Posts tagged Emergent Threat Response

Detection and Response
Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs
Rapid7

Threat Research
CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile
Drew Burton

Exposure Management
Critical Zero-Day Vulnerability in Citrix NetScaler ADC and NetScaler Gateway
Caitlin Condon

Vulnerabilities and Exploits
Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities
Caitlin Condon

Exposure Management
SonicWall Recommends Urgent Patching for GMS and Analytics CVEs
Caitlin Condon

Exposure Management
CVE-2023-34362: MOVEit Vulnerability Timeline of Events
Rapid7

Exposure Management
CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability
Drew Burton

Exposure Management
CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances
Caitlin Condon

Detection and Response
Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability
Caitlin Condon

Vulnerabilities and Exploits
Widespread Exploitation of Zyxel Network Devices
Drew Burton

Vulnerabilities and Exploits
CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability
Drew Burton

Vulnerabilities and Exploits
Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign
Rapid7

Exposure Management
Active Exploitation of IBM Aspera Faspex CVE-2022-47986
Caitlin Condon

Threat Research
Rapid7-Observed Exploitation of Adobe ColdFusion
Clayton Zechman

Threat Research
Active Exploitation of ZK Framework CVE-2022-36537
Stephen Fewer

Vulnerabilities and Exploits
CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability
Glenn Thorpe

Exposure Management
CVE-2023-22501: Critical Broken Authentication Flaw in Jira Service Management Products
Caitlin Condon

Detection and Response
Ransomware Campaign Compromising VMware ESXi Servers
Caitlin Condon

Threat Research
Exploitation of GoAnywhere MFT zero-day vulnerability
Caitlin Condon

Vulnerabilities and Exploits
Exploitation of Control Web Panel CVE-2022-44877
Caitlin Condon

Vulnerabilities and Exploits
CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability
Glenn Thorpe