Horizon3.ai

Horizon3.ai NodeZero Insights enables executives to visualize changes in their security posture

December 10, 2024

Horizon3.ai launched NodeZero Insights, a platform designed for security leaders, CIOs, CISOs and practitioners. This new solution delivers real-time dashboards to measure, …

Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)

November 15, 2024

Attackers have been spotted exploiting two additional vulnerabilities (CVE-2024-9463, CVE-2024-9465) in Palo Alto Networks’ Expedition firewall configuration migration …

Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)

November 8, 2024

A vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition, a firewall configuration migration tool, is being exploited by attackers in the wild, the Cybersecurity and …

PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987)

September 25, 2024

Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk (WHD) vulnerability that could be exploited by …

PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190)

September 17, 2024

CVE-2024-8190, an OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) v4.6, is under active exploitation. Details about the attacks are still unknown, …

PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992)

May 29, 2024

Horizon3.ai researches have released proof-of-concept (PoC) exploits for CVE-2024-23108 and CVE-2023-34992, vulnerabilities that allow remote, unauthenticated command …

HHS pledges $50M for autonomous vulnerability management solution for hospitals

May 23, 2024

As organizations in the healthcare sector continue to be a prime target for ransomware gangs and CISA warns about a vulnerability (CVE-2023-43208) in a healthcare-specific …

Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788)

March 14, 2024

A recently fixed SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient Endpoint Management Server (EMS) solution has apparently piqued the interest of …

White House: Use memory-safe programming languages to protect the nation

February 27, 2024

The White House is asking the technical community to switch to using memory-safe programming languages – such as Rust, Python, Swift, C#, Java, and Go – to prevent …

PoC for easily exploitable Fortra GoAnywhere MFT vulnerability released (CVE-2024-0204)

January 24, 2024

Proof-of-concept (PoC) exploit code for a critical vulnerability (CVE-2024-0204) in Fortra’s GoAnywhere MFT solution has been made public, sparking fears that attackers …

Ivanti Sentry zero-day vulnerability exploited, patch ASAP! (CVE-2023-38035)

August 22, 2023

Ivanti is urging administrators of Ivanti Sentry (formerly MobileIron Sentry) gateways to patch a newly discovered vulnerability (CVE-2023-38035) that could be exploited to …

PaperCut fixes bug that can lead to RCE, patch quickly! (CVE-2023-39143)

August 7, 2023

Horizon3.ai researchers have published some details (but no PoC for now, thankfully!) about CVE-2023-39143, two vulnerabilities in PaperCut application servers that could be …