445 matches found
Vulnerability hunting with Semmle QL, part 1
Previously on this blog, we’ve talked about how MSRC automates the root cause analysis of vulnerabilities reported and found. After doing this, our next step is variant analysis: finding and investigating any variants of the vulnerability. It’s important that we find all such variants and patch...
Black Hat 2018: Google’s Tabriz Talks Complex Security Landscapes
LAS VEGAS – The complexity of the cybersecurity landscape is at an all-time high, with security researchers, vendors, third-party ecosystems and even governments all trying to come to a consensus for making the cyber-world a safer place. For security experts, navigating these choppy and crowded...
Partner Perspectives: Security Orchestration as a Catalyst for Proactive Incident Response
Meny Har is the VP of Product for Siemplify. Benjamin Franklin famously advised the fire-threatened residents of Philadelphia, “An ounce of prevention is worth a pound of cure.” And while being proactive may have been effective for fire prevention, the approach does not translate into the impendi...
10 Endpoint Security Problems Solved by the Cloud – Managing Multiple Agents
So far in this blog series, we’ve discussed the state of endpoint security, and the challenges of keeping systems up to date and integrating multiple products. This installment will take a look at how the cloud solves our third challenge: managing multiple agents. Too Much To Keep Track Of A good...
QSC18 Virtual Edition: Vulnerability Risk Management
When vulnerability risk management is proactive, organizations don’t have to hurriedly react to attacks that exploit bugs for which patches are available, as happened with WannaCry. “The vast majority of WannaCry remediation took place as an emergency type process,” Jimmy Graham, a Qualys Directo...
A New Paradigm For Cyber Threat Hunting
It's no secret that expecting security controls to block every infection vector is unrealistic. For most organizations, the chances are very high that threats have already penetrated their defenses and are lurking in their network. Pinpointing such threats quickly is essential, but traditional...
Network Security Monitoring: Security Onion
Network Security Monitoring NSM is, put simply, monitoring your network for security related events. It might be proactive, when used to identify vulnerabilities or expiring SSL certificates, or it might be reactive, such as in incident response and network forensics. Whether you’re tracking an...
2018 Cyberthreat Defense Report: Where IT Security Is Going
What keeps you awake at night? We asked IT security professionals the same question and found that these issues are top of mind: malware and spear phishing, securing mobile devices, employee security awareness and new technologies that detect threats capable of bypassing traditional signature-bas...
Micropoint Proactive Defense Software Denial of Service Vulnerability
Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A security vulnerability exists in the...
Micropoint Proactive Defense Software Denial of Service Vulnerability (CNVD-2018-02956)
Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A security vulnerability exists in the...
Micropoint Proactive Defense Software Denial of Service Vulnerability (CNVD-2018-02978)
Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A vulnerability exists in the...
Input validation
In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000035...
Input validation
In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118...
Input validation
In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000014c...
Input validation
In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110009.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170...
CVE-2018-6628
In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c...
Input validation
In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038...
CVE-2018-6626
CVE-2018-6626 affects Micropoint Proactive Defense Software 2.0.20266.0146 via the mp110005.sys driver. The issue stems from a lack of input validation for IOCTL 0x80000035, allowing a local attacker to trigger a denial-of-service (BSOD) and potentially other impacts. The vulnerability is documen...
CVE-2018-6628
CVE-2018-6628 affects Micropoint proactive defense software 2.0.20266.0146, specifically the mp110005.sys driver. The issue is due to not validating input values from IOCTL 0x8000010c, allowing local users to cause a denial of service (BSOD) or potentially other impacts. Publicly available source...
CVE-2018-6629
CVE-2018-6629 affects Micropoint proactive defense software 2.0.20266.0146. The vulnerability resides in the mp110005.sys driver, where IOCTL 0x80000118 input values are not validated, enabling a local attacker to trigger a denial of service (BSOD) and potentially other impact. Connected sources ...