Rapid7

Posts tagged Emergent Threat Response

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

Exposure Management

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

Caitlin Condon's avatar

Caitlin Condon

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

Exposure Management

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

Caitlin Condon's avatar

Caitlin Condon

Multiple Vulnerabilities in Common Unix Printing System (CUPS)

Exposure Management

Multiple Vulnerabilities in Common Unix Printing System (CUPS)

Rapid7's avatar

Rapid7

High-Risk Vulnerabilities in Common Enterprise Technologies

Exposure Management

High-Risk Vulnerabilities in Common Enterprise Technologies

Rapid7's avatar

Rapid7

CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices

Exposure Management

CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices

Rapid7's avatar

Rapid7

Multiple Vulnerabilities in Veeam Backup & Replication

Exposure Management

Multiple Vulnerabilities in Veeam Backup & Replication

Rapid7's avatar

Rapid7

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

Detection and Response

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

Rapid7's avatar

Rapid7

Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

Exposure Management

Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

Ryan Emmons's avatar

Ryan Emmons

Malvertising Campaign Leads to Execution of Oyster Backdoor

Detection and Response

Malvertising Campaign Leads to Execution of Oyster Backdoor

Rapid7's avatar

Rapid7

CVE-2024-28995: Trivially Exploitable Information Disclosure Vulnerability in SolarWinds Serv-U

Exposure Management

CVE-2024-28995: Trivially Exploitable Information Disclosure Vulnerability in SolarWinds Serv-U

Stephen Fewer's avatar

Stephen Fewer

CVE-2024-24919: Check Point Security Gateway Information Disclosure

Exposure Management

CVE-2024-24919: Check Point Security Gateway Information Disclosure

Rapid7's avatar

Rapid7

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

Vulnerabilities and Exploits

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

Rapid7's avatar

Rapid7

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

Detection and Response

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

Rapid7's avatar

Rapid7

Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise

Exposure Management

Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise

Caitlin Condon's avatar

Caitlin Condon

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

Exposure Management

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

Caitlin Condon's avatar

Caitlin Condon

Backdoored XZ Utils (CVE-2024-3094)

Vulnerabilities and Exploits

Backdoored XZ Utils (CVE-2024-3094)

Rapid7's avatar

Rapid7

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

Threat Research

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

Rapid7's avatar

Rapid7

High-Risk Vulnerabilities in ConnectWise ScreenConnect

Threat Research

High-Risk Vulnerabilities in ConnectWise ScreenConnect

Rapid7's avatar

Rapid7

RCE to Sliver: IR Tales from the Field

Threat Research

RCE to Sliver: IR Tales from the Field

Noah Hemker's avatar

Noah Hemker

Critical Fortinet FortiOS CVE-2024-21762 Exploited

Threat Research

Critical Fortinet FortiOS CVE-2024-21762 Exploited

Rapid7's avatar

Rapid7

CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT

Threat Research

CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT

Caitlin Condon's avatar

Caitlin Condon