Posts tagged Emergent Threat Response

Using InsightVM to Find Apache Log4j CVE-2021-44228

Vulnerabilities and Exploits

Using InsightVM to Find Apache Log4j CVE-2021-44228

Greg Wiseman

Update on Log4Shell’s Impact on Rapid7 Solutions and Systems

Exposure Management

Update on Log4Shell’s Impact on Rapid7 Solutions and Systems

Rapid7

Driver-Based Attacks: Past and Present

Vulnerabilities and Exploits

Driver-Based Attacks: Past and Present

Jake Baines

Widespread Exploitation of Critical Remote Code Execution in Apache Log4j

Exposure Management

Widespread Exploitation of Critical Remote Code Execution in Apache Log4j

boB Rudis

Patch Now: SonicWall Fixes Multiple Vulnerabilities in SMA 100 Devices

Exposure Management

Patch Now: SonicWall Fixes Multiple Vulnerabilities in SMA 100 Devices

Glenn Thorpe

Oh No, Zoho: Active Exploitation of CVE-2021-44077 Allowing Unauthenticated Remote Code Execution

Exposure Management

Oh No, Zoho: Active Exploitation of CVE-2021-44077 Allowing Unauthenticated Remote Code Execution

Glenn Thorpe

Ongoing Exploitation of Windows Installer CVE-2021-41379

Exposure Management

Ongoing Exploitation of Windows Installer CVE-2021-41379

Glenn Thorpe

Active Exploitation of Apache HTTP Server CVE-2021-40438

Exposure Management

Active Exploitation of Apache HTTP Server CVE-2021-40438

Caitlin Condon

CVE-2021-43287 Allows Pre-Authenticated Build Takeover of GoCD Pipelines

Exposure Management

CVE-2021-43287 Allows Pre-Authenticated Build Takeover of GoCD Pipelines

Caitlin Condon

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

Vulnerabilities and Exploits

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

Caitlin Condon

New NPM library hijacks (coa and rc)

Vulnerabilities and Exploits

New NPM library hijacks (coa and rc)

Caitlin Condon

Trojan Source CVE-2021-42572: No Panic Necessary

Vulnerabilities and Exploits

Trojan Source CVE-2021-42572: No Panic Necessary

boB Rudis

GitLab Unauthenticated Remote Code Execution CVE-2021-22205 Exploited in the Wild

Exposure Management

GitLab Unauthenticated Remote Code Execution CVE-2021-22205 Exploited in the Wild

Jake Baines

NPM Library (ua-parser-js) Hijacked: What You Need to Know

Vulnerabilities and Exploits

NPM Library (ua-parser-js) Hijacked: What You Need to Know

Glenn Thorpe

Apache HTTP Server CVE-2021-41773 Exploited in the Wild

Exposure Management

Apache HTTP Server CVE-2021-41773 Exploited in the Wild

Caitlin Condon

Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)

Exposure Management

Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)

Glenn Thorpe

Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084

Exposure Management

Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084

Caitlin Condon

ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers

Exposure Management

ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers

Caitlin Condon

Popular Attack Surfaces, August 2021: What You Need to Know

Exposure Management

Popular Attack Surfaces, August 2021: What You Need to Know

Glenn Thorpe

PetitPotam: Novel Attack Chain Can Fully Compromise Windows Domains

Exposure Management

PetitPotam: Novel Attack Chain Can Fully Compromise Windows Domains

Caitlin Condon

Microsoft SAM File Readability CVE-2021-36934: What You Need to Know

Vulnerabilities and Exploits

Microsoft SAM File Readability CVE-2021-36934: What You Need to Know

Caitlin Condon