Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOW

Multiple botnets are targeting thousands of publicly exposed and still unpatched Oracle WebLogic servers to deploy crypto miners and steal sensitive information from infected systems. The attacks are taking aim at a recently patched WebLogic Server vulnerability, which was released by Oracle as...

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that operations are performed outside the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

CVE-2020-12593

Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

OpenEDR - Open EDR Public Repository

We at OpenEDR believe in creating a cybersecurity platform with its source code openly available to public, where products and services can be provisioned and managed together. EDR is our starting point. OpenEDR is a full blown EDR capability. It is one of the most sophisticated, effective EDR co...

EDR Solutions Require Comprehensive Telemetry to Fend Off Multi-Vector Attacks

Endpoint devices are under increasingly aggressive and sophisticated attacks, so protecting them effectively from cyber criminals has become a thorny and vexing challenge as the threat landscape expands. It doesn’t help that endpoint protection today fluctuates between two strategies that are...

PT-2020-5381

Name of the Vulnerable Software and Affected Versions Moxa Inc EDR-G903 Series versions 5.5 or lower Moxa Inc EDR-G902 Series versions 5.5 or lower Moxa Inc EDR-810 Series versions 5.6 or lower Description The issue is related to an improper restriction of operations, which may allow remote...

The vulnerability of the var_interfacestatus function in the microprogramming software for Moxa EDR-810 allows a intruder to trigger an emergency shutdown of the device.

The vulnerability of the varinterfacestatus function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

The vulnerability of the MxConfig component of the MOXA EDR-810 industrial router allows a hacker to trigger a service failure.

The vulnerability of the MxConfig component of the MOXA EDR-810 industrial router lies in the reading of an uninitialized buffer within the stack. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by using the Scmdmoxatcpstatus service...

The vulnerability of the `var_NetworkSettingDhcpSvrRoute` function in the Moxa EDR-810 industrial router’s software allows a attacker to trigger an emergency shutdown of the device.

The vulnerability of the varNetworkSettingDhcpSvrRoute function in the Moxa EDR-810 industrial router’s microprogramming system is related to the lack of input data verification when accessing by using the OID identifier index. Exploiting this vulnerability can allow a malicious actor to trigger ...

The vulnerability of the var_lldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 allows a hacker to trigger an emergency shutdown of the device.

The vulnerability of the varlldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

PT-2020-4731

Name of the Vulnerable Software and Affected Versions: Moxa EDR-G902 affected versions not specified Moxa EDR-G903 affected versions not specified Moxa EDR-810 affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote...

[Webinar and eBook]: Are You're Getting The Best Value From Your EDR Solution?

Many companies rely on Endpoint Detection and Response EDR solutions as their primary security tool to protect their organizations against cyber threats. EDR was introduced around eight years ago, and analysts now peg the EDR market size as $1.5 to $2.0 billion in annual revenue globally, expecti...

Introducing VMware Carbon Black Cloud Workload™

If you know Carbon Black, you know that we helped invent Endpoint Detection and Response EDR and pioneered the field of next-generation anti-virus NGAV and malware protection. If you know VMware, you know we helped invent virtualization and have championed moving core business servers and service...

PT-2020-4296

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 affected versions not specified Description: The issue is related to a lack of protection for service data in the Moxa EDR-810 switch firmware. Exploitation of this issue could allow a remote attacker to disclose protected...

Vectra and Microsoft join forces to step up detection and response

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Click here to learn more about MISA. Traditional security operations center SOC processes typically involve a wide variety of disparate event notification tools that force overworked analysts to battl...

New Unpatched Bluetooth Flaw Lets Hackers Easily Target Nearby Devices

Bluetooth SIG—an organization that oversees the development of Bluetooth standards—today issued a statement informing users and vendors of a newly reported unpatched vulnerability that potentially affects hundreds of millions of devices worldwide. Discovered independently by two separate teams of...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

PT-2020-13959

Name of the Vulnerable Software and Affected Versions COVIDSafe application through 1.0.21 for Android Description The issue allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, revealing the public Bluetooth address of the victim's phone witho...

CVE-2020-14292: Undefined Security Weakness

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...