Lucene search
+L

37356 matches found

Rapid7 Blog
Rapid7 Blog
added 2023/09/07 3:13 p.m.24 views

A Look at Our Development Process of the Cloud Resource Enrichment API

In today's ever-evolving cybersecurity landscape, detecting and responding to cyber threats is paramount for organizations in cloud environments. At the same time, investigating cyber threat alerts can be arduous due to the time-consuming and complex process of data collection. To tackle this pai...

6.7AI score
SaveExploits0
ICS
ICS
added 2023/09/07 12:00 p.m.95 views

Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

Actions to take today to mitigate malicious cyber activity: 1. Patch all systems for known exploited vulnerabilities KEVs, including firewall security appliances. 2. Monitor for unauthorized use of remote access software using endpoint detection tools. 3. Remove unnecessary disabled accounts and...

10CVSS10AI score0.99999EPSS
SaveExploits394References152
The Hacker News
The Hacker News
added 2023/09/06 11:22 a.m.55 views

Three CISOs Share How to Run an Effective SOC

The role of the CISO keeps taking center stage as a business enabler: CISOs need to navigate the complex landscape of digital threats while fostering innovation and ensuring business continuity. Three CISOs; Troy Wilkinson, CISO at IPG; Rob Geurtsen, former Deputy CISO at Nike; and Tammy Moskites...

6.6AI score
SaveExploits0
Trellix
Trellix
added 2023/09/06 12:00 a.m.18 views

QakBot's Endgame: The Final Move Before the Takedown

QakBot's Endgame: The Final Move Before the Takedown By Daksh Kapur, Nico Paulo Yturriaga and Alfred Alvarado · September 06, 2023 Figure 1 Attribution at the bottom Qakbot, known under aliases like QBot, QuakBot, and Pinkslipbot, represents an intricately advanced malware strain that has...

7.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/09/05 7:44 a.m.714 views

Exploit for CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library P...

9.8CVSS9.6AI score0.82585EPSS
SaveExploits6
OpenVAS
OpenVAS
added 2023/09/05 12:00 a.m.13 views

Huawei EulerOS: Security Advisory for libcap (EulerOS-SA-2023-2690)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS7.3AI score0.00352EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/09/05 12:00 a.m.16 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2664)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/09/05 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-2637)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS7.7AI score0.0271EPSS
SaveExploits2References2
The Hacker News
The Hacker News
added 2023/09/04 12:54 p.m.51 views

X (Twitter) to Collect Biometric Data from Premium Users to Combat Impersonation

X, the social media site formerly known as Twitter, has updated its privacy policy to collect users' biometric data to tackle fraud and impersonation on the platform. "Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes," the...

6.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/09/04 12:00 a.m.20 views

Ubuntu: Security Advisory (USN-6333-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.12484EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/01 11:30 a.m.33 views

MAL-2023-8354 Malicious code in alibabacloud-vpc20180317 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0c24b33d1db8fffd5daaf1985d25add4bc66e7879e1a6efbc7ae706816931834 Malicious Typosquatting packages campaign targeting developers, steals cloud service credentials Source: google-open-source-security...

7.3AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2023/08/31 12:46 p.m.305 views

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

Three additional rogue Python packages have been discovered in the Package Index PyPI repository as part of an ongoing malicious software supply chain campaign called VMConnect, with signs pointing to the involvement of North Korean state-sponsored threat actors. The findings come from...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/08/30 11:57 p.m.305 views

Exploit for Path Traversal in Stagil Stagil_Navigation

POC script for the vulnerability exposure in the Jira plugin S...

7.5CVSS7.3AI score0.47199EPSS
SaveExploits5
The Hacker News
The Hacker News
added 2023/08/30 5:04 p.m.76 views

Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

New findings show that malicious actors could leverage a sneaky malware detection evasion technique and bypass endpoint security solutions by manipulating the Windows Container Isolation Framework. The findings were presented by Deep Instinct security researcher Daniel Avinoam at the DEF CON...

6.8AI score
SaveExploits0
Information Security Automation
Information Security Automation
added 2023/08/30 4:15 p.m.261 views

August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper

August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper. Hello everyone! This month I decided NOT to make an episode completely dedicated to Microsoft Patch Tuesday. Instead, this episode will be an...

10CVSS8.4AI score0.99945EPSS
SaveExploits170
ICS
ICS
added 2023/08/30 12:00 p.m.29 views

Identification and Disruption of QakBot Infrastructure

SUMMARY The Cybersecurity and Infrastructure Security Agency CISA and Federal Bureau of Investigation FBI are releasing this joint Cybersecurity Advisory CSA to disseminate QakBot infrastructure indicators of compromise IOCs identified through FBI investigations as of August 2023. On August 25, F...

9.7AI score
SaveExploits0References62
CISA
CISA
added 2023/08/30 12:00 p.m.11 views

CISA and FBI Publish Joint Advisory on QakBot Infrastructure

Today, the Cybersecurity and Infrastructure Security Agency CISA and Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory CSA, Identification and Disruption of QakBot Infrastructure, to help organizations detect and protect against newly identified QakBot-related activity a...

7.1AI score
SaveExploits0References8
Circl
Circl
added 2023/08/29 8:17 p.m.13 views

CVE-2023-38283

creationtimestamp| type| source ---|---|--- 2023-08-29 20:17:34+00:00| seen| https://t.me/cibsecurity/69359...

5.3CVSS5.7AI score0.01359EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2023/08/29 2:38 p.m.72 views

DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

A new malspam campaign has been observed deploying an off-the-shelf malware called DarkGate. "The current spike in DarkGate malware activity is plausible given the fact that the developer of the malware has recently started to rent out the malware to a limited number of affiliates," Telekom...

7AI score
SaveExploits0
Circl
Circl
added 2023/08/29 2:20 a.m.11 views

CVE-2023-40857

creationtimestamp| type| source ---|---|--- 2023-08-29 02:20:12+00:00| seen| https://t.me/cibsecurity/69334...

8.8CVSS8.1AI score0.01062EPSS
SaveExploits1References1
Rows per page
Query Builder