Category: News Mention | Page 18

Nov 23, 2022

As we approach the holiday season, it is important that our customers remain stay and continue a regular cadence of autonomous pentests. Although it’s the time of year for holiday cheer, we’ve seen cyber threat actors (CTAs) take advantage of lackadaisical company manning and low staff.

CVE-2021-27927: CSRF to RCE Chain in Zabbix

Zabbix is an enterprise IT network and application monitoring solution. In a routine review of its source code, we discovered a CSRF (cross-site request forgery) vulnerability in the authentication component of the Zabbix UI. Using this vulnerability, an unauthenticated attacker can take over the Zabbix administrator’s account if the attacker can persuade the Zabbix administrator to follow a malicious link. This vulnerability is exploitable in all browsers even with the default SameSite=Lax cookie protection in place. The vulnerability is fixed in Zabbix versions 4.0.28rc1, 5.0.8rc1, 5.2.4rc1, and 5.4.0alpha1.

Holiday Season Threat Awareness

Nov 23, 2022

CVE-2021-27927: CSRF to RCE Chain in Zabbix

Researchers to release exploit for new VMware auth bypass, patch now

Bleeping Computer: 05/24/22 Horizon3.ai told BleepingComputer that the technical details in their report will include an analysis of the current patch to show “how an attacker may have previously abused this code path.” Read the entire article here

Chris Hill Named Horizon3 Federal & Public Sector Head

GovConWire: 05/24/22 Chris Hill be responsible for implementing the firm’s strategy to help government customers manage the cyber posture at their organizations. In the same announcement, Horizon3 said it teamed up with Carahsoft Technology to bring the NodeZero autonomous penetration testing platform to the government market. Read the entire article here

Double Blow of Ransomware Attack and Covid-19 Pandemic Shutters 157-Year-Old Lincoln College

CPO Magazine: 05/19/22 Brad Hong, Customer Success Manager for Horizon3.ai, adds some thoughts on why schools are an increasingly popular target for ransomware attacks: “The education sector continues to make for attractive targets as it’s very rare that a university focuses on its cyber security stack as its #1 priority. Read the entire article here

Lincoln College To Close Permanently After Cyberattack – 5 Cyber Experts Comment

Information Security Buzz: 05/16/22 Lincoln College (a private IL college named for Abraham Lincoln) announced that it is closing as a result of the financial burdens of the pandemic and a devastating December 2021 cyberattack “that thwarted admissions activities and hindered access to all institutional data, creating an unclear picture of Fall 2022 enrollment projections. Read the entire article here

Intelligent Waves has collaborated with Horizon3.ai

Infosecurity Outlook: 05/16/22 Intelligent Waves collaborated with Horizon3.ai to provide Department of Defence special operations with next-generation cybersecurity protection in DevOps. Intelligent Waves will leverage Horizon3.ai’s NodeZero autonomous penetration testing platform to validate architecture deployments. Read the entire article here

Security Strategies

Industry Insights

Attack Research

No Results Found

Attack Content

No Results Found

No Results Found

Security Strategies

Industry Insights

Attack Research

No Results Found

Attack Content

No Results Found

No Results Found

Hot Off the Press

Filters

How can NodeZero help you?