Posts tagged Emergent Threat Response

Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs

Detection and Response

Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs

Rapid7's avatar

Rapid7

CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile

Threat Research

CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile

Drew Burton's avatar

Drew Burton

Critical Zero-Day Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

Exposure Management

Critical Zero-Day Vulnerability in Citrix NetScaler ADC and NetScaler Gateway

Caitlin Condon's avatar

Caitlin Condon

Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities

Vulnerabilities and Exploits

Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities

Caitlin Condon's avatar

Caitlin Condon

SonicWall Recommends Urgent Patching for GMS and Analytics CVEs

Exposure Management

SonicWall Recommends Urgent Patching for GMS and Analytics CVEs

Caitlin Condon's avatar

Caitlin Condon

CVE-2023-34362: MOVEit Vulnerability Timeline of Events

Exposure Management

CVE-2023-34362: MOVEit Vulnerability Timeline of Events

Rapid7's avatar

Rapid7

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability

Exposure Management

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability

Drew Burton's avatar

Drew Burton

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Exposure Management

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Caitlin Condon's avatar

Caitlin Condon

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Detection and Response

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Caitlin Condon's avatar

Caitlin Condon

Widespread Exploitation of Zyxel Network Devices

Vulnerabilities and Exploits

Widespread Exploitation of Zyxel Network Devices

Drew Burton's avatar

Drew Burton

CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability

Vulnerabilities and Exploits

CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability

Drew Burton's avatar

Drew Burton

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Vulnerabilities and Exploits

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Rapid7's avatar

Rapid7

Active Exploitation of IBM Aspera Faspex CVE-2022-47986

Exposure Management

Active Exploitation of IBM Aspera Faspex CVE-2022-47986

Caitlin Condon's avatar

Caitlin Condon

Rapid7-Observed Exploitation of Adobe ColdFusion

Threat Research

Rapid7-Observed Exploitation of Adobe ColdFusion

Clayton Zechman's avatar

Clayton Zechman

Active Exploitation of ZK Framework CVE-2022-36537

Threat Research

Active Exploitation of ZK Framework CVE-2022-36537

Stephen Fewer's avatar

Stephen Fewer

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

Vulnerabilities and Exploits

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

Glenn Thorpe's avatar

Glenn Thorpe

CVE-2023-22501: Critical Broken Authentication Flaw in Jira Service Management Products

Exposure Management

CVE-2023-22501: Critical Broken Authentication Flaw in Jira Service Management Products

Caitlin Condon's avatar

Caitlin Condon

Ransomware Campaign Compromising VMware ESXi Servers

Detection and Response

Ransomware Campaign Compromising VMware ESXi Servers

Caitlin Condon's avatar

Caitlin Condon

Exploitation of GoAnywhere MFT zero-day vulnerability

Threat Research

Exploitation of GoAnywhere MFT zero-day vulnerability

Caitlin Condon's avatar

Caitlin Condon

Exploitation of Control Web Panel CVE-2022-44877

Vulnerabilities and Exploits

Exploitation of Control Web Panel CVE-2022-44877

Caitlin Condon's avatar

Caitlin Condon

CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability

Vulnerabilities and Exploits

CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability

Glenn Thorpe's avatar

Glenn Thorpe