eSecurity Planet

AUGUST 28, 2023

We’ve compiled some recently active vulnerabilities — both old and new — for security teams to monitor, mitigate, patch, or even remove from your infrastructure altogether. August 21, 2023 Ivanti finds another vulnerability For the third time in a month, Ivanti’s has reported a vulnerability in a mobile device management platform.

VPN 95

VPN Authentication Mobile Firewall 95

eSecurity Planet

OCTOBER 2, 2023

September 29, 2023 Patch WS_FTP Now: 10 / 10 RCE Vulnerability Revealed Type of attack: Attackers can exploit unpatched vulnerabilities to perform remote code execution (RCE), directory traversal, cross-site scripting (XSS), SQL injection , cross-site request forgery (CSRF), and file enumeration attacks. RCE vulnerability CVE-2023-42117 = 8.1

DDOS 109

DDOS Encryption Software Ransomware 109

eSecurity Planet

OCTOBER 9, 2023

The sheer number of security issues underscores the need for strong patch and vulnerability management — and for cyber resilience that goes deeper than common preventive measures. The problem: Arm has issued a security alert on CVE-2023-4211 , an actively exploited vulnerability in its Mali GPU drivers.

Architecture 104

Architecture Ransomware Software Accountability 104

eSecurity Planet

OCTOBER 23, 2023

See the Top Patch and Vulnerability Management tools October 16, 2023 Cisco vulnerability could affect over 40,000 pieces of networking equipment Type of attack: Zero-day vulnerability in IOS XE. and CVE-2023-20273 with a CVSS Score of 7.2. of Confluence Data Center and Confluence Server.

Passwords 107

Passwords Penetration Testing Accountability Software 107

eSecurity Planet

AUGUST 14, 2023

Here’s a roundup of the week’s major vulnerabilities that security teams should mitigate or patch. August 12 , 2023 Ford Auto’s TI Wi-Fi Vulnerability The Internet of Things (IoT) continues to expand and become a threat to connected businesses. Adobe also updated their Commerce and Dimension software.

Software 98

Software Malware Internet Internet 98

eSecurity Planet

SEPTEMBER 26, 2023

Cisco+ Secure Connect Platform Cisco+ Secure Connect strives to provide a turnkey SASE solution for a variety of needs. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Firewall 98

Firewall DNS Architecture Technology 98

eSecurity Planet

SEPTEMBER 26, 2023

The platform, previously called Versa Secure Access or Versa Secure Access Fabric, connects to both cloud and local resources with ease. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Firewall 98

Firewall Software Internet Internet 98

eSecurity Planet

JANUARY 2, 2024

SonicWall researchers discovered that an Apache patch was incomplete, still permitting authentication bypass in open-source ERP software Apache OfBiz. And issues with Barracuda’s Email Secure Gateway persist, with an FBI safety warning about an older vulnerability still outstanding.

Authentication 112

Authentication Software Engineering Security Defenses 112

eSecurity Planet

SEPTEMBER 25, 2023

Customers on this tier will receive Logpush to security incident and event management (SIEM) tools or cloud storage and certificate-based mTLS Authentication for internet of things (IoT) devices. Subscribe The post Cloudflare One SASE Review & Features 2023 appeared first on eSecurity Planet.

DNS 98

DNS DDOS IoT Firewall 98

eSecurity Planet

AUGUST 12, 2023

Trellix researchers are disclosing a number of critical data center power management platform vulnerabilities at DEFCON 2023 today. Here are the vulnerabilities they discovered, including their CVEs, CVSS scores, and a brief description of each: CyberPower DCIM: CVE-2023-3264: Use of Hard-coded Credentials (CVSS 6.7)

Authentication 98

Authentication Spyware DDOS Cybersecurity 98

eSecurity Planet

OCTOBER 6, 2023

Provides sender verification and multi-factor authentication for increased security. Provides effective reporting and analytics , providing insights into email security patterns. Improves email security using user authentication techniques , lowering the danger of unauthorized email account access.

Software 131

Software Phishing Mobile Threat Detection 131

eSecurity Planet

SEPTEMBER 13, 2023

Microsoft’s Patch Tuesday for September 2023 includes 59 vulnerabilities, five of them rated critical and two currently being exploited in the wild. The two vulnerabilities currently being exploited are CVE-2023-36761 , an information disclosure flaw in Microsoft Word with a CVSS score of 6.2;

Engineering 109

Engineering Security Defenses Risk Media 109

eSecurity Planet

SEPTEMBER 26, 2023

Prisma SASE Palo Alto’s Prisma SASE solution is the only company recognized as a Leader in Gartner’s 2023 Magic Quadrant for Single-Vendor SASE. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Artificial Intelligence 52

Artificial Intelligence Marketing DNS IoT 52

eSecurity Planet

FEBRUARY 12, 2024

February 5, 2024 JetBrains TeamCity Saga Continues with Another Server Vulnerability Type of vulnerability: Authentication bypass by an unauthenticated attacker. This code exists in all software that uses Secure Boot, like SUSE, Red Hat, and Debian. The RCE vulnerability is tracked as CVE-2023-40547 and has a severity rating of 8.3.

VPN 109

VPN Authentication Software Firewall 109

eSecurity Planet

FEBRUARY 5, 2024

January 29, 2024 Juniper Releases Updates for Critical RCE Vulnerabilities Type of vulnerability: Missing authentication flaw and cross-site scripting (XSS) vulnerability. The Known Exploited Vulnerabilities list also added the previously disclosed issues CVE-2023-36846 and CVE-2023-36851 , emphasizing the importance of immediate fix.

Risk 113

Risk Penetration Testing Authentication Software 113

eSecurity Planet

JANUARY 29, 2024

The problem: Mandiant revealed possible 2021 exploitation by Chinese espionage attackers for CVE-2023-34048, an out-of-bounds weakness in protocol implementation first publicly reported in October 2023. The fix: Deploy the Apache security upgrades available since November 2023.

Software 113

Software Authentication CSO Accountability 113

eSecurity Planet

JANUARY 22, 2024

The vulnerability also exists on GitHub Enterprise Server, but it can only be exploited by an authenticated user with an organization owner role. The authenticated user must also be logged into an account on an instance of GHES. Affected keys included some encryption keys and the GitHub commit signing key. EPMM versions 11.10, 11.9

Authentication 113

Authentication Malware VPN Mobile 113

eSecurity Planet

MARCH 11, 2024

And all IT and security teams should follow vulnerability news for vendor bulletins and updates. March 4, 2024 JetBrains Server Issues Continue with New Vulnerabilities Type of vulnerability: Authentication bypass. We’ve seen multiple over the last couple of months, but these are new and not to be confused with CVEs from 2023.

Authentication 109

Authentication Software VPN Security Defenses 109

eSecurity Planet

SEPTEMBER 9, 2024

September 2, 2024 RansomHub Exploits Multiple Vulnerabilities to Attack Critical Sectors Type of vulnerability: Multiple security flaws from major organizations. Companies should improve security by deploying endpoint detection and response (EDR), limiting remote access, and utilizing multi-factor authentication.

Firmware 109

Firmware Backups Firewall Risk 109

eSecurity Planet

APRIL 15, 2024

You can strengthen your cybersecurity defenses by using reliable antivirus software, firewalls, intrusion detection systems, and virtual private networks (VPNs). Employ robust password management techniques, two-factor authentication (2FA), and regular backups of essential data.

Firewall 109

Firewall VPN Software Risk 109

eSecurity Planet

APRIL 29, 2024

An old Microsoft Windows spooler flaw is added to the CISA KEV list, and the Cactus Ransomware gang currently pursues unfixed Qlik Sense servers with a vulnerability patched in September 2023. The problem: Progress Software released patches to fix CVE-2024-2389 in their Flowmon network performance and security software tool.

Firewall 113

Firewall Software Ransomware Penetration Testing 113

eSecurity Planet

MARCH 19, 2024

Frequent Ransomware Target QNAP Discloses 3 Vulnerabilities Type of vulnerability: Improper authentication, injection vulnerability, SQL injection (SQLi). The other two vulnerabilities, CVE-2024-21900 and CVE-2024-21901, only merit medium ratings because they require authentication.

Authentication 119

Authentication VPN Software DDOS 119

eSecurity Planet

JANUARY 16, 2024

The problem: Ivanti announced two vulnerabilities that affect Ivanti Connect Secure VPN and Ivanti Policy Secure products. Potential results of the exploits include authentication bypass and command injection. The vulnerability can be tracked as CVE-2023-29357. versions earlier than 21.2R3-S7 Junos OS 21.3 Versions 9.x

Firewall 109

Firewall Firmware IoT Authentication 109

eSecurity Planet

APRIL 1, 2024

The problem: The March 12th Microsoft security patches introduced a memory leak flaw in the local security authority subsystem service (LSASS) process that consumes all physical and virtual memory on server Domain Controllers. Oglio tracks vulnerability CVE-2023-48022 , rated CVSS 9.8 (out out of 10), and calls it Shadow Ray.

Authentication 109

Authentication Artificial Intelligence Software Cybersecurity 109

eSecurity Planet

MAY 2, 2024

The 2023 vendor surveys arriving this quarter paint a picture of a cybersecurity landscape under attack, with priority issues affecting deployment, alert response, and exposed vulnerabilities. Sophos: Noted that 43% of all 2023 malware signature updates are for stealers, spyware, and keyloggers often used to steal credentials from devices.

