Security Boulevard

Author/Presenter: James Ringold

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – Common Ground – Quantum Computing: When Will It Break Public Key Cryptography? appeared first on Security Boulevard.

Can Advanced NHIDR Keep Your Cloud Environment Secure? Enriched with advanced technologies, potential threats also grow in complexity. One such concern circulates around the concept of Non-Human Identities (NHIs) and Secrets Security Management. But, what if there was a way to feel reassured about your security in NHIs? In comes the role of advanced NHIDR— […]

The post Stay Reassured with Advanced NHIDR appeared first on Entro.

The post Stay Reassured with Advanced NHIDR appeared first on Security Boulevard.

Understanding the Vitality of Non-Human Identities in Healthcare Data Protection What if you could significantly diminish security risks in your healthcare organization while enhancing operational efficiency? Non-human identities (NHIs) and Secrets Security Management offer the answer to that pressing question. When the dynamics of securing sensitive data continue to evolve, the role of NHIs in […]

The post Maximizing Data Protection in Healthcare appeared first on Entro.

The post Maximizing Data Protection in Healthcare appeared first on Security Boulevard.

Why Is Secrets Security Essential in Today’s Digital Landscape? Is secrets security, also known as Non-Human Identities (NHIs) management, really that important? If you’re searching for a relaxed audit, the answer is a resounding ‘yes’. NHI management is an indispensable facet of modern cybersecurity strategies across various industries, from financial services and healthcare to DevOps […]

The post Securing Secrets: A Path to a Relaxed Audit appeared first on Entro.

The post Securing Secrets: A Path to a Relaxed Audit appeared first on Security Boulevard.

Why Should Organizations Prioritize Proactive Secrets Rotation? Where digital connectivity is ever-increasing, how can organizations stay one step ahead? One answer lies in proactive secrets rotation – a strategy that is pivotal to maintaining robust cybersecurity health. Not only does this strategy allow companies to prevent unauthorized access to their networks, but it also facilitates […]

The post Staying Ahead with Proactive Secrets Rotation appeared first on Entro.

The post Staying Ahead with Proactive Secrets Rotation appeared first on Security Boulevard.

Author/Presenter: Hubert Lin

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – Common Ground – One Port to Serve Them All – Google GCP Cloud Shell Abuse appeared first on Security Boulevard.

Here at Ignyte, we talk a lot about various overarching information security frameworks, like FedRAMP, CMMC, and ISO 27001. Within these overall frameworks exist a range of smaller and narrower standards, including COMSEC. If you’ve seen COMSEC as a term, you may be passingly familiar with what it is, but if you need to know […]

The post What is COMSEC? Training, Updates, Audits & More appeared first on Security Boulevard.

Join Grip Security on its mission to redefine identity security. Discover how innovation, empathy, and culture are shaping the future of digital protection.

The post Why I Joined Grip Security in Securing the Digital Future appeared first on Security Boulevard.

RSA Conference (RSAC) brings together cybersecurity practitioners from across the globe to learn about the latest cybersecurity defense strategies and tools, connect with industry peers, and share knowledge about the threat landscape.

The post 5 reasons to not miss Sonatype at RSAC 2025 appeared first on Security Boulevard.

Proof-of-concept code has been released after researchers disclosed a maximum severity remote code execution vulnerability in Erlang/OTP SSH. Successful exploitation could allow for complete takeover of affected devices.

Background

On April 16, Fabian Bäumer, Marcus Brinkmann, Marcel Maehren, and Jörg Schwenk of the Ruhr University Bochum in Germany disclosed a critical vulnerability in Erlang/OTP SSH to the OpenWall vulnerability mailing list. Additionally an official advisory was posted to the GitHub project for Erlang/OTP crediting the researchers for their disclosure.

CVE Description CVSSv3 VPR CVE-2025-32433 Erlang/OTP SSH Remote Code Execution Vulnerability 10.0 10

*Please note: Tenable’s Vulnerability Priority Rating (VPR) scores are calculated nightly. This blog post was published on April 18 and reflects VPR at that time.

Analysis

CVE-2025-32433 is a remote code execution (RCE) vulnerability affecting the Erlang/OTP SSH server. The vulnerability exists due to a flaw in the SSH protocol message handling which could allow an unauthenticated attacker to execute arbitrary code. According to the advisory, all users running Erlang/OTP SSH servers are impacted and to assume impact if your application utilizes the Erlang/OTP SSH library. This vulnerability received the maximum CVSSv3 score of 10.0 and when the SSH daemon is running as root, allows an attacker to completely compromise an affected device.

At the time this blog was published, no known exploitation has been observed, however with the ease of exploitation and critical severity, we anticipate attacks will occur soon.

Proof of concept

On April 17, researchers at Platform Security released a public proof-of-concept (PoC) exploit for CVE-2025-32433. The writeup notes that the PoC was generated with the help of ChatGPT and Cursor, and that it was fairly simple to do so using those AI tools.

The PoC initiates an SSH protocol negotiation as a normal client would. But, before authenticating the user, the client sends an unexpected message with an arbitrary command. The vulnerable server will process these messages and execute the commands. A patched server will disconnect immediately upon seeing these messages prior to authentication.

