eSecurity Planet

OCTOBER 2, 2023

September 29, 2023 Patch WS_FTP Now: 10 / 10 RCE Vulnerability Revealed Type of attack: Attackers can exploit unpatched vulnerabilities to perform remote code execution (RCE), directory traversal, cross-site scripting (XSS), SQL injection , cross-site request forgery (CSRF), and file enumeration attacks. RCE vulnerability CVE-2023-42117 = 8.1

DDOS 111

DDOS Encryption Software Ransomware 111

eSecurity Planet

AUGUST 28, 2023

We’ve compiled some recently active vulnerabilities — both old and new — for security teams to monitor, mitigate, patch, or even remove from your infrastructure altogether. August 21, 2023 Ivanti finds another vulnerability For the third time in a month, Ivanti’s has reported a vulnerability in a mobile device management platform.

VPN 95

VPN Authentication Mobile Firewall 95

eSecurity Planet

OCTOBER 9, 2023

The sheer number of security issues underscores the need for strong patch and vulnerability management — and for cyber resilience that goes deeper than common preventive measures. The problem: Arm has issued a security alert on CVE-2023-4211 , an actively exploited vulnerability in its Mali GPU drivers.

Architecture 105

Architecture Ransomware Software Accountability 105

eSecurity Planet

OCTOBER 23, 2023

See the Top Patch and Vulnerability Management tools October 16, 2023 Cisco vulnerability could affect over 40,000 pieces of networking equipment Type of attack: Zero-day vulnerability in IOS XE. and CVE-2023-20273 with a CVSS Score of 7.2. of Confluence Data Center and Confluence Server.

Passwords 109

Passwords Penetration Testing Accountability Software 109

eSecurity Planet

AUGUST 14, 2023

Here’s a roundup of the week’s major vulnerabilities that security teams should mitigate or patch. August 12 , 2023 Ford Auto’s TI Wi-Fi Vulnerability The Internet of Things (IoT) continues to expand and become a threat to connected businesses. Adobe also updated their Commerce and Dimension software.

Software 98

Software Malware Internet Internet 98

eSecurity Planet

SEPTEMBER 26, 2023

Cisco+ Secure Connect Platform Cisco+ Secure Connect strives to provide a turnkey SASE solution for a variety of needs. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Firewall 98

Firewall DNS Architecture Technology 98

eSecurity Planet

OCTOBER 6, 2023

Provides sender verification and multi-factor authentication for increased security. Provides effective reporting and analytics , providing insights into email security patterns. Improves email security using user authentication techniques , lowering the danger of unauthorized email account access.

Software 132

Software Phishing Mobile Threat Detection 132

eSecurity Planet

SEPTEMBER 26, 2023

The platform, previously called Versa Secure Access or Versa Secure Access Fabric, connects to both cloud and local resources with ease. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Firewall 98

Firewall Software Internet Internet 98

eSecurity Planet

JANUARY 2, 2024

SonicWall researchers discovered that an Apache patch was incomplete, still permitting authentication bypass in open-source ERP software Apache OfBiz. And issues with Barracuda’s Email Secure Gateway persist, with an FBI safety warning about an older vulnerability still outstanding.

Authentication 114

Authentication Software Engineering Security Defenses 114

eSecurity Planet

SEPTEMBER 25, 2023

Customers on this tier will receive Logpush to security incident and event management (SIEM) tools or cloud storage and certificate-based mTLS Authentication for internet of things (IoT) devices. Subscribe The post Cloudflare One SASE Review & Features 2023 appeared first on eSecurity Planet.

DNS 98

DNS DDOS IoT Firewall 98

eSecurity Planet

AUGUST 12, 2023

Trellix researchers are disclosing a number of critical data center power management platform vulnerabilities at DEFCON 2023 today. Here are the vulnerabilities they discovered, including their CVEs, CVSS scores, and a brief description of each: CyberPower DCIM: CVE-2023-3264: Use of Hard-coded Credentials (CVSS 6.7)

Authentication 98

Authentication Spyware DDOS Cybersecurity 98

eSecurity Planet

SEPTEMBER 13, 2023

Microsoft’s Patch Tuesday for September 2023 includes 59 vulnerabilities, five of them rated critical and two currently being exploited in the wild. The two vulnerabilities currently being exploited are CVE-2023-36761 , an information disclosure flaw in Microsoft Word with a CVSS score of 6.2;

Engineering 111

Engineering Security Defenses Risk Media 111

eSecurity Planet

JANUARY 29, 2024

The problem: Mandiant revealed possible 2021 exploitation by Chinese espionage attackers for CVE-2023-34048, an out-of-bounds weakness in protocol implementation first publicly reported in October 2023. The fix: Deploy the Apache security upgrades available since November 2023.

