2020, Authentication, Network and Systems Review

CVE-2020-2021: Palo Alto Networks PAN-OS Vulnerable to Critical Authentication Bypass Vulnerability

Tenable

JUNE 29, 2020

Critical authentication bypass vulnerability in PAN-OS devices could be exploited in certain configurations, which are commonly recommended by identity providers. On June 29, Palo Alto Networks published an advisory for a critical vulnerability in PAN-OS. by Palo Alto Networks. Kevin Beaumont (@GossiTheDog) June 29, 2020.

Authentication

Authentication Network Firewall Azure

CVE-2024-3400: Zero-Day Vulnerability in Palo Alto Networks PAN-OS GlobalProtect Gateway Exploited in the Wild

Tenable

APRIL 12, 2024

A critical severity command injection vulnerability in Palo Alto Networks PAN-OS has been exploited in limited targeted attacks. Palo Alto Networks reports limited exploitation in the wild According to the advisory, Palo Alto Networks confirmed that this vulnerability has been exploited in-the-wild in a “limited number of attacks.”

Network

Network Firewall Software Review Systems Review

Top 5 Network Security Challenges in 2020 and Beyond

Firemon

MAY 30, 2020

There are a lot of theories about which network security challenge is the most important at any given time. But in the end, what matters is that organizations properly align and continuously adjust their activities so they can mitigate or even prevent the most prevalent threats to network security. 5 Key Challenges in Network Security.

Network

Network Firewall Systems Review Software Review

Webinars

Generative AI Deep Dive: Advancing from Proof of Concept to Production

MORE WEBINARS

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Tenable

JUNE 9, 2020

For the fourth month in a row, Microsoft has patched over 100 CVEs, addressing 129 in the June 2020 Patch Tuesday release. CVE-2020-1226 and CVE-2020-1225 | Microsoft Excel Remote Code Execution Vulnerability. CVE-2020-1226 and CVE-2020-1225 | Microsoft Excel Remote Code Execution Vulnerability.

SMB

SMB Software Review Systems Review Windows

Microsoft’s April 2020 Patch Tuesday Addresses 113 CVEs Including Adobe Type Manager Library Zero-Day Flaws (CVE-2020-0938, CVE-2020-1020)

Tenable

APRIL 14, 2020

Microsoft's April 2020 Patch Tuesday includes 113 CVEs, including a patch for two zero-day flaws (CVE-2020-0938 and CVE-2020-1020) in Adobe Type Manager Library disclosed on March 23. CVE-2020-1020 and CVE-2020-0938 | Adobe Type Manager Library Remote Code Execution Vulnerabilities.

Software Review

Software Review Systems Review Windows Operating System

Top 10 Cybersecurity Threats in 2020

Kaseya

APRIL 15, 2020

Just like the coronavirus spreads from person to person, cybersecurity malware too can spread rapidly from computer to computer and network to network. Here are the top 10 cybersecurity threats businesses face in 2020: Phishing Attacks. Remote Worker Endpoint Security. Cloud Jacking. IoT Devices. trillion by 2026.

Malware

Malware Artificial Inteligence Software Review Systems Review

CVE-2022-1388: Authentication Bypass in F5 BIG-IP

Tenable

MAY 5, 2022

CVE-2022-1388: Authentication Bypass in F5 BIG-IP. F5 patched an authentication bypass in its BIG-IP product family that could lead to arbitrary command execution. The Security Response Team included CVE-2020-5902 among its top 5 vulnerabilities in the 2020 Threat Landscape Retrospective due to the scope of exploitation.

Authentication

Authentication Software Review Systems Review Hardware

CVE-2020-11651, CVE-2020-11652: Critical Salt Framework Vulnerabilities Exploited in the Wild

Tenable

MAY 3, 2020

Salt utilizes a “master” server that controls agents known as “minions" that collect data for the system and carries out tasks. CVE-2020-11651 is an authentication bypass in two methods of the ClearFuncs class. CVE-2020-11652 is a directory traversal security flaw in the “wheel” module that is used to read and write files.

Technical Advisors

Technical Advisors Open Source Software Review Systems Review

Microsoft’s December 2020 Patch Tuesday Addresses 58 CVEs including CVE-2020-25705 (SAD DNS)

Tenable

DECEMBER 8, 2020

The final Patch Tuesday of 2020 includes fixes for 58 CVEs, including workaround details for a severe vulnerability in Windows DNS Resolver called SAD DNS. Microsoft patched 58 CVEs in the December 2020 Patch Tuesday release, including 9 CVEs rated as critical. CVE-2020-25705 | Windows DNS Resolver Spoofing Vulnerability.

Software Review

Software Review Windows Systems Review Azure

CVE-2018-13379, CVE-2019-5591, CVE-2020-12812: Fortinet Vulnerabilities Targeted by APT Actors

Tenable

APRIL 8, 2021

In March 2021, the FBI and CISA observed APT actors scanning and enumerating publicly accessible Fortinet systems over ports 4443, 8443 and 10443. The agencies believe these APT actors are gathering a list of vulnerable systems in both the public and private sectors in preparation for future attacks. CVE-2020-12812.

Authentication

Authentication Systems Review Research Groups

CVE-2020-2040: Critical Buffer Overflow Vulnerability in PAN-OS Devices Disclosed

Tenable

SEPTEMBER 10, 2020

PAN-OS devices that have enabled the captive portal or multi-factor authentication features are vulnerable to a critical buffer overflow flaw. On September 9, Palo Alto Networks (PAN) published nine security advisories for a series of vulnerabilities affecting PAN-OS , a custom operating system (OS) found in PAN’s next-generation firewalls.

Software Review

Software Review Systems Review Authentication Firewall

Microsoft’s November 2020 Patch Tuesday Addresses 112 CVEs including CVE-2020-17087

Tenable

NOVEMBER 10, 2020

Microsoft patched 112 CVEs in the November 2020 Patch Tuesday release, including 17 CVEs rated as critical. CVE-2020-17087 | Windows Kernel Local Elevation of Privilege Vulnerability. CVE-2020-17087 was used to escape Google Chrome’s sandbox in order to elevate privileges on the exploited system.

Windows

Windows Software Review Azure Systems Review

CVE-2020-1472: 'Zerologon' Vulnerability in Netlogon Could Allow Attackers to Hijack Windows Domain Controller

Tenable

SEPTEMBER 14, 2020

Security researchers reveal how the cryptographic authentication scheme in Netlogon can be exploited to take control of a Windows domain controller (DC). The blog post contains a whitepaper explaining the full impact and execution of the vulnerability, identified as CVE-2020-1472 , which received a CVSSv3 score of 10.0, Background.

Windows

Windows LAN Backup Authentication

CVE-2020-8597: Buffer Overflow Vulnerability in Point-to-Point Protocol Daemon (pppd)

Tenable

MARCH 6, 2020

The Point-to-Point Protocol (PPP) is a full-duplex protocol that enables the encapsulation and transmission of basic data across Layer 2 or data-link services ranging from dial-up connections to DSL broadband to virtual private networks (VPNs) implementing SSL encryption. RHSA-2020:0631. RHSA-2020:0630. RHSA-2020:0634.

Software Review

Software Review Systems Review Linux Authentication

10 Azure Best Practices for 2020

ParkMyCloud

MAY 22, 2020

Based on recent recommendations given by experts in the field, we’ve put together this list of 10 of the best practices for 2020 to help you fully utilize and optimize your Azure environment. Vitor Montalvao, Azure Cost Optimization Best Practices , March 6, 2020. Robert Lyon, Best practices for Azure RBAC , April 17, 2020.

Azure

Azure Serverless Authentication Cloud

BluePallet raises $5M to take its chemical industry marketplace global

TechCrunch

OCTOBER 19, 2021

This means that BluePallet’s network of chemical manufacturers and distributors will be exposed to millions of business buyers from around the world who source supply on the e-commerce site. BluePallet was founded in 2020 through the merger of then three-year-old chemical marketplace EchoSystem and Velloci, a fintech company.

Chemicals

Chemicals Industry Technical Review Fintech

Oracle Critical Patch Update for October 2020 Addresses 402 Security Updates

Tenable

OCTOBER 21, 2020

On October 20, Oracle released the Critical Patch Update (CPU) Advisory for October 2020 , its final quarterly release of security patches for the year. This quarter’s update marks the second-highest count in Oracle CPUs, surpassed only by the July 2020 update which holds the record with over 440 patches. Notable Vulnerabilities.

Systems Review

Systems Review Applications Construction Insurance

Microsoft’s February 2020 Patch Tuesday Addresses 99 CVEs Including Internet Explorer Zero-Day (CVE-2020-0674)

Tenable

FEBRUARY 11, 2020

Microsoft addresses a staggering 99 CVEs in the February 2020 Patch Tuesday release. CVE-2020-0673 and CVE-2020-0674 | Scripting Engine Memory Corruption Vulnerability. CVE-2020-0674 was first noted as being exploited in the wild in January , where Microsoft released an out-of-band advisory ( ADV200001 ).

Internet

Internet Software Review Windows Systems Review

Address COVID-19 Blended Learning Challenges in 2020-21 with a Flexible Student Information System

PowerSchool

AUGUST 11, 2020

School closures due to COVID-19 have exposed issues like fragmented systems that don’t share data, hybrid schedule and attendance obstacles when juggling both in-class and online learning, adjustments to grading configurations mid-term, and more. What is a student information system and why is it important?

Systems Review

Systems Review System Disaster Recovery Backup

Vyne raises $15.5M seed round to grow its merchant-focused open banking solutions

TechCrunch

SEPTEMBER 23, 2021

The sizable seed round from strong investors is due to a few factors. TrueLayer nabs $130M at a $1B+ valuation as open banking rises as a viable option to card networks. Firstly, because of its early traction — the company says that it’s already processing millions of pounds in transactions in the U.K.

Banking

Banking Authentication Fintech Systems Review

Modernize Your EDI System for Faster, Flexible Integration and Scale

Trigent

NOVEMBER 24, 2021

To deal with the disruptions caused due to the pandemic, organizations are now dependent on a highly available and scalable Electronic Data Interchange (EDI) more than ever before. during the forecast period 2020-2027. Why modernize your EDI system? Incorporate flexibility to scale with Modern EDI system architecture.

Systems Review

Systems Review System B2B Technical Review

Biometric Data and Its Use for Person Authentication and Identification

Altexsoft

MAY 19, 2021

Consider this: as of 2020, “123456” remains the most common password according to Nordpass. A password is only one of the standard security methods, a unique combination of characters you create and use as a key to authenticate yourself with. Biometric system operations. Authentication. What are biometrics?

Authentication

Authentication Data Technical Review Systems Review

CVE-2020-5902: Critical Vulnerability in F5 BIG-IP Traffic Management User Interface (TMUI) Actively Exploited

Tenable

JULY 6, 2020

On June 30, F5 Networks published support articles identified as K52145254 and K43638305 to address two vulnerabilities in BIG-IP, its family of products which includes software and hardware solutions that provide access control, application availability and security solutions. Domain Name System (DNS). Background. Link Controller.

Software Review

Software Review Technical Review Systems Review Research

CVE-2021-22937: Remote Code Execution Patch Bypass in Pulse Connect Secure

Tenable

AUGUST 5, 2021

Pulse Secure has patched CVE-2021-22937, a patch bypass for CVE-2020-8260, in its Connect Secure products. