Posts tagged Emergent Threat Response
Vulnerabilities and Exploits
CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack
Rapid7
Detection and Response
Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators
Rapid7
Exposure Management
Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise
Caitlin Condon
Exposure Management
CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls
Caitlin Condon
Vulnerabilities and Exploits
Backdoored XZ Utils (CVE-2024-3094)
Rapid7
Threat Research
CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)
Rapid7
Threat Research
High-Risk Vulnerabilities in ConnectWise ScreenConnect
Rapid7
Threat Research
RCE to Sliver: IR Tales from the Field
Rapid7
Threat Research
Critical Fortinet FortiOS CVE-2024-21762 Exploited
Rapid7
Threat Research
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
Caitlin Condon
Threat Research
Critical CVEs in Outdated Versions of Atlassian Confluence and VMware vCenter Server
Rapid7
Threat Research
Zero-Day Exploitation of Ivanti Connect Secure and Policy Secure Gateways
Caitlin Condon
Vulnerabilities and Exploits
CVE-2023-49103 - Critical Information Disclosure in ownCloud Graph API
Stephen Fewer
Vulnerabilities and Exploits
CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest
Caitlin Condon
Vulnerabilities and Exploits
Rapid7-Observed Exploitation of Atlassian Confluence CVE-2023-22518
Rapid7
Vulnerabilities and Exploits
Suspected Exploitation of Apache ActiveMQ CVE-2023-46604
Rapid7
Vulnerabilities and Exploits
CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability
Rapid7
Vulnerabilities and Exploits
CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability
Caitlin Condon
Vulnerabilities and Exploits
CVE-2023-22515: Zero-Day Privilege Escalation in Confluence Server and Data Center
Caitlin Condon
Threat Research
Critical Vulnerabilities in WS_FTP Server
Caitlin Condon
Exposure Management
Exploitation of Juniper Networks SRX Series and EX Series Devices
Ron Bowes