Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
social.tchncs.de is one of the many independent Mastodon servers you can use to participate in the fediverse.
A friendly server from Germany – which tends to attract techy people, but welcomes everybody. This is one of the oldest Mastodon instances.

Administered by:

Server stats:

3.9K
active users

social.tchncs.de: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.6

#manageengine

1 post1 participant0 posts today
Public *
Buttered Jorts

Hey Mastodon, question for my #sysadmin and #DevOps types. Has anyone used #Pester and #PSScriptAnalyzer to set up unit testing for test driven development, particularly on (relatively) simple #PowerShell scripts like you might use for application detection, installation, and uninstallation from a system like #SCCM #Intune or #ManageEngine ?

Apologies for the buzzword bingo, but I’m trying to reach folks who may be following the hashtags, but not necessarily have a connection otherwise.

#TDD#unittests
Public
BSI WID Advisories Feed

#BSI WID-SEC-2024-2054: [NEU] [hoch] #Zoho #ManageEngine #Endpoint #Central: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen und Offenlegung von Informationen

Ein entfernter, authentifizierter Angreifer kann eine Schwachstelle in Zoho ManageEngine Endpoint Central ausnutzen, um vertrauliche Informationen offenzulegen und Sicherheitsvorkehrungen zu umgehen, um so einen Ransomware-Angriff durchzuführen.

wid.cert-bund.de/portal/wid/se

wid.cert-bund.deWarn- und Informationsdienst
Public
Marco Ivaldi

#ManageEngine #ADAudit - Reverse engineering #Windows #RPC to find CVEs

shelltrail.com/research/manage

shelltrail.com/research/manage

shelltrail.com/research/manage

Shelltrail - Swedish offensive security experts · ManageEngine ADAudit - Reverse engineering Windows RPC to find CVEs - part 1 / RPC | Shelltrail - Swedish offensive security expertsFollow along a journey to find vulnerabilities in the RPC functionaliy of ManageEngine ADAudit
Public
🛡 H3lium@infosec.exchange/:~# :blinking_cursor:​

"🚨 Lazarus Group Unleashes CollectionRAT in Sophisticated Campaigns 🚨"

Lazarus Group, a North Korean state-sponsored actor, has been utilizing infrastructure reuse to launch sophisticated cyber attacks. Their latest campaign exploits CVE-2022-47966, a vulnerability in ManageEngine ServiceDesk, to deploy multiple threats including a new malware, CollectionRAT. This RAT showcases capabilities such as executing arbitrary commands and managing files on infected systems. Intriguingly, Lazarus Group is increasingly leveraging open-source tools like the DeimosC2 framework, marking a strategic shift in their attack methodologies. CollectionRAT, along with other tools like the malicious PuTTY Link (Plink), indicates a refined approach in their cyber warfare tactics.

Details: Cisco Talos Blog

Authors: Asheer Malhotra, Vitor Ventura, Jungsoo An

Tags: #Cybersecurity #LazarusGroup #APT #CollectionRAT #DeimosC2 #CVE202247966 #ManageEngine #Plink #NorthKorea #StateSponsoredCyberAttacks 💻🌍🔐

Mitre - Lazarus Group

Cisco Talos Blog · Lazarus Group's infrastructure reuse leads to discovery of new malwareLazarus Group appears to be changing its tactics, increasingly relying on open-source tools and frameworks in the initial access phase of their attacks, as opposed to strictly employing them in the post-compromise phase.
Public
LastBreach

Kritische #Schwachstellen in #VMware CBAC & Zoho #ManageEngine, #Cyberangriffe auf Dole, Bayrischer Rundfunk, Feuerwehr Hamburg, sowie Landratsamt Böblingen und #EU Kommission setzt #TikTok auf Firmengeräten aus – das sind die #Hacker #News der Woche.

lastbreach.de/blog/die-weekly-

LastBreachDie Weekly Hacker News - LastBreachKritische Schwachstellen in VMware Carbon Black App Control und Zoho ManageEngine, Cyberangriffe auf Dole, Bayerischen Rundfunk, Feuerwehr Hamburg, sowie Landratsamt Böblingen und Europäische Kommission setzt TikTok-Nutzung auf Firmengeräten aus. Die Weekly Hacker News gibt es auch als Audio Version auf unserem Youtube Channel, auf unserem Peertube Server lastbreach.tv, sowie auf allen gängigen Podcast Plattformen zum Abonnieren. Klicken Sie auf […]
Public
Erik Wynter

Hi all! I wrote a #python scanner for #CVE-2022-47966, a critical unauthenticated remote code execution (RCE) vulnerability affecting at least 24 #ManageEngine products (all on-premise). CVE-2022-47966 is being exploited in the wild, so patching is a must. The scanner currently supports about 10 of the affected products and is available here: github.com/vonahisec/CVE-2022-
#redteam #blueteam #vulnerability #scanner #pentesting

GitHubCVE-2022-47966-Scan/README.md at main · vonahisec/CVE-2022-47966-ScanContribute to vonahisec/CVE-2022-47966-Scan development by creating an account on GitHub.
Public
securityaffairs

#CISA added #Zoho #ManageEngine RCE (CVE-2022-47966) to its Known Exploited Vulnerabilities Catalog
securityaffairs.com/141248/sec
#securityaffairs #hacking

Security AffairsCISA added Zoho ManageEngine RCE (CVE-2022-47966) to its Known Exploited Vulnerabilities CatalogUS CISA added the Zoho ManageEngine RCE vulnerability CVE-2022-47966 to its Known Exploited Vulnerabilities Catalog. The US CISA added the Zoho ManageEngine remote code execution flaw (CVE-2022-47966) to its Known Exploited Vulnerabilities Catalog. The CVE-2022-47966 flaw is an unauthenticated remote code execution vulnerability that impacts multiple Zoho products with SAML SSO enabled in the ManageEngine setup. The […]
ExploreLive feeds
About