Security Practitioner

Filters

Showing 37–42 of 99 results

Go Hack Yourself: War Stories from ~20k Pentests with NodeZero │ Security Weekly

August 15, 2023 | Webinar Replays

Horizon3.ai CEO Snehal Antani discuss several real-world examples of what autonomous pentesting discovered in networks just like yours. You’ll hear more about how fast and easy it was to safely compromise some of the biggest (and smallest) networks in the world - with full domain takeover in a little more than a few hours. Learn how you can safely do...

Lexmark Command Injection Vulnerability ZDI-CAN-19470 Pwn2Own Toronto 2022

August 10, 2023 | Attack Blogs

Introduction In December 2022, we competed at our first pwn2own. We were able to successfully exploit the Lexmark MC3224i using a command injection 0-day. This post will detail the process we used to discover, weaponize, and have some fun with this vulnerability. You can find our POC here. Printer Acquisition It was rather difficult to acquire the Lexmark MC3224adwe. So...

CVE-2023-39143: PaperCut Path Traversal/File Upload RCE Vulnerability

August 4, 2023 | Attack Blogs, Disclosures

Summary CVE-2023-39143 is a critical vulnerability we disclosed to PaperCut that affects the widely used PaperCut NG/MF print management software. It affects PaperCut NG/MF running on Windows, prior to version 22.1.3. If you are a user of PaperCut on Windows, and have it exposed to the Internet, we recommend you check out the July 2023 PaperCut security bulletin and immediately...

Airiam and Horizon3.ai Threat Actors Webinar – Attack Simulation

July 26, 2023 | Webinar Replays

Art Ocain, Field CISO at Airiam, and Naveen Sunkavally, Chief Architect at Horizon3.ai join forces in this webinar, where you will gain an in-depth understanding of threat actors and their tactics through a LIVE attack simulation.

War Stories from 15K Pentests: With Log4shell, Vulnerable ≠ Exploitable

June 22, 2023 | Webinar Replays

In Horizon3.ai's three years of operation, we have conducted more than 15,000 pentests yielding results for our clients and data for our engineers. Join our CEO, Snehal Antani, for stories from the trenches. This month we'll take a look at the Log4shell example, and learn about how the distinction between being vulnerable and being exploitable is so important. During this...

MOVEit Transfer CVE-2023-34362 Deep Dive and Indicators of Compromise

June 9, 2023 | Attack Blogs

On May 31, 2023, Progress released a security advisory for their MOVEit Transfer application which detailed a SQL injection leading to remote code execution and urged customers to update to the latest version. The vulnerability, CVE-2023-34362, at the time of release was believed to have been exploited in-the-wild as a 0-day dating back at least 30 days. Soon after publication,...

« Previous
1
…
5
6
7
8
9
…
17
Next »

How can NodeZero help you?

Let our experts walk you through a demonstration of NodeZero, so you can see how to put it to work for your company.

Schedule a Demo

Security Strategies

Industry Insights

Attack Research

Attack Content