Tag: Vulnerability

ProxyNotShell: Detecting CVE-2022-41040 and CVE-2022-41082, Novel Microsoft Exchange Zero-Day Vulnerabilities Actively Exploited in the Wild 3 min read Latest Threats ProxyNotShell: Detecting CVE-2022-41040 and CVE-2022-41082, Novel Microsoft Exchange Zero-Day Vulnerabilities Actively Exploited in the Wild by Veronika Telychko Top Challenges for MSSPs and MDRs and How to Overcome Them 8 min read SIEM & EDR Top Challenges for MSSPs and MDRs and How to Overcome Them by Oleksandra Rumiantseva What Is Initial Access? MITRE ATT&CK® Initial Access Tactic | TA0001 13 min read SIEM & EDR What Is Initial Access? MITRE ATT&CK® Initial Access Tactic | TA0001 by Karolina Koval CVE-2022-32548 Detection: Critical RCE Vulnerability Affects DrayTek’s Flagship Models 3 min read Latest Threats CVE-2022-32548 Detection: Critical RCE Vulnerability Affects DrayTek’s Flagship Models by Anastasiia Yevdokimova KNOTWEED Activity Detection: CVE-2022-22047 Vulnerability and Multiple Windows & Adobe Zero-Day Exploitation by the European Private-Sector Offensive Actor (PSOA) 4 min read Latest Threats KNOTWEED Activity Detection: CVE-2022-22047 Vulnerability and Multiple Windows & Adobe Zero-Day Exploitation by the European Private-Sector Offensive Actor (PSOA) by Veronika Telychko CVE-2022-32223 Detection: New Vulnerability in Node.js 2 min read Latest Threats CVE-2022-32223 Detection: New Vulnerability in Node.js by Anastasiia Yevdokimova CVE-2022-28219 Detection: Critical RCE Vulnerability in Zoho ManageEngine ADAudit Plus 3 min read Latest Threats CVE-2022-28219 Detection: Critical RCE Vulnerability in Zoho ManageEngine ADAudit Plus by Daryna Olyniychuk New Attempts to Exploit Log4Shell in VMware Horizon Systems: CISA Warns of Threat Actors Actively Leveraging CVE-2021-44228 Apache Log4j Vulnerability 4 min read Latest Threats New Attempts to Exploit Log4Shell in VMware Horizon Systems: CISA Warns of Threat Actors Actively Leveraging CVE-2021-44228 Apache Log4j Vulnerability by Veronika Telychko CVE-2022-1040 Detection: DriftingCloud APT Group Exploits RCE Flaw in Sophos Firewall 3 min read Latest Threats CVE-2022-1040 Detection: DriftingCloud APT Group Exploits RCE Flaw in Sophos Firewall by Anastasiia Yevdokimova DFSCoerce Detection: New NTLM Relay Attack Enabling Windows Domain Takeover 3 min read Latest Threats DFSCoerce Detection: New NTLM Relay Attack Enabling Windows Domain Takeover by Daryna Olyniychuk