CyberBattleSim

CyberBattleSim April 8th, 2021: See the announcement on the Microsoft Security Blog. CyberBattleSim is an experimentation research platform to investigate the interaction of automated agents operating in a simulated abstract enterprise network environment. The simulation provides a high-level...

Vulnerability-Risk-Assessment-TVRA-Enterprise-Network

This repository does not have a README...

Multi-VLAN-Enterprise-Network-Vulnerability-Assessment

This repository does not have a README...

Multi-VLAN-Enterprise-Network-Security-Infrastructure

This repository does not have a README...

Palo Alto Networks Prisma SD-WAN ION Trust Management Vulnerability

Palo Alto Networks Prisma SD-WAN ION is a series of next-generation software-defined enterprise branch devices from the American company Palo Alto Networks, capable of integrating 4G or 5G cellular network access. There is a vulnerability in Palo Alto Networks Prisma SD-WAN ION related to trust...

Can LLMs Hack Enterprise Networks? -- Replicated Computational Results (RCR) Report

This is the Replicated Computational Results RCR Report for the paper "Can LLMs Hack Enterprise Networks?" The paper empirically investigates the efficacy and effectiveness of different LLMs for penetration-testing enterprise networks, i.e., Microsoft Active Directory Assumed-Breach Simulations...

Availability Attacks without an Adversary: Evidence from Enterprise LANs

Denial-of-Service DoS conditions in enterprise networks are commonly attributed to malicious actors. However, availability can also be compromised by benign non-malicious insider behavior. This paper presents an empirical study of a production enterprise LAN that demonstrates how routine docking...

Exploit for Deserialization of Untrusted Data in Microsoft

Incident Investigation Report Case Title: WSUS Exploi...

EUVD-2020-29214

Malware in sbrugna...

EUVD-2020-29215

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-2163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are...

Ivanti Endpoint Manager security vulnerabilities

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. An encryption misuse vulnerability exists in Ivanti Endpoint Manager, which can be exploited by an attacker to decrypt other users' passwords...

Cisco IOS XE Operating System Command Injection Vulnerability

Cisco IOS XE is an operating system by Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from an operating system command injection vulnerability that stems...

Cisco IOS XE security vulnerabilities

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from improper memory...

PT-2024-34353

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...

PT-2024-34351

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...

PT-2024-34354

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...

Ivanti Endpoint Manager SQL Injection Vulnerability

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

Detecting and Visualizing Lateral Movement Attacks with Trellix XDR - Part 2

Detecting and Visualizing Lateral Movement Attacks with Trellix Helix Connect - Part 2 By Maulik Maheta · May 21, 2023 This blog was also written by Chintan Shah Executive summary In the part 1 of this series we discussed in depth about the known Lateral movement attacks like abusing weak service...

Security Bulletin: Vulnerability in Enterprise Network Operating System (ENOS) affects IBM BladeCenter Switch Products (CVE-2017-3765)

Summary IBM BladeCenter Switch Products have addressed the following vulnerability in Enterprise Network Operating System ENOS. Vulnerability Details Summary IBM BladeCenter Switch Products have addressed the following vulnerability in Enterprise Network Operating System ENOS. Vulnerability Detai...