Alert Advisory Archives - Page 2 of 2

Alert Advisory, CVE, Cybersecurity, Managed SOC Services, Vulnerability Assessment

Exploitation of Apache ActiveMQ Vulnerability CVE-2023-46604

Rapid7 Managed Detection and Response (MDR) found potential exploitation of Apache ActiveMQ CVE-2023-46604 in two distinct customer scenarios on Friday, […]

Alert Advisory, CVE, Cybersecurity, Managed SOC Services

CVE-2023-4966 (Citrix Bleed) Active Exploitation

Citrix published a security bulletin on October 10, 2023, regarding a vulnerability (CVE-2023-4966) that affects the NetScaler ADC and NetScaler […]

Alert Advisory, Cybersecurity, Managed SOC Services, Vulnerability Assessment

CVE-2023-46747: Critical Authentication Bypass Vulnerability in F5 BIG-IP

BIG-IP, a comprehensive portfolio of hardware platforms and software solutions from F5 Networks, focuses on security, dependability, and performance. These […]

Alert Advisory, Cybersecurity, Vulnerability Assessment

North Korean Attacks Exploiting JetBrains TeamCity Vulnerability

More than 30,000 clients worldwide use JetBrains’ TeamCity continuous integration and continuous deployment (CI/CD) server. Background: The program can be […]

Alert Advisory, Cyber Threat Intelligence, Cybersecurity, Middle East

With Unique Implants, A New ShroudedSnooper Actor Targets Middle Eastern Telecom Companies

State-sponsored actors and highly skilled adversaries have frequently targeted telecommunications businesses worldwide in recent years. Background: The great majority of […]

Alert Advisory, Cybersecurity, Malware Protection

Evidence Leads to Lazarus as the VMConnect Supply Chain Attack Continues

Recently, Sonatype and Reversing Labs analyzed the fraudulent PyPI package ‘VMConnect,’ developed to imitate the authentic VMware vSphere connector module […]

Advanced Persistent Threat, Alert Advisory, Cyber Security, Middle East

Alert Advisory: Supply Chain Attack by Iran’s APT34 Targets the UAE

An Iranian threat group called OilRig typically targets businesses in the Middle East involved in various industries. Still, it has […]

Alert Advisory, Cyber Security, Security Operations Center, Vulnerability Assessment

Alert Advisory: Citrix ADC Gateway RCE – CVE-2023-3519

In this blog post, we will explore the details of Citrix ADC vulnerability, its potential consequences, and the importance of […]

Alert Advisory, Cyber Security, Managed SOC Services

CVE-2023-23397 – Critical Outlook Vulnerability

On March 14th, 2023, Microsoft released patches for approximately 80 newly found security vulnerabilities. There were two zero-day attacks among […]

Alert Advisory, Malware Protection, Managed SOC Services

Emotet Epoch 5

The notorious Emotet malware has returned with a new tactic to evade macro-based security restrictions and infect systems. This time, […]

Alert Advisory, Malware Protection, Managed Security Services

The Emotet Botnet Epoch4: A Highly Sophisticated and Dangerous Malware Campaign

Emotet is one of the most sophisticated and dangerous malware families currently in existence. It is a modular banking Trojan […]

Alert Advisory, Cyber Security, Vulnerability Assessment

ManageEngine RCE Vulnerability (CVE-2022-47966)

A remote code execution vulnerability (CVE-2022-47966) impacting a number of Zoho ManageEngine on-premise products with SAML SSO enabled has been […]

Alert Advisory, Cyber Security, Vulnerability Assessment

OWASSRF Exploit – Targeting Arbitrary Code Execution on Microsoft Exchange OWA

Two zero-day vulnerabilities in Microsoft Exchange were reportedly being actively exploited on September 29, 2022, with the potential to lead […]

Alert Advisory, Cyber Security, Managed SOC Services, News, Ransomware Protection, Security Operations Center

2022 is Over But What Did We Learn From Our Work

Throughout the year, numerous new incidents and rising threats were unveiled to the horror of many. In 2022, the world […]

Advanced Persistent Threat, Alert Advisory, Cyber Threat Management, Managed SOC Services

Alert Advisory: Insight into APT29

Threat group APT29 is allegedly operated by Russia’s Foreign Intelligence Service (SVR). They have been active since 2008 and frequently […]

Advanced Persistent Threat, Alert Advisory, Cyber Security, Incident Response, Managed Security Services, Managed SOC Services

Alert Advisory: Insight into APT42

APT42 is a state-sponsored cyber espionage group in Iran. The gang, which has been active at least since 2015, is […]

Alert Advisory, Incident Response, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, XDR

Alert Advisory: New Microsoft Exchange Zero-Days

Late on September 29, 2022, Microsoft acknowledged both zero-day vulnerabilities and stated that they were aware of “limited, targeted attacks […]

Alert Advisory, Cyber Security, Managed SOC Services, Ransomware Protection, Security Operations Center, XDR

Alert Advisory: Analysis of BlackCat Ransomware

BlackCat, also known as ALPHV-ng, ALPHV, and Noberus, is a Ransomware-as-a-Service (RaaS) threat that targets organizations across multiple sectors worldwide […]