CVE-2018-6629

CVE-2018-6629 affects Micropoint proactive defense software 2.0.20266.0146. The vulnerability resides in the mp110005.sys driver, where IOCTL 0x80000118 input values are not validated, enabling a local attacker to trigger a denial of service (BSOD) and potentially other impact. Connected sources ...

CVE-2018-6633

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000038...

CVE-2018-6631

The CVE-2018-6631 entry concerns Micropoint Proactive Defense Software 2.0.20266.0146. The vulnerable component is the mp110009.sys driver, where input values from IOCTL 0x80000170 are not validated, enabling a local user to cause a denial of service (BSOD) and potentially other impacts as descri...

CVE-2018-6631

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110009.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170...

CVE-2018-6632

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000110...

CVE-2018-6632

Summary: CVE-2018-6632 affects Micropoint proactive defense software (v2.0.20266.0146) via its mp110005.sys driver. The vulnerability arises from not validating input values provided to IOCTL 0x80000110, enabling a local attacker to cause a denial of service (BSOD) and potentially other unspecifi...

CVE-2018-6628

CVE-2018-6628 affects Micropoint proactive defense software 2.0.20266.0146, specifically the mp110005.sys driver. The issue is due to not validating input values from IOCTL 0x8000010c, allowing local users to cause a denial of service (BSOD) or potentially other impacts. Publicly available source...

CVE-2018-6628

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c...

CVE-2018-6629

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118...

Excerpts from Building a High Speed SOC: Introduction

Carbon Black recently published an in-depth guide on what it takes to develop a "high speed" security operations center, or SOC; this is an excerpt from that guide, which you can find here. For more information on building high speed SOCs, including how to eliminate the "response gap," check out...

Carbon Black’s Vision for the Predictive Security Cloud

Earlier today, during a keynote address at Cb Connect, I unveiled our vision for the Cb Predictive Security Cloud™️. The first of its kind, the Cb Predictive Security Cloud is an extensible, cloud-based cyber security platform that helps anticipate and prevent future and unknown cyberattacks. The...

5 Steps to a High-Speed SOC

Your endpoints don’t just live within the safety of your corporate network—they’re out in the wild exposed to millions of new threats every day. With non-malware attacks on the rise that are even harder to detect than traditional malware, security professionals are realizing it is no longer a...

Extending the Microsoft Edge Bounty Program

Over the past ten months we have paid out over $200,000 USD in bounties. This collaboration with the research community has resulted in significant improvements in Edge security and has allowed us to offer more proactive security for our customers. Keeping in line with our philosophy of protectin...

Get a Single View of WAF Events with the Imperva AppSecurity View App for Splunk Enterprise

Enterprises are adopting a hybrid infrastructure model to take advantage of rapid deployment of cloud-based services and higher computing power. A compilation of analyst predictions by SecureWorks, shows that the cloud continues to gain momentum as organizations embrace and benefit from new ways ...

HTTP/2 Server Push: The What, How and Why

What is HTTP/2 Server Push? How does it work? Why is it valuable? If you are looking for the answers to these questions, you've come to the right place. What it is HTTP/2 h2 Server Push is one of the performance features included in version 2 of the HTTP protocol. It allows the Web server to "pus...

F5 BIG-IP - BIG-IP ASM Proactive Bot Defense vulnerability CVE-2016-7472

When Proactive Bot Defense is configured, BIG-IP ASM 12.1.0 and 12.1.1 systems may allow remote attackers to cause a denial of service DoS via a crafted HTTP header. CVE-2016-7472 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

How Do I Perform Complete SSL Certificate Monitoring and Management Using NetScaler MAS

NetScaler Management and Analytics System allows you to perform complete SSL Certificate monitoring and management operations from one single console. When a NetScaler appliance is discovered in MAS, all the certificates that reside on the NetScaler appliance also get copied to MAS. This gives MA...

Threat Outbreak Alert RuleID23502: Email Messages Distributing Malicious Software on June 17, 2016

Medium Alert ID: 46730 First Published: 2016 June 17 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23502 may contain the following files: Name | Siz...

Holiday Season 2015 Email Campaign

The holiday season is a time when many people go on vacation or at least get much-needed downtime from work, but that is not always the case with attackers. To better understand the threats we face during “the most wonderful time of the year,” FireEye Labs has been collecting data on the most...

What is Threat Intelligence and How It Helps to Identify Security Threats

Simply put, threat intelligence is knowledge that helps you identify security threats and make informed decisions. Threat intelligence can help you solve the following problems: How do I keep up to date on the overwhelming amount of information on security threats…including bad actors, methods,...