Remove 2018 Remove Authentication Remove Blog Remove Systems Review
article thumbnail

CVE-2018-13379, CVE-2019-5591, CVE-2020-12812: Fortinet Vulnerabilities Targeted by APT Actors

Tenable

In March 2021, the FBI and CISA observed APT actors scanning and enumerating publicly accessible Fortinet systems over ports 4443, 8443 and 10443. The agencies believe these APT actors are gathering a list of vulnerable systems in both the public and private sectors in preparation for future attacks. CVE-2018-13379.

article thumbnail

A Brief History of the Internet’s Biggest BGP Incidents

Kentik

In this blog post, I will address selected specific incidents which have demonstrated the range and gravity of threats to the stability and security of the internet’s routing system. In that instance, the government of Pakistan ordered access to YouTube to be blocked in the country due to a video it deemed anti-Islamic.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

AA23-215A: 2022's Top Routinely Exploited Vulnerabilities

Tenable

The joint CSA recognizes this as well, adding that these malicious attackers have targeted “older software vulnerabilities rather than recently disclosed vulnerabilities,” while also highlighting the significance of vulnerabilities in internet-facing systems. This blog post was published on August 3 and reflects VPR at that time.

article thumbnail

Cybersecurity Snapshot: DHS Tracks New Ransomware Trends, as Attacks Drive Up Cyber Insurance Claims and Snatch Variant Triggers Alert

Tenable

Snatch, which appeared in 2018 and was originally known as Team Truniger, uses a ransomware-as-a-service (RaaS) model to operate, and employs a variety of frequently changing methods to breach systems and establish network persistence, the agencies said. “The For example, CISA may add a field for KEVs being used by ransomware actors.

article thumbnail

AA22-257A: Cybersecurity Agencies Issue Joint Advisory on Iranian Islamic Revolutionary Guard Corps-Affiliated Attacks

Tenable

CVE-2018-13379. Fortinet FortiOS Improper Authentication. This blog post was published on September 15 and reflects VPR at that time. Outside of Microsoft Exchange Server, the advisory also notes that organizations should review recent advisories from VMware regarding critical vulnerabilities. CVE-2019-5591.

article thumbnail

Microsoft’s November 2020 Patch Tuesday Addresses 112 CVEs including CVE-2020-17087

Tenable

CVE-2020-17087 was used to escape Google Chrome’s sandbox in order to elevate privileges on the exploited system. CVE-2020-17051 | Windows Network File System Remote Code Execution Vulnerability. CVE-2020-17051 is a critical remote code execution (RCE) vulnerability affecting the Windows Network File System (NFS).

Windows 105
article thumbnail

Dealing with the Attack Surface Beyond Vulnerabilities

Tenable

Standardized taxonomies have dominated the way cybersecurity professionals describe and talk about systems' security. Common Vulnerabilities and Exposures (CVE) severity scores have become the primary methods of measuring the security of a system and its attack surface. What is an Attack Surface?