Software 116

Software Authentication CSO Accountability 116

eSecurity Planet

FEBRUARY 5, 2024

January 29, 2024 Juniper Releases Updates for Critical RCE Vulnerabilities Type of vulnerability: Missing authentication flaw and cross-site scripting (XSS) vulnerability. The Known Exploited Vulnerabilities list also added the previously disclosed issues CVE-2023-36846 and CVE-2023-36851 , emphasizing the importance of immediate fix.

Risk 115

Risk Penetration Testing Authentication Software 115

eSecurity Planet

JANUARY 22, 2024

The vulnerability also exists on GitHub Enterprise Server, but it can only be exploited by an authenticated user with an organization owner role. The authenticated user must also be logged into an account on an instance of GHES. Affected keys included some encryption keys and the GitHub commit signing key. EPMM versions 11.10, 11.9

Authentication 116

Authentication Malware VPN Mobile 116

eSecurity Planet

FEBRUARY 12, 2024

February 5, 2024 JetBrains TeamCity Saga Continues with Another Server Vulnerability Type of vulnerability: Authentication bypass by an unauthenticated attacker. This code exists in all software that uses Secure Boot, like SUSE, Red Hat, and Debian. The RCE vulnerability is tracked as CVE-2023-40547 and has a severity rating of 8.3.

VPN 111

VPN Authentication Software Firewall 111

eSecurity Planet

MARCH 11, 2024

And all IT and security teams should follow vulnerability news for vendor bulletins and updates. March 4, 2024 JetBrains Server Issues Continue with New Vulnerabilities Type of vulnerability: Authentication bypass. We’ve seen multiple over the last couple of months, but these are new and not to be confused with CVEs from 2023.

Authentication 111

Authentication Software VPN Security Defenses 111

eSecurity Planet

APRIL 29, 2024

An old Microsoft Windows spooler flaw is added to the CISA KEV list, and the Cactus Ransomware gang currently pursues unfixed Qlik Sense servers with a vulnerability patched in September 2023. The problem: Progress Software released patches to fix CVE-2024-2389 in their Flowmon network performance and security software tool.

Firewall 115

Firewall Software Ransomware Penetration Testing 115

eSecurity Planet

APRIL 15, 2024

You can strengthen your cybersecurity defenses by using reliable antivirus software, firewalls, intrusion detection systems, and virtual private networks (VPNs). Employ robust password management techniques, two-factor authentication (2FA), and regular backups of essential data.

Firewall 111

Firewall VPN Software Risk 111

eSecurity Planet

MARCH 19, 2024

Frequent Ransomware Target QNAP Discloses 3 Vulnerabilities Type of vulnerability: Improper authentication, injection vulnerability, SQL injection (SQLi). The other two vulnerabilities, CVE-2024-21900 and CVE-2024-21901, only merit medium ratings because they require authentication.

Authentication 122

Authentication VPN Software DDOS 122

eSecurity Planet

JULY 15, 2024

The problem: Four unpatched security issues in Gogs, an open-source Git service, enable attackers to exploit three critical flaws ( CVE-2024-39930 , CVE-2024-39931 , CVE-2024-39932 ; CVSS: 9.9) However, exploitation requires authentication and specific configurations. The problem: CVE-2023-27532 (CVSS score: 7.5)

Authentication 111

Authentication Backups Software Risk 111

eSecurity Planet

APRIL 1, 2024

The problem: The March 12th Microsoft security patches introduced a memory leak flaw in the local security authority subsystem service (LSASS) process that consumes all physical and virtual memory on server Domain Controllers. Oglio tracks vulnerability CVE-2023-48022 , rated CVSS 9.8 (out out of 10), and calls it Shadow Ray.

Authentication 111

Authentication Artificial Intelligence Software Risk 111

eSecurity Planet

SEPTEMBER 9, 2024

September 2, 2024 RansomHub Exploits Multiple Vulnerabilities to Attack Critical Sectors Type of vulnerability: Multiple security flaws from major organizations. Companies should improve security by deploying endpoint detection and response (EDR), limiting remote access, and utilizing multi-factor authentication.

Firmware 111

Firmware Backups Firewall Risk 111

eSecurity Planet

JANUARY 16, 2024

The problem: Ivanti announced two vulnerabilities that affect Ivanti Connect Secure VPN and Ivanti Policy Secure products. Potential results of the exploits include authentication bypass and command injection. The vulnerability can be tracked as CVE-2023-29357. versions earlier than 21.2R3-S7 Junos OS 21.3 Versions 9.x

Firewall 111

Firewall Firmware IoT Authentication 111

eSecurity Planet

MAY 2, 2024

The 2023 vendor surveys arriving this quarter paint a picture of a cybersecurity landscape under attack, with priority issues affecting deployment, alert response, and exposed vulnerabilities. Sophos: Noted that 43% of all 2023 malware signature updates are for stealers, spyware, and keyloggers often used to steal credentials from devices.

