Category: News Mention | Page 21

Go Hack Yourself: 5 Crazy Ways NodeZero Became Domain Admin

Aug 30, 2022

Attackers don’t have to “hack in” using zero-day vulnerabilities. Often, attackers log in by chaining together misconfigurations, dangerous product defaults, and exploitable vulnerabilities to harvest and reuse credentials.

This session will discuss five real-world attacks that enabled Horizon3.ai to become domain administrator, gain access to sensitive data, take over cloud VPCs, and compromise critical business systems. In most instances no security alerts were triggered despite having state-of-the-art security tools in place. Attendees will learn how they can find, fix, and verify the remediation of exploitable attack paths so they can proactively harden their network.

CVE-2020-29437: Authenticated SQL Injection in OrangeHRM < 4.6.0.1

OrangeHRM is software for Human Resource Management (HRM). In a routine audit of the open source version of OrangeHRM, we discovered a SQL injection vulnerability in the “Buzz” module, an integrated social media tool within the software.

Authenticated low privilege users can use this vulnerability to disclose the full contents of the OrangeHRM database, including sensitive user personal information and password hashes. It’s also possible to execute a denial of service attack to bring down the application.

Go Hack Yourself: 5 Crazy Ways NodeZero Became Domain Admin

Aug 30, 2022

CVE-2020-29437: Authenticated SQL Injection in OrangeHRM < 4.6.0.1

MRK Technologies Partners with Horizon3.ai, Unveils Autonomous Penetration Tests as a Service

MSSP Alert: 04/22/22 APTaaS leverages Horizon3.ai’s NodeZero penetration testing platform, MRK stated. NodeZero lets a user view their organization’s security posture through the eyes of a cybercriminal, Horizon3.ai said. As such, the platform helps a user identify and address ineffective security controls. Read the entire article here

MRK Technologies Adds New Autonomous Penetration Tests

Infosec Report: 04/18/22 MRK Technologies, a cybersecurity risk management company, has announced a collaboration with Horizon3.ai to assist its clients tackle the ever-evolving ransomware threat with a new Autonomous Penetration Tests as a Service (APTaaS). Read the entire article here

Scanning That QR Code Could Be More Dangerous Than You Realize

Lifewire: 04/13/22 A person clicks on it and presumes it will provide a restaurant menu, conference agenda, or even a charity link, and it very well could be a spoofed site or a malicious link that downloads code to your computer or mobile device. Read the entire article here

2 years later: What’s next in security for the pandemic-era workforce

CIO Dive: 04/13/22 Organizations also need to focus on the fundamentals of security, according to Snehal Antani, CEO and co-founder of Horizon3.ai. That includes good identity and access hygiene, continuous assessment, and the adoption of a purple culture – using offensive actions to inform defensive actions and focus their efforts on the issues most likely to impact their business first....

Forrester Pegs B2B Fraud, Cyber Insurance Complacency as Top Threats in 2022

Ecommercetimes: 04/13/22 Increases in B2B fraud, cyber insurance complacency, and governance gaps in the work-from-anywhere model are among the top cybersecurity threats faced by businesses in 2022, according to a report released Tuesday by Forrester…. Read entire article here

Security Strategies

Industry Insights

Attack Research

No Results Found

Attack Content

No Results Found

No Results Found

Security Strategies

Industry Insights

Attack Research

No Results Found

Attack Content

No Results Found

No Results Found

Hot Off the Press

Filters

How can NodeZero help you?