Authentication Groups Malware Systems Review 
CIO
OCTOBER 16, 2023
Earlier this year, I wrote about the importance of organizations reviewing their password management strategies. According to reports, the hacker groups identified as BlackCat/ALPHV and Scattered Spider are behind these attacks. This vulnerability is not unique to MGM nor Okta; it’s a systemic problem with multi-factor authentication.
Tenable
DECEMBER 6, 2023
Tenable Research has published two blogs on CitrixBleed, our initial analysis of the vulnerability as well as a Frequently Asked Questions (FAQ) blog providing added context surrounding the in-the-wild exploitation by threat actors including multiple ransomware groups. ransomware group in their exploitation of CitrixBleed.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
MAY 14, 2024
A local attacker with a presence on a vulnerable system could exploit this vulnerability to gain SYSTEM privileges. Discovery of this flaw is credited to several researchers at Google Threat Analysis Group, Google Mandiant and Kaspersky. Once exploited, an attacker could execute code on the target system.
CircleCI
JANUARY 13, 2023
We encourage customers who have yet to take action to do so in order to prevent unauthorized access to third-party systems and stores. A note on employee responsibility vs. systems safeguards. This notification kicked off a deeper review by CircleCI’s security team with GitHub. Security best practices. Closing thoughts.
Tenable
JULY 11, 2023
According to researchers at Microsoft, exploitation of CVE-2023-36884 has been attributed to a threat actor known as Storm-0978, also known as DEV-0978 and RomCom, a reference to the backdoor used by the group as part of its attacks. Additionally, the group also conducts intelligence gathering operations that rely on credential theft.
Tenable
SEPTEMBER 7, 2021
Initial confusion surrounding authentication requirement. When the vulnerability was first disclosed on August 25, the advisory stated that an authenticated attacker or “in some instances” an unauthenticated attacker — depending on the configuration — could exploit the flaw. Identifying affected systems. Get more information.
Tenable
OCTOBER 29, 2021
According to a joint alert from the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Agency (CISA), the Environmental Protection Agency (EPA), and the National Security Agency (NSA), threat actors have been exploiting RDP to breach water and wastewater systems in the United States. Specialty candy: Active Directory.
Expert insights. Personalized for you.
336 
Let's personalize your content