by Bhabesh Raj Rai, Associate Security Analytics EngineerOn May 4, 2021, Trustwave researchers released details for a malware dubbed Pingback that uses an Internet Control Message Protocol (ICMP) tunnel for its backdoor [...]
by Bhabesh Raj Rai, Associate Security Analytics EngineerDetecting attacks that target human error using the Damerau–Levenshtein distanceThe longer threat actors remain undetected, the more damage they can do. In an attempt to [...]
by Bhabesh Raj Rai, Associate Security Analytics EngineerHunting for PsExec artifacts in your enterprisePsExec is a free, lightweight tool that can execute remote systems processes and supports full interactivity for console applications. [...]
by Bhabesh Raj Rai, Associate Security Analytics Engineer On March 2, 2021, Microsoft released emergency security updates for Microsoft Exchange Server that patched seven vulnerabilities, among them four were zero-days that were [...]
By Bhabesh Raj Rai, Associate Security Analytics Engineer On January 26, 2021, the Qualys Research Labs disclosed a heap-based buffer overflow vulnerability (CVE-2021-3156) in sudo, which on successful exploitation allows any local [...]
By Bhabesh Raj Rai, Associate Security Analytics Engineer On December 13, 2020, CISA released Emergency Directive 21-01, “Mitigate SolarWinds Orion Code Compromise” in response to the exploitation of SolarWinds Orion products that allows an attacker [...]
By Bhabesh Raj Rai, Associate Security Analytics Engineer On Tuesday, December 8, FireEye disclosed that they were compromised by a highly sophisticated nation-state group, most likely Russian, that used novel techniques to exfiltrate their [...]
By Bhabesh Raj Rai, Associate Security Analytics Engineer First discovered in August 2018, Ryuk is a ransomware strain that has a reputation of being one of the nastiest ransomware families to ever [...]
By Bhabesh Raj Rai, Associate Security Analytics Engineer The October release of Oracle's quarterly Critical Patch Update (CPU) fixed a total of 402 vulnerabilities across its various product families. More than half [...]
By Bhabesh Raj Rai, Associate Security Analytics Engineer, LogPoint On February 11, 2020, Microsoft released a security advisory for a severe remote code execution vulnerability (CVE-2020-0688), with a CVSS score of 8.8. [...]
If you didn't find what you were looking for, try a new search!