An additional PoC has been released, and the Horizon3 Attack Team posted on X (formerly Twitter) that they had developed a PoC but have chosen not to release it as of writing.

Just finished reproducing CVE-2025-32433 and putting together a quick PoC exploit — surprisingly easy. Wouldn’t be shocked if public PoCs start dropping soon. If you’re tracking this, now’s the time to take action. #Erlang #SSH pic.twitter.com/hBqJMfFHMN

— Horizon3 Attack Team (@Horizon3Attack) April 17, 2025

Solution

Erlang/OTP has released patches to address this vulnerability.

Affected Versions Fixed Versions OTP-27.3.2 and below OTP-27.3.3 OTP-26.2.5.10 and below OTP-26.2.5.11 OTP-25.3.2.19 and below OTP-25.3.2.20

If immediate patching cannot be performed, restricting access via a firewall or disabling the SSH server are mitigation steps provided by Erlang/OTP. However, we strongly recommend upgrading as soon as possible to fully remediate this vulnerability.

Identifying affected systems

A list of Tenable plugins for this vulnerability can be found on the individual CVE page for CVE-2025-32433 as they’re released. This link will display all available plugins for this vulnerability, including upcoming plugins in our Plugins Pipeline.

Additionally, customers can utilize Tenable Attack Surface Management to identify hosts running Erlang/OTP SSH Server.

Get more information

• Openwall mailing list announcement for CVE-2025-32433
• Advisory for CVE-2025-32433

Join Tenable's Security Response Team on the Tenable Community.

Learn more about Tenable One, the Exposure Management Platform for the modern attack surface.

The post CVE-2025-32433: Erlang/OTP SSH Unauthenticated Remote Code Execution Vulnerability appeared first on Security Boulevard.

Author/Presenter: Yotam Perkal

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – Common Ground – Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation appeared first on Security Boulevard.

Chris Kreb, the former CISA director who has come under fire from President Trump for refusing to support claims at the 2020 election was tampered with, resigned from his position with cybersecurity vendor SentinelOne, telling employees that "this is my fight, not the company's."

The post Krebs Steps Down from SentinelOne, Vows to Fight Trump Attack appeared first on Security Boulevard.

What is a White-Labeled XDR Platform? XDR stands for Extended Detection and Response — a security solution that integrates multiple security layers (endpoint, network, server, cloud, and more) into a unified system. It provides end-to-end visibility, real-time threat detection, and automated responses across the entire IT environment. Now add white labeling to the mix. A

The post White-Labeled XDR Platform appeared first on Seceon Inc.

The post White-Labeled XDR Platform appeared first on Security Boulevard.

Authentication issues block 75% of enterprise SaaS deals, with companies losing millions in revenue annually. This deep dive reveals how forward-thinking SaaS leaders transform auth from a technical headache into a strategic advantage to accelerates enterprise adoption and shortens sales cycles.

The post The Enterprise-Ready Dilemma: Navigating Authentication Challenges in B2B SaaS appeared first on Security Boulevard.

LLMs won’t fix a broken SOC, but apprenticeship might. ATLSecCon 2025 revealed how outdated hiring and cultural gatekeeping are breaking cybersecurity from the inside out.

The post ATLSecCon 2025: Security Readiness Means Human Readiness appeared first on Security Boulevard.

Fear is one of the greatest barriers to innovation and entrepreneurship. The fear of failure. The fear of imperfection. The fear of not having the...Read More

The post Don’t Let Fear Stop You from Innovating or Launching a Startup Business appeared first on ISHIR | Software Development India.

The post Don’t Let Fear Stop You from Innovating or Launching a Startup Business appeared first on Security Boulevard.

In today's complex threat landscape, gut feelings and disparate risk scores are no longer sufficient for effective cyber risk management. Organizations need concrete, data-driven insights to make informed decisions, prioritize security investments, and ultimately, protect their bottom line. This is where cyber risk quantification (CRQ) steps in, offering a powerful lens through which to view and manage cyber threats. By translating cyber risks into financial terms, CRQ delivers invaluable cyber risk insights that resonate across all levels of an organization, from the security analyst to the boardroom.

The post Unlock the Power of Financial Quantification of Cyber Risk appeared first on Security Boulevard.

For most MSPs, Security Awareness Training (SAT) is an unavoidable part of the service stack, but let’s be honest, it often feels more like a recurring project than a meaningful security strategy.

The post Reimagining SAT For MSPs: From Static Lessons to Smart Defense appeared first on Security Boulevard.

Overview On April 16, 2025, NSFOCUS CERT detected that Oracle officially released the Critical Patch Update (CPU) for April. A total of 390 vulnerabilities with different degrees were fixed this time. This security update involves Oracle MySQL Connectors, Oracle MySQL Server, Oracle Java SE, Oracle Fusion Middleware, Oracle Financial Services Applications, Oracle Communications Applications and […]

The post Critical Patch Update Announcement in April for All Oracle Products appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post Critical Patch Update Announcement in April for All Oracle Products appeared first on Security Boulevard.

Credential stuffing is a pervasive and increasingly sophisticated cyberattack that exploits the widespread habit of password reuse among users. By […]

The post Understanding Credential Stuffing: A Growing Cybersecurity Threat appeared first on Security Boulevard.