Jason Hart (@Hart_Jason) header
Jason Hart (@Hart_Jason) profile picture

Jason Hart

@Hart_Jason

Double award winning Cyber Security Expert, Visionary in the World of Cyber Security and a Forbes Technology Council Member #Cyber_Security #Disruption

 Bristol, England UK
jasonhart.co.uk
Joined July 2009
  • Tweets2.5K
  • Following1K
  • Followers6.7K
742Media
Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)Photo by Jason Hart (@Hart_Jason)
Aligning The SOC As A Cost Of Doing Business hubs.li/Q02crfZJ0 Written by @Hart_Jason of @rapid7
1
1
238
Jason Hart retweeted
Raj Samani (@Raj_Samani) profile picture
Raj Samani@Raj_Samani3 Oct 2023
We have now posted our @rapid7 analysis into CVE-2023-40044, a .NET deserialization vulnerability affecting the Ad Hoc Transfer module of WS_FTP Server. Now available on @AttackerKb - H/T @stephenfewer attackerkb.com/topics/bn32f9… #infosec #cybersecurity
Rapid7 Analysis: CVE-2023-40044

Rapid7 Analysis: CVE-2023-40044

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the...

rapid7.com
4
4
906
Jason Hart retweeted
Raj Samani (@Raj_Samani) profile picture
Raj Samani@Raj_Samani5 Oct 2023
Our latest @rapid7 analysis details CVE-2023-22515, "a critical privilege escalation vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center" more details here: rapid7.com/blog/post/2023/10… #infosec #cybersecurity
CVE: Zero-Day Privilege Escalation in Confluence Server & Data Center | Rapid7 Blog

CVE: Zero-Day Privilege Escalation in Confluence Server & Data Center | Rapid7 Blog

On 10/4/2023, Atlassian published a security advisory on CVE-2023-22515, a privilege escalation vulnerability affecting Confluence Server & Data Center.

rapid7.com
2
1
858
How To Cultivate A Thriving Security Culture hubs.li/Q022ClLm0 Written by @Hart_Jason of @rapid7
1
1
172
Jason Hart retweeted
Rapid7 (@rapid7) profile picture
Rapid7@rapid713 Jul 2023
We're pleased to share that Rapid7 CTO @Hart_Jason helped to secure @EM360Tech's Most Popular Podcast of Q2, 2023! See why it reached breaking numbers with the EM360 audience here: r-7.co/3OlHZfb
Image from Rapid7 (@rapid7)
2
3
1,669
Jason Hart retweeted
Raj Samani (@Raj_Samani) profile picture
Raj Samani@Raj_Samani3 Aug 2023
Our latest @rapid7 analysis details CVE-2023-35082, a new vulnerability that allows unauthenticated attackers to access the API in older unsupported versions of MobileIron Core (11.2 and below). rapid7.com/blog/post/2023/08… #infosec #cybersecurity H/T @stephenfewer
Image from Raj Samani (@Raj_Samani)
3
6
935
Available on @AttackerKb is our analysis detailing CVE-2023-20887 an unauthenticated command injection vulnerability in VMware Aria Operations for Networks. Details/IoCs here: attackerkb.com/topics/gxz1cU… #infosec #cybersecurity
Image from Raj Samani (@Raj_Samani)
4
2
772
Our new @rapid7 advisory details three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway. Note: CVE-2023-3519 is known to be exploited in the wild. rapid7.com/blog/post/2023/07… #infosec #cybersecurity
Image from Raj Samani (@Raj_Samani)
2
1
2
1,301
Jason Hart retweeted
Raj Samani (@Raj_Samani) profile picture
Raj Samani@Raj_Samani6 Jun 2023
Now available - @velocidex artifact that "enables scoping EventLogs from Progress Software’s MoveIT File Transfer designed to assist in identifying exfiltration resulting from the exploitation of CVE-2023-34362" docs.velociraptor.app/exchan… #DFIR #infosec H/T @mgreen27 @scudette
Image from Raj Samani (@Raj_Samani)
5
8
1,716
Technical analysis detailing CVE-2023-25690 in Apache HTTP Server 2.4.56 now available in @AttackerKb - Its CVSS base score is 9.8, as this can theoretically bypass access controls attackerkb.com/topics/0Uka1V… #infosec #cybersecurity
Image from Raj Samani (@Raj_Samani)
6
4
1,499
Update on AttackerKB detailing CVE-2023-28771 Improper error message handling in Zyxel ZyWALL/USG "which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device" attackerkb.com/topics/N3i8dx… #infosec #cybersecurity
Image from Raj Samani (@Raj_Samani)
5
4
1,223
Study by @Sophos details the amount companies are paying following #ransomware demands with "The average payout by companies with revenues of more than $5bn a year was just under $2.5m" theguardian.com/technology/2… #malware #cybersecurity #infosec
Ransomware payments nearly double in one year

