%term

CVE-2023-33299: Critical Fortinet FortiNAC RCE Vulnerability

Jun 23, 2023 By Andres Ramos In Arctic Wolf

On June 23, 2023, Fortinet disclosed a critical Remote Code Execution (RCE) vulnerability (CVE-2023-33299) affecting FortiNAC, a network access control solution utilized by organizations to manage network access policies and compliance. This vulnerability is the result of the deserialization of untrusted data. Deserialization vulnerabilities such as this one are dangerous because a threat actor can insert a modified serialized object into the system which leads to unauthenticated RCE.

Read Post

Arctic Wolf

Read more about CVE-2023-33299: Critical Fortinet FortiNAC RCE Vulnerability

How to Spend Less Time Fixing CVEs

Jun 23, 2023 By JFrog In JFrog

One of the most common complaints of SCA tools from developers is that they generate far too many results, requiring them to fix lots of vulnerabilities that don’t in reality, pose any risk. This wastes time, money and lowers productivity.

View Video

JFrog

Read more about How to Spend Less Time Fixing CVEs

Fortinet Fortigate Vulnerability CVE-2023-27997: How to Surface Exposed Devices and Mitigate the Threat

Jun 23, 2023 By SecurityScorecard In SecurityScorecard

Recently, a critical vulnerability tracked as CVE-2023-27997 was identified in Fortinet Fortigate appliances. Fortinet makes some of the most popular firewall and VPN devices on the market, which makes them an attractive target for threat actors. This vulnerability has been exploited by the Chinese APT group Volt Typhoon, among others, targeting governments and organizations worldwide. As a result, Fortinet has released an urgent patch for affected systems.

Read Post

SecurityScorecard

Read more about Fortinet Fortigate Vulnerability CVE-2023-27997: How to Surface Exposed Devices and Mitigate the Threat

Exploiting ancient vulnerabilities: How did the 3CX supply chain attack occur and what can we learn from it?

Jun 22, 2023 By Etay Maor, Senior Director of Security Strategy In Cato Networks

On March 29th, North-Korean linked threat-actors targeted 3CX, a VoIP IPX developer, exploiting a 10-year-old vulnerability (CVE-2013-3900) that made executables appear to be legitimately signed by Microsoft when, in fact, they were being used to distribute malware. The 3CX attack is just the latest in a series of high-profile supply chain attacks over the past year. The SolarWinds attack compromised the Orion system, affecting thousands of organizations, and the Kaseya VSA attack that was used to deliver REvil ransomware also to thousands of organizations and is considered one of the largest security breaches of the 21st century.

Read Post

Cato Networks

Read more about Exploiting ancient vulnerabilities: How did the 3CX supply chain attack occur and what can we learn from it?

The Implications of CVSS 4.0 for Cybersecurity

Jun 22, 2023 By Alastair Digby In Informer

Infosec teams rely on metrics and frameworks to prioritize vulnerabilities and understand their potential impact as part of their vulnerability management programs. These metrics are crucial for organizations to assess the impact of any vulnerabilities identified during any type of vulnerability assessment. One such framework widely used by penetration testing organizations and security tools is the Common Vulnerability Scoring System (CVSS).

Read Post

Informer

Read more about The Implications of CVSS 4.0 for Cybersecurity

Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

Jun 22, 2023 By Vandana Verma Sehgal In Snyk

Open source code is a vital aspect of modern development. It allows developers to increase their application’s functionality, while reducing overall development time. However, the system isn’t perfect. The nature of third party software and it’s dependencies often creates opportunity for security vulnerabilities to lurk in libraries and downloads.

Read Post

Snyk

Read more about Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub

Installilng the Snyk Security in Jira Cloud app

Jun 22, 2023 By Snyk In Snyk

Snyk Security in Jira Cloud provides actionable security alerts to reduce disruption to developer productivity. Installing the app is easy.

View Video

Snyk

Read more about Installilng the Snyk Security in Jira Cloud app

HiBob - Can You Please Share Customers' Data?

Jun 22, 2023 By Shmuel Cohen In SafeBreach

As part of our ongoing commitment to conducting original research and maintaining an up-to-date Hacker’s Playbook, the SafeBreach Labs team is dedicated to uncovering new threats. My recent research focused on searching for vulnerabilities and design issues in the API security domain in line with this objective. As a result, we discovered a security vulnerability in the popular HR information system (HRIS) platform called HiBob.

Read Post

SafeBreach

Read more about HiBob - Can You Please Share Customers' Data?

CVSS 4.0 - What's New?

Jun 22, 2023 By Jeff Martin In Mend

The latest version of the Common Vulnerability Scoring System, CVSS 4.0, entered its public preview phase at the 35th annual FIRST conference put on by FIRST, the Forum of Incident Response and Security Teams. An international confederation of computer incident response teams, FIRST writes the CVSS specification that plays such an important role in identifying and cataloging software and application vulnerabilities.

Read Post

Mend

Read more about CVSS 4.0 - What's New?

MOVEIt Vulnerability: A Painful Reminder That Threat Actors Aren't the Only Ones Responsible for a Data Breach

Jun 21, 2023 By Avishai Avivi In SafeBreach

The MOVEIt data breach continues to impact a number of both private and government groups across the US and Europe by exposing confidential data. With breaches like this becoming increasingly common, it can be easy to blame advanced persistent threat (APT) groups and other malicious actors; however, there is a valuable lesson to learn from the MOVEit breach: it is essential to be proactive about these threats, Not doing so may lead to a breach.

Read Post