eSecurity Planet

JULY 29, 2024

In the aftermath of CrowdStrike’s unique update failure that sparked a different type of security incident, standard vulnerability disclosures and patches proceed as usual. This week, we also saw some older issues return to light, including an Internet Explorer vulnerability first discovered in 2012.

Accountability 109

Accountability Internet Internet Software 109

eSecurity Planet

OCTOBER 11, 2023

Immersive Labs principal security engineer Rob Reeves told eSecurity Planet that the attack doesn’t require credentials or authentication in order to execute code on the system. Just because your Exchange Server doesn’t have internet-facing authentication doesn’t mean it’s protected.”

DDOS 109

DDOS Engineering Authentication Social Engineering 109

eSecurity Planet

JANUARY 29, 2024

The company was founded in 2009, and the first software edition was released in 2012. Like many other password managers, Dashlane makes it easy for users to create new passwords and store existing ones in a secure vault. Dashlane is a password management software that’s popular for business and personal uses alike.

Password Management 109

Password Management Passwords Authentication Accountability 109

eSecurity Planet

SEPTEMBER 26, 2023

Founded in 2012, Versa Networks seeks to deploy a single software operating system, called VOS, to converge and integrate cloud and on-premises security, networking, and analytics. Who is Versa Networks? Using VOS, Versa enables customers and service providers to deploy SASE and software-defined wide area network (SD-WAN) solutions.

Firewall 98

Firewall Software Internet Internet 98

eSecurity Planet

APRIL 1, 2024

The fix: Apply the emergency fixes issued by Microsoft for: Windows Server 2022 Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Attackers Actively Exploit Fortinet Enterprise Management Server SQLi Flaw Type of vulnerability: SQL injection (SQLi) flaw. The fix: Update affected versions ASAP: FortiClient EMS 7.2: through 7.2.2

Authentication 109

Authentication Artificial Intelligence Software Risk 109

Digital Shadows

OCTOBER 29, 2024

For initial access, RansomHub affiliates often compromise internet-facing systems and user endpoints via phishing emails, password spraying, and exploiting high-risk remote code execution (RCE) and privilege escalation vulnerabilities. In November 2022, IntelBroker reportedly used Endurance to target the US Federal Government.

Ransomware 88

Ransomware Encryption Technology Cybercrime 88

Digital Shadows

OCTOBER 29, 2024

For initial access, RansomHub affiliates often compromise internet-facing systems and user endpoints via phishing emails, password spraying, and exploiting high-risk remote code execution (RCE) and privilege escalation vulnerabilities. In November 2022, IntelBroker reportedly used Endurance to target the US Federal Government.

Ransomware 52

Ransomware Encryption Technology Cybercrime 52