Month: September 2021
11 posts
PoC Released For New VMware vCenter Vulnerability
On the tail of VMware disclosing that its vCenter Server is affected by an arbitrary file upload vulnerability,…
Netgear Warns Certain Routers Impacted by Remote Code Execution Vulnerability
Netgear recommends urgent firmware upgrades for impacted routers. Background On September 20, Netgear informed its customers about CVE-2021-40847, which…
Microsoft’s September 2021 Patch Tuesday closes OMIGOD vulnerability which allows RCE on Azure Linux VMs
Reportedly simple to execute, the attack targets a vulnerability in Open Management Infrastructure (OMI) software preloaded on all…
What is SASE? SASE Explained.
Following security into the cloud, SASE acknowledges a much needed structure for granular networking that allows finer control of cloud service access. Let's take a look at what exactly the newly coined term means and how it's being implemented across the industry.
FORCEDENTRY zero-click exploit used on Apple iOS, MacOS, and WatchOS devices
Apple’s updates to its operating systems this week contain a patch for a serious vulnerability that allowed a…
Attackers Exploit Microsoft Windows Remote Code Execution Vulnerability In The Wild
No patch is currently available, but an official mitigation has been released. Background Microsoft has released an advisory for…
Palo Alto Patches a Series of Vulnerabilities Impacting PAN-OS and Cortex XSOAR Platforms
Palo Alto has released patches for 5 high-severity vulnerabilities, including four impacting PAN-OS and one impacting Cortex XSOAR.…
Critical Remote Code Execution Vulnerability Impacts On-Premises Confluence Environments
Atlassian recommends upgrading immediately, as POC code is available and researchers have detected active exploitation in the wild.…
ProxyToken Exchange Vulnerability Allows Attacker To Intercept Others’ Emails
Microsoft has patched ProxyToken, the most recent in a string of serious Exchange server vulnerabilities. It’s recommended that on-prem…
Phishing Monitoring
Phishing is the malicious tactic of sending fraudulent emails to trick recipients into revealing sensitive information, making payments,…