Predicting the Future of the SOC Analyst

I’ve been a SOC Analyst for four years now and was a desktop support engineer before that. When I first started as a SOC Analyst it was an exciting change. I was going to help protect the company and resolve suspicious incidents before they turned into breaches. The reality of my day-to-day was n...

It’s Time for Your SOC to Level Up

Given an ever-increasing cyberattack surface, a global security workforce shortage, as well as an increased frequency and sophistication of attacks, security operations centers SOCs need to leverage better tools – namely artificial intelligence AI – in order to manage threats. An organization’s S...

D Shield suffers from a webshell bypass vulnerability ( CNVD-2020-04310).

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...

Threat Intelligence – What It Is and Why You Need It

Threat intelligence is a broad term. Some might think it refers to having information about what threats are out there. But in the evolved world of cybersecurity, threat intelligence is actually a verb. Cybersecurity threat intelligence is the ability to take closed-source or open-source data fro...

Using Threat Modeling in Cybersecurity to Hunt and Remediate

Modern-day cyberattacks keep growing in sophistication and sheer volume. This dynamic makes it virtually impossible to detect and block all attacks using the traditional methods of comparing incoming requests to known attack signatures. To effectively operate in this new aggressive cyberthreat...

Using Threat Modeling in Cybersecurity to Hunt and Remediate

Modern-day cyberattacks keep growing in sophistication and sheer volume. This dynamic makes it virtually impossible to detect and block all attacks using the traditional methods of comparing incoming requests to known attack signatures. To effectively operate in this new aggressive cyberthreat...

Partner Perspectives: Stay Proactive with Automated Threat Blocking from Carbon Black and IntSights

Alon Yotvat is a Senior Solutions Architect for IntSights. Carbon Black and IntSights have joined forces to combine next-gen endpoint security solutions with powerful external threat intelligence. This potent integration of cybersecurity technologies gives enterprises the protection they need to...

Micropoint Proactive Defense Software Denial of Service Vulnerability (CNVD-2018-02978)

Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A vulnerability exists in the...

Micropoint Proactive Defense Software Denial of Service Vulnerability

Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A security vulnerability exists in the...

Micropoint Proactive Defense Software Denial of Service Vulnerability (CNVD-2018-02956)

Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A security vulnerability exists in the...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000035...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000014c...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110009.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118...

CVE-2018-6628

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c...

CVE-2018-6626

CVE-2018-6626 affects Micropoint Proactive Defense Software 2.0.20266.0146 via the mp110005.sys driver. The issue stems from a lack of input validation for IOCTL 0x80000035, allowing a local attacker to trigger a denial-of-service (BSOD) and potentially other impacts. The vulnerability is documen...

CVE-2018-6628

CVE-2018-6628 affects Micropoint proactive defense software 2.0.20266.0146, specifically the mp110005.sys driver. The issue is due to not validating input values from IOCTL 0x8000010c, allowing local users to cause a denial of service (BSOD) or potentially other impacts. Publicly available source...

CVE-2018-6630

CVE-2018-6630 affects Micropoint Proactive Defense Software 2.0.20266.0146. The mp110005.sys driver does not validate input values in IOCTL 0x8000014c, enabling a local attacker to trigger a denial of service (BSOD) or potential other impact. Documents from NVD, Red Hat, CNVD, and CNVD-family sou...

CVE-2018-6632

Summary: CVE-2018-6632 affects Micropoint proactive defense software (v2.0.20266.0146) via its mp110005.sys driver. The vulnerability arises from not validating input values provided to IOCTL 0x80000110, enabling a local attacker to cause a denial of service (BSOD) and potentially other unspecifi...