchers have uncovered a critical unpatched RCE #vulnerability (CVE-2022-26134) affecting #Atlassian Confluence Server and Data Center products that is being actively exploited by hackers. Read details: thehackernews.com/2022/06/hacker… #infosec #cybersecurity #hacking

📢New Blog - Mirai goes Stealth – TLS & IoT Malware 💥TLS Mirai malware seen in cloud attacks 💥Yara rules lacework.com/blog/mirai-goe… #Linux #Malware #Mirai #cloud #Yara

New Windows and #Linux Flaws Give Attackers Highest System Privileges (SYSTEM / root) Details: thehackernews.com/2021/07/new-wi… #infosec #cybersecurity

Cloud Security Blind Spots: Where They Are and How to Protect Them bit.ly/3faO4tf by @kellymsheridan #cloud #cloudsecurity #RSAC

🔥 WARNING !!! APT hackers are exploiting a new UNPATCHED 0-DAY critical authentication bypass #vulnerability (CVE-2021-22893) in Pulse Connect Secure Gateway to breach organizations worldwide. Details — thehackernews.com/2021/04/warnin… Temporary mitigations currently available.

Elastic 7.12 has arrived! It brings the GA of schema on read, a new frozen tier for searchable object stores, autoscaling for Elastic Cloud, and more. Read our release blog: go.es.io/3ri9wPA

Nzyme v1.0 : An open-source project to defend your wireless networks nzyme.org/post/nzyme-v1-…

Solitude: A new open-source #privacy analysis tool that enables you to conduct your own privacy investigations into where your private data goes once it leaves your web browser or mobile device. github.com/nccgroup/solit…

My yara rule of #Dearcry based the encryption scheme. github.com/sebdraven/yara… Don't hesitate to open issues or comment and share ! cc @circl_lu

Excellent tool ! Give it a try for Christmas :)

🔥 NXNSAttack A new DNS protocol #vulnerability could let attackers launch large-scale amplified #DDoS attacks by tricking public DNS resolvers (run by ISPs, Google, CF, DYN, etc.) into sending large numbers of packets to any website. Details — thehackernews.com/2020/05/dns-se… #infosec

Significantly decrease your Elasticsearch heap memory usage | Elastic Blog elastic.co/blog/significa…

⚠️ WARNING !!! It's possible to hack iPhones / iPads just by sending an email to targeted users. Hackers have been exploiting critical 0-click + 0-day RCE #vulnerability in the default mail app installed on millions of Apple devices. Details — thehackernews.com/2020/04/zero-d… #infosec

⭐StarBleed Bug Researchers uncover a new unpatchable hardware #vulnerability in Xilinx FPGA chips that could expose critical devices—powering consumer electronics, data centers, aerospace, automotive & more—to remote hackers. Details: thehackernews.com/2020/04/fpga-c… #cybersecurity

Equinix, the $47B enterprise data center company, continues to thrive. In 2019, Equinix projects: $5.6B revenue/ 10% growth $2.7B EBITDA/ $825M dividends $2.0B capital investments Hybrid and multi-cloud environments are likely underestimated. (Benchmark invested in 1999)

JetBrains, a Prague based developer tools company behind IntelliJ, in 2018: $270M revenue/ 33% growth $100M net income/ $134M free cash flow 6M users/ 405k customers $0 raised since founding in 2000 The developer tools market is enormous and can enable impressive businesses.

How the Boeing 737 Max Disaster Looks to a Software Developer spectrum.ieee.org/aerospace/avia…