eSecurity Planet

MAY 20, 2024

May 10, 2024 Vulnerability in Python Package Affects AI Models Type of vulnerability: Template injection in Python package. The problem: Researcher Patrick Peng discovered and wrote a blog post about a vulnerability in the llama_cpp_python dependency. The vulnerability is tracked as CVE-2024-34359 and has a severity rating of 4.0.

VPN 62

VPN Firmware Malware Software 62

Duo's Security Blog

MARCH 30, 2023

In our last Universal Prompt blog we focused on a few of the security benefits that using it provides. In this blog we’ll get into more of the user experience benefits. Effective March 30, 2024, Duo will no longer support the traditional Duo Prompt. There are dozens of benefits that come with the new prompt.

Authentication 54

Authentication Software Risk VPN 54

Duo's Security Blog

MAY 6, 2024

The security industry has diligently battled compromised credentials, evolving from passwords to multifactor authentication (MFA) to passwordless — our most secure and phishing-resistant method to date — and one that is fully supported in Duo. This means there are serious holes in our authentication armor today.

Authentication 93

Authentication Accountability VPN Phishing 93

NopSec

JANUARY 31, 2024

We open up 2024 with an interesting mix of vulnerabilities, some of which have been patched for nearly a year. We save the best for last and take a look at a serious duo of vulnerabilities that impact Invanit (Pulse Secure) SSL VPNs. Roll up your sleeves and drop into a command line as we cover the trending CVEs of January 2024.

VPN 59

VPN Government Risk Hacking 59

Thales Cloud Protection & Licensing

MAY 13, 2024

madhav Tue, 05/14/2024 - 05:47 Thales and Microsoft: a long partnership in Identity Security Thales and Microsoft recently celebrated their long-term partnership at the Microsoft Security Excellence Award Ceremony during RSA Conference 2024, as Thales won the Identity Trailblazer Award.

Authentication 62

Authentication Phishing Marketing Cloud Migration 62

LRQA Nettitude Labs

MARCH 27, 2024

Direct access to the corporate network through a Virtual Private Network (VPN) or graphical access to a Virtual Desktop Infrastructure (VDI) host is unusual, meaning that in order to interact with internal corporate websites, operators must tunnel traffic from their systems to the internal network, through the in-memory implant.

Authentication 95

Authentication Passwords VPN Accountability 95

Security Boulevard

JANUARY 2, 2024

Let's delve into the rewind of 2023, exploring five influential trends and threats that molded the cyberthreat landscape and are poised to resonate throughout enterprises in 2024. In fact, 2023 saw an increase in VPN vulnerabilities and, accordingly, nearly 1 in 2 organizations reported that they experienced VPN-related attacks.

CISO 103

CISO Social Engineering Architecture Ransomware 103

Cisco Security

AUGUST 28, 2023

Clear Text authentication still exists in 2023 Although not directly related to malware infection, we did discover a few other interesting findings during our threat hunt, including numerous examples of clear text traffic disclosing email credentials or authentication session cookies for variety of applications.

Wireless 61

Wireless DNS Mobile Technology 61