eSecurity Planet

OCTOBER 11, 2023

Microsoft’s Patch Tuesday for October 2023 covers a total of 103 CVEs, including three zero-day vulnerabilities affecting WordPad, Skype and the HTTP/2 “ Rapid Reset ” DDoS vulnerability. CVE-2023-41763 , an elevation of privilege vulnerability in Skype for Business with a CVSS score of 5.3

DDOS 107

DDOS Engineering Authentication Social Engineering 107

eSecurity Planet

OCTOBER 2, 2023

This shared certificate is then abused to bypass Cloudflare DDoS security and launch DDoS attacks against known server IP addresses. The problem: The key vulnerability, CVE-2023-40044 , affects potentially thousands of WS_FTP servers worldwide with an RCE vulnerability in the Ad Hoc Transfer module. under CVSS v3.1)

DDOS 107

DDOS Encryption Software Ransomware 107

eSecurity Planet

SEPTEMBER 25, 2023

Customers on this tier will receive Logpush to security incident and event management (SIEM) tools or cloud storage and certificate-based mTLS Authentication for internet of things (IoT) devices. Cloudflare also stands out with ZTNA by default, IoT Isolation, and automated traffic controls and anti-DDoS capabilities.

DNS 98

DNS DDOS IoT Firewall 98

eSecurity Planet

MAY 2, 2024

The 2023 vendor surveys arriving this quarter paint a picture of a cybersecurity landscape under attack, with priority issues affecting deployment, alert response, and exposed vulnerabilities. Sophos: Noted that 43% of all 2023 malware signature updates are for stealers, spyware, and keyloggers often used to steal credentials from devices.

Cybersecurity 119

Cybersecurity DDOS Penetration Testing Passwords 119

eSecurity Planet

AUGUST 12, 2023

Trellix researchers are disclosing a number of critical data center power management platform vulnerabilities at DEFCON 2023 today. Here are the vulnerabilities they discovered, including their CVEs, CVSS scores, and a brief description of each: CyberPower DCIM: CVE-2023-3264: Use of Hard-coded Credentials (CVSS 6.7)

Authentication 98

Authentication Spyware DDOS Cybersecurity 98

eSecurity Planet

JANUARY 30, 2024

Downtime limits incident response, increases the risk of data breaches, and can be used as leverage for DDoS attacks. Collaborate with external cloud security specialists or managed service providers to enhance internal capabilities. Implement DDoS protection: Deploy dedicated protection mechanisms to prevent DDoS attacks.

Risk 124

Risk DDOS Data breaches Encryption 124

eSecurity Planet

DECEMBER 8, 2023

DNS communicates in plain text and, without modification, DNS assumes that all information it receives is accurate, authentic, and authoritative. To protect the protocol, best practices will add additional protocols to the process that encrypt the DNS communication and authenticate the results. MFA methods should be carefully selected.

DNS 111

DNS DDOS Firewall Architecture 111