article thumbnail

October 2023 Patch Tuesday Includes Three Zero-Days Flaws

eSecurity Planet

Immersive Labs principal security engineer Rob Reeves told eSecurity Planet that the attack doesn’t require credentials or authentication in order to execute code on the system. Just because your Exchange Server doesn’t have internet-facing authentication doesn’t mean it’s protected.”

DDOS 109
article thumbnail

Vulnerability Recap 4/1/24: Cisco, Fortinet & Windows Server Updates

eSecurity Planet

When either on-premise or cloud-based Active Directory domain controllers process Kerberos authentication requests, the leak causes the LSASS process to stop responding and the domain controller will unexpectedly restart. Oglio tracks vulnerability CVE-2023-48022 , rated CVSS 9.8 (out out of 10), and calls it Shadow Ray.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Vulnerability Recap 6/10/24 – RCE Attacks in Major Platforms

eSecurity Planet

The exploit combines an authentication bypass ( CVE-2024-4358 ) with a deserialization issue ( CVE-2024-1800 ). The authentication bypass permits the establishment of rogue admin accounts, but the deserialization flaw allows remote code execution, potentially giving attackers complete control over the affected servers.

Malware 79
article thumbnail

A PowerShell Script to Mitigate Active Directory Security Risks

eSecurity Planet

Note that NTLM was designed to perform authentication based on the challenge/response-based authentication system in which a client sends the plaintext username to the domain controller. If the data matches, then the client is allowed to authenticate. for better security. Disabling SMB Version 1.0 is enabled, the SMB 1.0

Risk 142
article thumbnail

Dashlane 2024

eSecurity Planet

The company was founded in 2009, and the first software edition was released in 2012. Like many other password managers, Dashlane makes it easy for users to create new passwords and store existing ones in a secure vault. This software uses patented security architecture with 256-bit encryption, plus built-in two factor authentication.

article thumbnail

Versa Unified SASE Review & Features 2023

eSecurity Planet

Founded in 2012, Versa Networks seeks to deploy a single software operating system, called VOS, to converge and integrate cloud and on-premises security, networking, and analytics. Who is Versa Networks? Using VOS, Versa enables customers and service providers to deploy SASE and software-defined wide area network (SD-WAN) solutions.