eSecurity Planet

JANUARY 8, 2024

Here’s a roundup of the week’s major vulnerabilities that security teams should mitigate or patch. January 3, 2024 52% of Exposed SSH Servers Vulnerable to Terrapin Attack Type of attack: Secure Shell (SSH) vulnerability enables prefix truncation attacks. The countries with the top vulnerabilities include the USA (3.3

Encryption 106

Encryption Security Defenses Cybersecurity Internet 106

eSecurity Planet

APRIL 1, 2024

While most issues can be fixed through prompt patching and updating, a few remain unfixed and may require more significant changes to the security stack to block possible attacks. March 22, 2024 Emergency Out-of-Band Windows Server Security Updates Type of vulnerability (or attack): Memory leak. Upgrade versions 7.2.0

Authentication 94

Authentication Artificial Intelligence Software Cybersecurity 94

eSecurity Planet

JANUARY 16, 2024

Keep an eye out for security announcements from your firewall vendors; it’s possible additional similar vulnerabilities will come to light. January 10, 2024 Thousands of WordPress Sites Vulnerable to Malware Injection Type of vulnerability: Cross-site scripting flaw in Popup Builder that allows a malware injection.

Firewall 97

Firewall Firmware IoT Authentication 97

eSecurity Planet

FEBRUARY 2, 2024

Within the last couple of months, smart device vulnerabilities have been piling up, prompting businesses to protect their Internet of Things (IoT) environments. While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology.

Hacking 121

Hacking IoT Firmware Cybersecurity 121

eSecurity Planet

FEBRUARY 16, 2024

government and defense institutions for intelligence gathering. Using web shells, they attacked weak internet servers, specifically a Houston port. In February 2024, the CISA, NSA, and FBI warned of PRC cyber actors pre-positioning themselves again to disrupt the IT networks of U.S. Volt Typhoon struck again on several U.S.

Internet 104

Internet Internet Cybersecurity Network Security 104

eSecurity Planet

JANUARY 22, 2024

Make sure your security teams are regularly checking vendors’ software and hardware updates for any patches, and keep a particular eye on networking equipment. January 16, 2024 Open-Source UEFI Implementation Sees 9 Vulnerabilities Type of vulnerability: Weaknesses in the network boot process of UEFI’s network implementation.

Authentication 102

Authentication Malware VPN Mobile 102

eSecurity Planet

JANUARY 29, 2024

Like many other password managers, Dashlane makes it easy for users to create new passwords and store existing ones in a secure vault. Internet security best practices mandate unique credentials for each online account; doing so would be impossible without a solid password manager like Dashlane. You can unsubscribe at any time.

Password Management 105

Password Management Passwords Authentication Accountability 105

eSecurity Planet

APRIL 22, 2024

In an environment with many unpatched systems, prioritize the security tools expected to protect other systems. If updates can’t be performed immediately, consider deploying additional security controls or at least disconnecting vulnerable devices from direct internet access.

Authentication 62

Authentication Firewall Encryption Cybersecurity 62

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. Company instructions to keep hands off internal network traffic leads to internet service provider (ISP) suppression of only 1% of the 100,000 monthly outgoing DDoS attacks. globally, +19.8%

Cybersecurity 94

Cybersecurity DDOS Penetration Testing Passwords 94

eSecurity Planet

SEPTEMBER 26, 2023

Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices. Cisco owners will likely find significantly better return-on-investment to upgrade to Cisco SASE because it builds off of their established Cisco foundation.

Firewall 94

Firewall DNS Architecture Technology 94

eSecurity Planet

MARCH 4, 2024

February 26, 2024 FCKeditor Used for SEO Poisoning on Government, University Sites Type of vulnerability: Malicious URL redirect. February 27, 2024 Ransomware Gangs Target Unpatched ScreenConnect Servers Type of vulnerability: Authentication bypass and path traversal. The fix: Apply Windows patches ASAP.

IoT 108

IoT Internet Internet Ransomware 108