Ransomware payments nearly double in one year

British cybersecurity firm also finds UK ransom payments even higher than global average

theguardian.com
5
8
1,304
Analysis into CACTUS #ransomware where "access was obtained from a VPN server with a VPN service account. Following this, an SSH backdoor is established to the threat actor’s C2" kroll.com/en/insights/public… #malware #infosec H/T @KrollWire
Image from Raj Samani (@Raj_Samani)
4
5
1,023
Jason Hart retweeted
Raj Samani (@Raj_Samani) profile picture
Raj Samani@Raj_Samani9 May 2023
Analysis into Rapture #ransomware courtesy of @TrendMicro where the "whole infection chain spans three to five days at most" more details and link to IoCs here: trendmicro.com/en_ca/researc… #malware #infosec #cybersecurity
Image from Raj Samani (@Raj_Samani)
9
10
2,115
A fantastic episode of Selling Cyber with Greg van der Gaast and Simon L. as they chat with @Hart_Jason and @davehiggsy around how Rapid7 are leveraging outcome based selling in customer engagements, and how Rapid7 tooling can be used to highlight root is…lnkd.in/efMJkCf3
A fantastic episode of Selling Cyber with Greg van der Gaast and Simon L. as they chat with Jason...

A fantastic episode of Selling Cyber with Greg van der Gaast and Simon L. as they chat with Jason...

A fantastic episode of Selling Cyber with Greg van der Gaast and Simon L. as they chat with Jason Hart and David Higgs around how Rapid7 are leveraging outcome based selling in customer engagements,...

linkedin.com
1
1
170
IoCs associated with the X_Trader Supply Chain Attack targeting critical infrastructure detailed below courtesy of @symantec symantec-enterprise-blogs.se… #malware #cybersecurity #3CX
Image from Raj Samani (@Raj_Samani)
3
5
1,091
.@Hart_Jason with @ForbesTechCncl reminds us that effectively implementing #cybersecurity requires a shift in mindset from the top of the organization. As a #leader, take this opportunity to engage in #upskilling practices. forbes.com/sites/forbestechc…
1
1
2
137
"the LockBit operation uses encryptors designed for attacks on Windows, Linux, and VMware ESXi servers. However, as shown below, this archive also contained previously unknown encryptors for macOS, ARM, FreeBSD, MIPS, and SPARC CPUs." bleepingcomputer.com/news/se… #malware #ransomware
Image from Raj Samani (@Raj_Samani)
5
6
1,463
Overview of the 3CX attack flow courtesy of @fr0gger_ #cybersecurity #infosec
Image from Raj Samani (@Raj_Samani)
1
9
9
1,538
Jason Hart retweeted
Rapid7 (@rapid7) profile picture
Rapid7@rapid731 Mar 2023
Rapidly-advancing technology is making it easier to become a criminal and harder to protect systems, says @Raj_Samani, Rapid7 SVP & Chief Scientist. Hear more in a new video conversation between Raj and @ABCaustralia: r-7.co/3zktmjF
Image from Rapid7 (@rapid7)
6
3
12
2,601
Load more