Author

Caitlin Condon

Former Director, Vulnerability Intelligence

Ransomware Campaign Compromising VMware ESXi Servers

Exploitation of GoAnywhere MFT zero-day vulnerability

Exploitation of Control Web Panel CVE-2022-44877

CVE-2021-39144: VMware Cloud Foundation Unauthenticated Remote Code Execution

CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server

Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite

Exploitation of Mitel MiVoice Connect SA CVE-2022-29499

Widespread Exploitation of VMware Workspace ONE Access CVE-2022-22954

Analyzing the Attack Landscape: Rapid7’s 2021 Vulnerability Intelligence Report

CVE-2022-0847: Arbitrary File Overwrite Vulnerability in Linux Kernel

Active Exploitation of Apache HTTP Server CVE-2021-40438

Announcing the 2021 Metasploit Community CTF

CVE-2021-43287 Allows Pre-Authenticated Build Takeover of GoCD Pipelines

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

New NPM library hijacks (coa and rc)

Apache HTTP Server CVE-2021-41773 Exploited in the Wild

Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084

ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers

PetitPotam: Novel Attack Chain Can Fully Compromise Windows Domains

Microsoft SAM File Readability CVE-2021-36934: What You Need to Know

CVE-2021-21985: What You Need To Know About the Latest Critical vCenter Server Vulnerability