Cybersecurity 121

Cybersecurity DDOS Penetration Testing Passwords 121

eSecurity Planet

MARCH 25, 2024

The first vulnerability appears in Ivanti Standalone Security and is tracked as KB-CVE-2023-41724 , with a CVSS rating of 9.6. The Standalone Security vulnerability affects versions 9.17.0, The second vulnerability appears in Ivanti Neurons for IT Service Management and is tracked as CVE-2023-46808. and 9.19.0,

Computers and Electronics 62

Computers and Electronics Software Accountability Authentication 62

eSecurity Planet

MAY 27, 2024

GitHub Enterprise Server and GitLab patched their authentication bypass and XSS issues. May 21, 2024 GitHub Enterprise Server Update Fixes SAML Authentication Bypass Type of vulnerability: Authentication bypass. This poses serious security risks, particularly for organizations that handle sensitive data.

Backups 67

Backups Authentication DDOS Engineering 67

eSecurity Planet

JANUARY 30, 2024

Verizon’s 2023 Data Breach Investigations Report (DBIR) also reveals that inside actors were responsible for 83% of 2022 data breaches. Employ network segmentation: Improve security by using network segmentation, which isolates distinct portions to prevent unauthorized access. Make the default data storage settings private.

Risk 127

Risk DDOS Data breaches Encryption 127

eSecurity Planet

APRIL 22, 2024

April 13, 2024 Delinea Secret Server Patched After Researcher’s Public Disclosure Type of vulnerability: Authentication bypass. Orca Security disclosed the flaw , called LeakyCLI, but both cloud providers declined to take action and assumed CLI can only be accessed in secure environments.

Authentication 62

Authentication Firewall Encryption Cybersecurity 62

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Compliance madhav Tue, 09/19/2023 - 05:17 It is essential for any business that stores, processes, and transmits payment card information to comply with the Payment Card Industry Data Security Standard (PCI DSS). Consumers’ payment data is a compelling target for criminals who continue to circumvent IT security defenses.

Financial Services 77

Financial Services Data breaches Accountability Encryption 77

SC Magazine

APRIL 7, 2021

In fact, Gartner predicts that deepfakes will account for 20 percent of successful account takeover attacks by 2023, which results in cybercriminals gaining access to user accounts and locking the legitimate user out. Secure and manage AI to prevent malfunctions. Deploy strong authentication to stop large-scale spearphishing attacks.

Digital transformation 66

Digital transformation Authentication Accountability Technology 66

eSecurity Planet

APRIL 16, 2024

The security researchers at Oligo Security discovered CVE-2023-48022 , dubbed ShadowRay , which notes that Ray fails to apply authorization in the Jobs API. AI Experts Lack Security Expertise Anyscale assumes the environment is secure just as AI researchers also assume Ray is secure.

Cybersecurity 113

Cybersecurity Penetration Testing Internet Internet 113

eSecurity Planet

SEPTEMBER 2, 2024

Devices running SonicWall Firewall Gen5, Gen6, and Gen 7 are vulnerable to network-based threats that require no user interaction or authentication. Enterprises should activate data loss prevention and other security controls to limit hazards in AI technologies such as Copilot.

Risk 57

Risk Firewall Firmware Engineering 57

eSecurity Planet

SEPTEMBER 23, 2024

Our security overview for the week includes Veeam and ServiceNow flaws and a vulnerability within the web browser Arc. Also, we get some more information on related macOS vulnerabilities fixed in 2022 and 2023. The fix: Both vulnerabilities, CVE-2022–46723 and CVE-2023–40434 , have been fixed by Apple in previous years.

Backups 57

Backups Software Authentication IoT 57

eSecurity Planet

JUNE 10, 2024

The exploit combines an authentication bypass ( CVE-2024-4358 ) with a deserialization issue ( CVE-2024-1800 ). The authentication bypass permits the establishment of rogue admin accounts, but the deserialization flaw allows remote code execution, potentially giving attackers complete control over the affected servers.

Malware 80

Malware Authentication Software Telecommunications 80

eSecurity Planet

JUNE 21, 2024

Keeper Overview Better for Cost, Secure Sharing & Customer Support Overall Rating: 4/5 Core features: 4.3/5 5 Security: 4.6/5 5 Keeper, a low-cost password manager, highlights security with strong end-to-end encryption and authentication. 5 Pricing: 3.6/5 5 Ease of use and implementation: 3.9/5 identity provider.

Password Management 103

Password Management Passwords Encryption VPN 103

eSecurity Planet

DECEMBER 19, 2023

As 2023 draws to an end and cybersecurity budgeting is nearly complete, it helps to consider the year’s events and try to predict next year’s trends. 2023 cybersecurity issues will continue: Weak IT fundamentals, poor cybersecurity awareness, and ransomware will still cause problems and make headlines.

Cybersecurity 140

Cybersecurity CISO Government Technology 140