31 mins

Dimitris Kokoutsidis

In-Depth Scenarios Illustrating NIS 2 Implications for Manufacturing Companies Using FileMaker

Ensuring Cyber Resilience in Manufacturing: Navigating NIS 2 Requirements with FileMaker Solutions Dimitris Kokoutsidis, Oct 16, 2024, CyberFM Understanding the practical implications of the NIS 2 Directive is crucial for manufacturing companies that rely on FileMaker solutions. The following detailed scenarios illustrate potential risks and challenges that such companies may face, along with the obligations

7 mins

Christian Schmitz

Security tidbits for FileMaker

Essential Security Tips for Protecting Your FileMaker Solutions Source: https://www.mbsplugins.de/archive/2024-10-14/Security_tidbits_for_FileMaker/monkeybreadsoftware_blog_filemaker We talked about various things at the FileMaker conference in Rome and security is a concern for everyone. Especially as scripted attacks got frequently. Rename Admin Have you ever put a FileMaker Server on the internet? You may note that people knowing your address try

12 mins

Dimitris Kokoutsidis

FileMaker IT Auditing Procedure

Dimitris Kokoutsidis, Sept 26, 2024, CyberFM 1. Audit Overview Objective:The goal of an audit is to ensure the reliability, security, and operational effectiveness of the FileMaker solution. The audit process involves identifying potential points of failure or security risks in the system and addressing them proactively. Process: Documentation Tips:Maintain both physical and digital copies of

8 mins

Dimitris Kokoutsidis

In-Depth Analysis: The Flaws of Relying on Startup Scripts for Security in FileMaker

Dimitris Kokoutsidis, Oct 6, 2024, CyberFM Menu: Understanding the Weakness of Startup Scripts as a Security Measure: The Illusion of Security with Startup Scripts: The Role of Script Debugger in Exploiting Startup Scripts: Full Access Account Reinsertion via Decompilation: The Critical Importance of Encryption and Robust Account Management: Encryption as the First Line of Defense:

18 mins

Alexey Dubov

FMS, bypass authorisation

Bypass authorization of FileMaker Server or “there is no such category” Source: https://fm-security.com/posts/bypass_auth/ CVE FileMaker Server CVE-2024-27790 Menu Introduction In the summer of 2023, I decided to investigate the internal communication protocol between FileMaker clients and the server. This led to the discovery of perhaps the most significant vulnerability in the platform’s history. I discovered that it

35 mins

Doug Wallis

The developer’s edge Claris FileMaker 2024 security features

Jasper Schoonackers (Lesterius), Doug Wallis, and Sangita Banerjee (Claris) , Claris Community Live 6 Data breaches and cyber threats are becoming increasingly sophisticated, the security of your database systems is more critical than ever. Claris FileMaker 2024 introduces a comprehensive suite of new security features and enhancements designed to help developers, administrators, and organizations protect

72 mins

David Hamann

Exploring the fmp12 file format; or: what was my password again?

Decoding the fmp12 File Format: A Deep Dive into Passwords and Account Security Source: https://davidhamann.de/2024/06/17/how-does-filemaker-store-passwords/ Introduction On This Page I had been planning for a while to dive deeper into the fmp12 file format to explore how data is organized and how accounts and passwords are stored. A few months ago, I finally found the

27 mins

Jacob Taylor

Emergency Restoration Considerations for FileMaker Server

Jacob Taylor, April 18, 2024, FileMaker Training Videos Menu Introduction To top FileMaker Server is a critical tool for managing databases, but like all server systems, it is vulnerable to crashes, hardware failures, and software issues. To avoid operational disruptions, it’s vital to have a well-planned emergency restoration strategy in place. This detailed blog post

41 mins

Wim Decorte

Are You Confident in Your FileMaker App’s Security?

Wim Decorte, Claris Engage 2024 As the complexity of digital ecosystems continues to evolve, ensuring the security of the applications we build has never been more important. With the increasing sophistication of attacks, even a small oversight can lead to catastrophic results such as data breaches, fines, or damage to reputation. This blog post delves

74 mins

David Hamann

Deciphering the FileMaker Server keystore

Unlocking the Secrets of the FileMaker Server Keystore: A Cryptographic Exploration Source: https://davidhamann.de/2023/05/29/deciphering-the-filemaker-keystore/ Introduction On This Page While checking out how the FileMaker Pro to Server upload feature worked, I noticed that credentials were encrypted using a RSA public key before being sent to the server. I looked into FileMaker Server’s installation directory and found that

17 mins

André Just Vedgren

Is It Safe? FileMaker, Security and You

A Deep Dive into FileMaker Security and Cyber Threats André Just Vedgren, EngageU 2022 In today’s rapidly evolving digital landscape, cybersecurity is a top priority for businesses of all sizes. Whether you’re managing a small business or overseeing a large organization, the risks associated with data breaches, ransomware, and cyber espionage are increasing. This comprehensive

47 mins

Chris Moyer

Ransomware Roundup

DIGFM: Table of Contents Introduction Ransomware attacks have surged in both frequency and sophistication, posing a significant threat to organizations worldwide. These attacks can cripple operations, lead to substantial financial losses, and damage reputations. For organizations using FileMaker Servers—a popular platform for creating custom apps that work seamlessly across devices—the stakes are particularly high due

14 mins

John Newhoff

FileMaker and Ransomware

John Newhoff, Jun 17, 2021, Portage Bay blog Source: https://www.portagebay.com/blog/filemaker-and-ransomware/ With the recent highly publicized attacks on Colonial Pipeline and JBS, we’ve had questions from some of our clients about protecting FileMaker data from ransomware attacks. While we are always careful to make it clear that we are not security professionals, we also try to do our best to answer

24 mins

Richard Carlton

FileMaker Workflow Security vs. Bad Guy Security

Richard Carlton, Jun 2, 2020, FileMaker Training Videos Introduction to FileMaker Workflow Security Overview of Workflow vs. Bad Guy Security Workflow security involves creating a controlled environment where users follow established procedures to maintain data integrity. However, “Bad Guy” security is about safeguarding against intentional breaches and attacks. By focusing on workflow security, organizations ensure

16 mins

Tim Neudecker

How Not to Worry About Security in FileMaker

Tim Neudecker, FileMaker DevCon 2019 Session OverviewWhy Security MattersFileMaker Security Tools Session Overview Tim Neudecker’s session at FileMaker DevCon 2019, titled “How Not to Worry About Security”, emphasized the importance of integrating security into FileMaker applications from the ground up. Security, often considered an afterthought in many development processes, should be the first concern, given