enterprise

Citrix ShareFile vulnerability actively exploited (CVE-2023-24489)

August 17, 2023

CVE-2023-24489, a critical Citrix ShareFile vulnerability that the company has fixed in June 2023, is being exploited by attackers. GreyNoise has flagged on Tuesday a sudden …

(Re)check your patched NetScaler ADC and Gateway appliances for signs of compromise

August 16, 2023

Administrators of Citrix NetScaler ADC and Gateway appliances should check for evidence of installed webshells even if they implemented fixes for CVE-2023-3519 quickly: A …

Attackers can turn AWS SSM agents into remote access trojans

August 2, 2023

Mitiga researchers have documented a new post-exploitation technique attackers can use to gain persistent remote access to AWS Elastic Compute Cloud (EC2) instances (virtual …

Ivanti fixes second zero-day exploited by attackers (CVE-2023-35081)

July 31, 2023

Another actively exploited zero-day vulnerability (CVE-2023-35081) affecting Ivanti Endpoint Manager Mobile (EPMM) has been identified and fixed. The first zero-day spotted …

Ivanti zero-day exploited to target Norwegian government (CVE-2023-35078)

July 25, 2023

A zero-day vulnerability (CVE-2023-35078) affecting Ivanti Endpoint Manager Mobile (EPMM) has been exploited to carry out an attack that affected 12 Norwegian ministries, the …

Has the MOVEit hack paid off for Cl0p?

July 24, 2023

The number of known Cl0p victims resulting from its Memorial Day attack on vulnerable internet-facing MOVEit Transfer installations has surpassed 420, according to IT market …

Thanks Storm-0558! Microsoft to expand default access to cloud logs

July 20, 2023

Starting in September 2023, more federal government and commercial Microsoft customers will have access to expanded cloud logging capabilities at no additional charge, …

VirusTotal leaked data of 5,600 registered users

July 18, 2023

VirusTotal has suffered a data leak that exposed the names and email addresses of 5,600 of its registered users. The leaked data reportedly includes information about …

Malware delivery to Microsoft Teams users made easy

July 10, 2023

A tool that automates the delivery of malware from external attackers to target employees’ Microsoft Teams inbox has been released. TeamsPhisher (Source: Alex Reid) About the …

PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258)

June 29, 2023

An authentication bypass vulnerability (CVE-2023-26258) in the Arcserve Unified Data Protection (UDP) enterprise data protection solution can be exploited to compromise admin …

Microsoft Teams vulnerability allows attackers to deliver malware to employees

June 23, 2023

Security researchers have uncovered a bug that could allow attackers to deliver malware directly into employees’ Microsoft Teams inbox. “Organisations that use …

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

June 21, 2023

CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being …