🚨 Struts2 Under Attack: New Vulnerability Exploited in the Wild

https://undercodenews.com/struts2-under-attack-new-vulnerability-exploited-in-the-wild/

@Undercode_News

#Microsoft's #Windows Store: A Step Forward or a Step Back?

https://undercodenews.com/microsofts-windows-store-a-step-forward-or-a-step-back/

@Undercode_News

🔋 #Tesla Powers Up First Large-Scale Lithium Refinery in the US, Boosting Domestic EV Battery Production

https://undercodenews.com/tesla-powers-up-first-large-scale-lithium-refinery-in-the-us-boosting-domestic-ev-battery-production/

@Undercode_News

#Tesla's #AI Ambitions: Hype vs Reality

https://undercodenews.com/teslas-ai-ambitions-hype-vs-reality/

@Undercode_News

Quantizing Llama 3+: A Guide to Efficient Deployment

https://undercodenews.com/quantizing-llama-3-a-guide-to-efficient-deployment/

@Undercode_News

🦑 Ever wondered how VPN tunneling works? 🌐

This infographic breaks down the process, step by step, showing how data remains secure and private during transit. A VPN tunnel encrypts your data, ensuring that even if intercepted, it stays protected from unauthorized access. 🚀

🔘 Here are some key points:

✅ A VPN creates a secure pathway between your device and a server.
✅ Encryption protocols like OpenVPN, IPsec, and WireGuard safeguard your data.
✅ The process ensures privacy while you browse, stream, or work online.

🔒 How Does VPN Tunneling Work? 🌐

Let’s dive into the step-by-step process of how a VPN ensures secure and private communication over the internet:

1️⃣ User Initiates a Request:
The process begins when a user takes an action, such as browsing a website or accessing an app. This request originates from their device.

2️⃣ Request Encryption:
The VPN software installed on the user’s device encrypts the request using a secure encryption protocol (like OpenVPN, IPsec, or WireGuard). This ensures the data is unreadable to anyone intercepting it.

3️⃣ Data Travels Through the VPN Tunnel:
The encrypted data is then transmitted securely over the internet through the VPN tunnel, safeguarding it from threats during transit.

4️⃣ Server Decrypts the Data:
The VPN server decrypts the incoming data and forwards the user’s request to the target destination (e.g., a web server).

5️⃣ Web Server Processes the Request:
The web server receives the request, processes it, and prepares a response (e.g., delivering a webpage or data).

6️⃣ Response Encryption & Delivery:
The VPN server encrypts the response from the web server and sends it back through the secure VPN tunnel. The user’s VPN client decrypts the data, displaying the secure and private result on their device.

🔘 By following these steps, VPNs ensure data privacy, integrity, and security throughout the communication process.


Ref: Fadi Kazdar
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 The potential of the LLM landscape

Have you ever wondered about the threats lurking beneath the surface? This high-level threat-mapping table exposes how LLM features intersect with risks, and the findings are eye-opening.

This table can be one of your LLM Risk guidance. From LLM-based
Controller to Tool Invocation, what are the potential threats? And which one affects you?

Ref: Elli Shlomo (IR)Elli Shlomo (IR)
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🖥️ The Sunset of #Intel Macs: How Long Will Your Machine Be Supported?

https://undercodenews.com/the-sunset-of-intel-macs-how-long-will-your-machine-be-supported/

@Undercode_News

🌐 Nigerian Government Website Targeted by Funksec #Ransomware

https://undercodenews.com/nigerian-government-website-targeted-by-funksec-ransomware/

@Undercode_News

#Ransomware Targets JSSR Options Co Ltd

https://undercodenews.com/ransomware-targets-jssr-options-co-ltd/

@Undercode_News

🛡️ Indiana Aerospace & Defense Added to FunkSec's #Ransomware Victim List

https://undercodenews.com/indiana-aerospace-defense-added-to-funksecs-ransomware-victim-list/

@Undercode_News

💳 Killsec #Ransomware Targets Tumeny Payments Limited

https://undercodenews.com/killsec-ransomware-targets-tumeny-payments-limited/

@Undercode_News

🚨 Cyber Threats on the Rise: A Weekly Roundup with Malwarebyte

https://undercodenews.com/cyber-threats-on-the-rise-a-weekly-roundup-with-malwarebyte/

@Undercode_News

🚨 #Crypto Scams: A Growing 2025 Threat in the #Digital Age

https://undercodenews.com/crypto-scams-a-growing-2025-threat-in-the-digital-age/

@Undercode_News

⚡️ Protecting Our #Digital Footprints: A New Bill Aims to Curb Data Brokerage

https://undercodenews.com/protecting-our-digital-footprints-a-new-bill-aims-to-curb-data-brokerage/

@Undercode_News

🔧 Encrypted Messaging Service Used by Criminals Taken Down

https://undercodenews.com/encrypted-messaging-service-used-by-criminals-taken-down/

@Undercode_News

🦑Free AI Ethical Hacking :

> Get: https://github.com/berylliumsec/nebula

> Tutorial: https://www.youtube.com/watch?v=188QnOcXEAI

📱 #Apple's Bold Future: Foldable iPhones and Slimmer Models

https://undercodenews.com/apples-bold-future-foldable-iphones-and-slimmer-models/

@Undercode_News

📱 #WhatsApp Beta 2242615: A Quick Fix for a Nasty Crash

https://undercodenews.com/whatsapp-beta-2242615-a-quick-fix-for-a-nasty-crash/

@Undercode_News

AI-SOC. Security Copilot & Tier 3.

In the realm of SOCs, Tier 3 analysts are the vanguard against sophisticated cyber threats, engaging in advanced threat hunting, in-depth incident analysis, and developing strategic defense mechanisms. Security Copilot enhances these critical functions by providing AI-driven insights and automation, thereby amplifying the capabilities of Tier 3 SOC operations.

While most organizations provide the Security Copilot as a "prompt tool" for all the various security teams, the idea is totally something else. The benefits from it will be to prepare it with features such as Prompt Book, Automation, etc.

I'm working with Security Copilot to complete the Radiant Security AI part and provide a complete AI-SOC flow for all tier levels.

Below are some of the benefits of Security Copilot:

1️⃣ Advanced Threat Hunting: Security Copilot proactively empowers Tier 3 analysts to identify and neutralize emerging threats. Analysts can unearth hidden threats and understand complex attack vectors more effectively by leveraging AI-generated queries and comprehensive threat intelligence.

2️⃣ In-Depth Incident Analysis: For incidents, Security Copilot offers detailed summaries, including attack timelines, affected assets, and indicators of compromise. This contextual information enables Tier 3 analysts to dissect incidents thoroughly, understand attacker methodologies, and devise robust mitigation strategies.

3️⃣ Script and File Analysis: Security Copilot simplifies the analysis of suspicious scripts and executables by translating code into natural language explanations. This feature allows Tier 3 analysts to quickly comprehend malicious code behavior and identify associated tactics, techniques, and procedures, streamlining the reverse-engineering process.

4️⃣ Config drift analysis: Security Copilot identifies deviations in Conditional Access policies or cloud security misconfig that attackers could exploit.

5️⃣ Behavioral anomaly detection: Detects and flags unusual access behaviors tied to privileged identities, enabling swift adjustments to access controls.

Security Copilot doesn’t just assist Tier 3—it elevates them:

> Reduced time-to-detect through automated alert correlation.
> Enhanced contextual awareness with AI-driven insights that unify identity, endpoint, and cloud signals.
> Precision actions are driven by deep integration with security tools.

💡 AI isn’t replacing analysts—it’s augmenting their expertise.

Ref: Elli Shlomo
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