Go Hack Yourself: War Stories from ~20k Pentests with NodeZero │ Security Weekly

Aug 15, 2023

Horizon3.ai CEO Snehal Antani discuss several real-world examples of what autonomous pentesting discovered in networks just like yours. You’ll hear more about how fast and easy it was to safely compromise some of the biggest (and smallest) networks in the world – with full domain takeover in a little more than a few hours. Learn how you can safely do the same in your own network today!

Writeup for CVE-2023-43208: NextGen Mirth Connect Pre-Auth RCE

Jan 12, 2024

Mirth Connect, by NextGen HealthCare, is an open source data integration platform widely used by healthcare companies. Versions prior to 4.4.1 are vulnerable to an unauthenticated remote code execution vulnerability, CVE-2023-43208. If you’re a user of Mirth Connect, you’ll want to upgrade to the latest patch release, 4.4.1, as of this writing.

Go Hack Yourself: War Stories from ~20k Pentests with NodeZero │ Security Weekly

Aug 15, 2023

Writeup for CVE-2023-43208: NextGen Mirth Connect Pre-Auth RCE

Jan 12, 2024

Contact Horizon3.ai

Horizon3.ai’s mission is to help you find and fix attack vectors before attackers can exploit them. Contact us now for a quote or if you have any questions.

Not into forms? We’d still love to hear from you.

General Information | info@horizon3.ai

Human Resources | hr@horizon3.ai

Public Relations | press@horizon3.ai

650-445-4457

Looking for More Horizon3.ai Content?

→

Red Team Blog

CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

by Zach Hanley | May 20, 2024 | Attack Blogs, Disclosures

In early 2023, given some early success in auditing Fortinet appliances, I continued the effort and landed upon the Fortinet FortiSIEM. Several issues were discovered during this audit that ultimately lead to unauthenticated remote code execution in the context of the...