17 mins

Dimitris Kokoutsidis

In-Depth Scenarios Illustrating EU AI Act Implications for Manufacturing Companies Using FileMaker 2024 with Semantic Search Capabilities

Dimitris Kokoutsidis, Oct 21, 2024, CyberFM The European Union’s Artificial Intelligence Act (EU AI Act) introduces a comprehensive regulatory framework for the use of AI systems, emphasizing risk management, transparency, and accountability. With the release of FileMaker 2024, which offers the ability to perform semantic searches using Local or Remote Large Language Models (LLMs), manufacturing

31 mins

Dimitris Kokoutsidis

In-Depth Scenarios Illustrating NIS 2 Implications for Manufacturing Companies Using FileMaker

Ensuring Cyber Resilience in Manufacturing: Navigating NIS 2 Requirements with FileMaker Solutions Dimitris Kokoutsidis, Oct 16, 2024, CyberFM Understanding the practical implications of the NIS 2 Directive is crucial for manufacturing companies that rely on FileMaker solutions. The following detailed scenarios illustrate potential risks and challenges that such companies may face, along with the obligations

32 mins

Dimitris Kokoutsidis

How does the EU AI Act affect FileMaker Developers?

Dimitris Kokoutsidis, Oct 9, 2024, CyberFM Menu Key Provisions of the EU AI Act 1. Risk-Based Classification System To top The EU AI Act categorizes AI systems into four risk levels based on their potential impact on individuals’ safety and fundamental rights: 2. Transparency and Disclosure AI systems must meet transparency obligations to ensure users

23 mins

Dimitris Kokoutsidis

How NIS 2 Affects FileMaker Developers: A Comprehensive Guide to Compliance and Best Practices

Navigating NIS 2 Compliance for FileMaker Developers: Key Impacts, Practical Steps, and Proactive Security Strategies Dimitris Kokoutsidis, Oct 9, 2024, CyberFM The European Union’s NIS 2 Directive represents a significant overhaul of the cybersecurity landscape, aiming to strengthen the resilience of critical infrastructure and essential services across member states. As a FileMaker developer, it’s crucial

138 mins

Dimitris Kokoutsidis

Securing Plugin Licenses in FileMaker: Addressing Breaches, Legal Implications, and Evolving Security Practices

Dimitris Kokoutsidis, Sept 8, 2024, CyberFM Many FileMaker developers rely on hardcoded license keys for plugin solutions. I have a few questions regarding this approach: Overview of Plugin License Texts Following the blog post, you’ll find the detailed license texts for major FileMaker plugins. This section serves as a guide to understand how each plugin

12 mins

Dimitris Kokoutsidis

FileMaker IT Auditing Procedure

Dimitris Kokoutsidis, Sept 26, 2024, CyberFM 1. Audit Overview Objective:The goal of an audit is to ensure the reliability, security, and operational effectiveness of the FileMaker solution. The audit process involves identifying potential points of failure or security risks in the system and addressing them proactively. Process: Documentation Tips:Maintain both physical and digital copies of

8 mins

Dimitris Kokoutsidis

In-Depth Analysis: The Flaws of Relying on Startup Scripts for Security in FileMaker

Dimitris Kokoutsidis, Oct 6, 2024, CyberFM Menu: Understanding the Weakness of Startup Scripts as a Security Measure: The Illusion of Security with Startup Scripts: The Role of Script Debugger in Exploiting Startup Scripts: Full Access Account Reinsertion via Decompilation: The Critical Importance of Encryption and Robust Account Management: Encryption as the First Line of Defense:

68 mins

Dimitris Kokoutsidis

Understanding the OWASP Top 10 Vulnerabilities for Large Language Model Applications

Dimitris Kokoutsidis, Sept 26, 2024, CyberFM Introduction In the rapidly evolving landscape of artificial intelligence, Large Language Models (LLMs) like GPT-4 have become integral to numerous applications, including chatbots, virtual assistants, content generation, and more. While these models offer remarkable capabilities, they also introduce a new set of security challenges that must be addressed to

18 mins

Alexey Dubov

FMS, bypass authorisation

Bypass authorization of FileMaker Server or “there is no such category” Source: https://fm-security.com/posts/bypass_auth/ CVE FileMaker Server CVE-2024-27790 Menu Introduction In the summer of 2023, I decided to investigate the internal communication protocol between FileMaker clients and the server. This led to the discovery of perhaps the most significant vulnerability in the platform’s history. I discovered that it

72 mins

David Hamann

Exploring the fmp12 file format; or: what was my password again?

Decoding the fmp12 File Format: A Deep Dive into Passwords and Account Security Source: https://davidhamann.de/2024/06/17/how-does-filemaker-store-passwords/ Introduction On This Page I had been planning for a while to dive deeper into the fmp12 file format to explore how data is organized and how accounts and passwords are stored. A few months ago, I finally found the

74 mins

David Hamann

Deciphering the FileMaker Server keystore

Unlocking the Secrets of the FileMaker Server Keystore: A Cryptographic Exploration Source: https://davidhamann.de/2023/05/29/deciphering-the-filemaker-keystore/ Introduction On This Page While checking out how the FileMaker Pro to Server upload feature worked, I noticed that credentials were encrypted using a RSA public key before being sent to the server. I looked into FileMaker Server’s installation directory and found that

2 mins

David Hamann

Fix error 853 when encrypting FileMaker databases

Troubleshooting FileMaker Database Encryption Issues Source: https://davidhamann.de/2018/08/19/fix-error-853-when-encrypting-filemaker-databases/ Have you ever gotten the following error after trying to encrypt your FileMaker databases? Error 853 refers to One or more containers failed to transfer in the error code listing and herein usually lies the problem. When you encrypt your database, make sure to place the existing external container data into the