Y-Security

Y-Security performs Attack Simulations, Penetration Tests, and Security Trainings. Content in EN & DE. E-Mail us via info 'ät'

[Y-Security @YSecurity]

Our security team at @YSecurity has identified multiple vulnerabilities in TIM BPM Suite/TIM FLOW, allowing authorization bypass, privilege escalation, and SQL/HQL injection.

Advisory + Mitigation: https://t.co/8hQFq0wn2s

[Y-Security @YSecurity]

The ticket for the German OWASP Day 2025 has been assigned! Thanks for your messages. See you on site!

[Y-Security @YSecurity]

Giving away one ticket for German OWASP Day 2025 incl. hotel night! 25.11 pre-event, 26.11 conference. Interested? Email us – first come, first served. Info: https://t.co/ZTAWzrSvkv Already have a ticket? Meet the Y-Security team on site. #OWASP #GOD2025 #GOD

[Y-Security @YSecurity]

Our security team at @YSecurity has identified a vulnerability in AXESS Auto Configuration Server (CVE-2024-56316) which allows unauthenticated remote attackers to trigger a permanent DoS.

Advisory + Mitigation: https://t.co/6P23JaVskn

#YSecurity #CVE202456316 #TR069 #ACS

[Y-Security @YSecurity]

We have publicly released our internal tool StealthGuardian at Black Hat USA 2024.

It can be combined with adversary simulation tools to verify the resistance, detection level and behaviour detection of defence mechanisms.

https://t.co/QzlnzvmAAS

#bhusa #blackhat #redteam

[Y-Security @YSecurity]

Weitere Informationen zur Arbeit bei Y-Security und weitere offene Stellen findest du auf unserer Webseite:

https://t.co/w2uuu38W5A

[Y-Security @YSecurity]

Wir suchen derzeit zur Unterstützung Werkstudent:innen im Bereich Anwendungsentwicklung.

Wenn du Lust auf ein innovatives Unternehmen mit flexiblen Arbeitsmöglichkeiten hast, dann freuen wir uns, von dir zu hören.

#Werkstudent #Job #Germany #Business #Development

[Y-Security @YSecurity]

Are you taking steps towards a career as an Attack Simulation Specialist?

Maybe you already have experience as a Penetration Tester or with platforms like Hack The Box or certifications like OSCP?

If so, we would love to talk to you!

#job #redteam #pentest #germany

[Y-Security @YSecurity]

Our tool StealthGuardian has been accepted for Black Hat ARSENAL USA 2024. The Y-Security team will be in Las Vegas to present on protecting Red Team payloads from Blue Teams.

https://t.co/2yV075y5Pj

#BlackHat #BHUSA #RedTeam #VegasBaby

[Y-Security @YSecurity]

Our team recently took the challenge of mastering the Red Team Ops I and Red Team Ops II exam offered by @zeropointsecltd . After completion, we received both the Red Team Operator and Red Team Lead certifications.

Read our recent post: https://t.co/fAeTOhkHgv

#RedTeam #RTO

[Y-Security @YSecurity]

Recently we checked the security of a LoRaWAN implementation. In our latest post we share insights about the security of LoRaWAN, common LoRaWAN attacks and how we built a custom methodology and testing environment.

https://t.co/z5vyADDsyf

#pentest #lorawan #ysecurity

[Y-Security @YSecurity]

We have moved our twitter account to @YSecurity - All our new content will be available here. Followers have been moved to the new account. Thanks for following @YSecurity

[Y-Security @YSecurity]

Check out our blog post by Thore on our Mobile Application Testing service utilizing Apple Silicon.

https://t.co/poplBBpfFL

#pentest #mobile #jailbreak #apple #ios #testing #m1 #ysecurity

[Y-Security @YSecurity]

Today we're releasing two CVEs:

Reminder for Jira – Cross-Site Scripting (CVE-2023-30453) # https://t.co/g5xSIej3Sj
EasyMind – Cross-Site Scripting (CVE-2023-30452) # https://t.co/udhu3tfFhe

#atlassian #confluence #jira #vulnerability #ysecurity #CVE-2023-30453 #CVE-2023-30452

[Y-Security @YSecurity]

Y-Security carries out projects in a climate-neutral way. Companies that work with Y-Security have the option of taking over a share to offset the CO2 produced in our projects too.

We have just claimed 2,98 tons CO2 via @compensatorsNGO

https://t.co/1HIbHWpJF4

#climateaction

[Y-Security @YSecurity]

Looking to strengthen your cloud security and safeguard your data from cyber threats?

Then don't miss our latest blog post about the Advantages of Cloud Audit and Cloud Penetration Testing: https://t.co/vPJrYECHSY

#cloud #cloudsecurity #bugbounty #Y #penetrationtesting

[Chris @0xchrisb]

Have you ever wondered how to start #AWS penetration testing? We have published AWS penetration testing: A step-by-step guide at the @hackthebox_eu website:

https://t.co/EBaX3GqZXV

#HTB #BugBounty #Y #Security #Cloud

[Y-Security @YSecurity]

@hackthebox_eu's BlackSky Cloud Hacking Labs doesn't only include AWS and Azure, but also Google Cloud Platform.

Read @secsven's feedback and insights on the Blizzard Lab

https://t.co/lQLVgckDKb

#HackTheBox #BlackSky #Cloud #GCP #Blizzard #BugBounty #htb #pentest #Y

[Y-Security @YSecurity]

@hackthebox_eu 's BlackSky Cloud Hacking Labs doesn't only include AWS and Azure, but also Google Cloud Platform.

Read Sven's feedback and insights on the Blizzard: Google Cloud Platform scenario at: https://t.co/lQLVgckDKb

#HackTheBox #GCP #Blizzard #BugBounty #htb #pentest #Y

[Y-Security @YSecurity]

Have you enjoyed our last week review on @hackthebox_eu's BlackSky Cloud Hacking Labs for AWS?

Our team member Thore shared his feedback and insights on the Cyclone: Microsoft Azure scenario at: https://t.co/QBApGVi1eN

#Y #HackTheBox #Cloud #Azure #Cyclone #BugBounty