Cybersecurity 123

Cybersecurity DDOS Penetration Testing Passwords 123

eSecurity Planet

SEPTEMBER 26, 2023

Prisma SASE Palo Alto’s Prisma SASE solution is the only company recognized as a Leader in Gartner’s 2023 Magic Quadrant for Single-Vendor SASE. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Artificial Intelligence 52

Artificial Intelligence Marketing DNS IoT 52

eSecurity Planet

SEPTEMBER 8, 2023

Apps are protected from unauthorized access, data breaches, and other unwanted actions thanks to proactive defenses that prevent and mitigate vulnerabilities, misconfigurations, and other security weaknesses. Integration with continuous development and integration (CI/CD) processes is also important to speed and track security fixes.

Authentication 111

Authentication Architecture Firewall Threat Detection 111

eSecurity Planet

JANUARY 30, 2024

Verizon’s 2023 Data Breach Investigations Report (DBIR) also reveals that inside actors were responsible for 83% of 2022 data breaches. Employ network segmentation: Improve security by using network segmentation, which isolates distinct portions to prevent unauthorized access. Make the default data storage settings private.

Risk 128

Risk DDOS Data breaches Encryption 128

eSecurity Planet

JULY 8, 2024

OpenSSH resolved a signal handler race problem, Juniper Networks managed an authentication bypass, and CocoaPods faced supply chain attack concerns. Regularly update and follow secure development methods, particularly in open-source projects. The fix: CocoaPods fixed these flaws and reset all user sessions since October 2023.

Risk 64

Risk Authentication Firmware Surveillance 64

eSecurity Planet

APRIL 16, 2024

The security researchers at Oligo Security discovered CVE-2023-48022 , dubbed ShadowRay , which notes that Ray fails to apply authorization in the Jobs API. AI Experts Lack Security Expertise Anyscale assumes the environment is secure just as AI researchers also assume Ray is secure.

Cybersecurity 115

Cybersecurity Penetration Testing Internet Internet 115

eSecurity Planet

APRIL 12, 2024

Employ Authentication Methods for All Users & Devices A zero trust approach rejects any sort of inherent trust and requires continual verification of all users and devices. Implement stringent access rules, multi-factor authentication, and continuous monitoring to authenticate all access attempts, regardless of prior trust status.

Backups 134

Backups Encryption Data breaches Risk 134

SC Magazine

APRIL 7, 2021

In fact, Gartner predicts that deepfakes will account for 20 percent of successful account takeover attacks by 2023, which results in cybercriminals gaining access to user accounts and locking the legitimate user out. Secure and manage AI to prevent malfunctions. Deploy strong authentication to stop large-scale spearphishing attacks.

Authentication 66

Authentication Digital transformation Accountability Technology 66

eSecurity Planet

JUNE 21, 2024

Keeper Overview Better for Cost, Secure Sharing & Customer Support Overall Rating: 4/5 Core features: 4.3/5 5 Security: 4.6/5 5 Keeper, a low-cost password manager, highlights security with strong end-to-end encryption and authentication. 5 Pricing: 3.6/5 5 Ease of use and implementation: 3.9/5 identity provider.

Password Management 104

Password Management Passwords Encryption VPN 104

eSecurity Planet

JANUARY 18, 2024

Cloud storage provides businesses with key benefits, such as flexibility, agility, business continuity, and faster deployment, all of which contribute to overall organizational responsiveness and better security. They cited lower risk, enhanced security, and cost savings as they go through migration.

Risk 126

Risk Backups Encryption DDOS 126

eSecurity Planet

MAY 27, 2024

GitHub Enterprise Server and GitLab patched their authentication bypass and XSS issues. May 21, 2024 GitHub Enterprise Server Update Fixes SAML Authentication Bypass Type of vulnerability: Authentication bypass. This poses serious security risks, particularly for organizations that handle sensitive data.

Backups 69

Backups Authentication DDOS Engineering 69

eSecurity Planet

DECEMBER 18, 2023

Authentication Users are responsible for implementing robust authentication mechanisms for access to the infrastructure. Users manage authentication within their applications, relying on the PaaS provider for identity verification. What Is IaaS Security?

Encryption 116

Encryption Data breaches Data privacy Risk 116

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Compliance madhav Tue, 09/19/2023 - 05:17 It is essential for any business that stores, processes, and transmits payment card information to comply with the Payment Card Industry Data Security Standard (PCI DSS). Consumers’ payment data is a compelling target for criminals who continue to circumvent IT security defenses.

Financial Services 77

Financial Services Data breaches Accountability Encryption 77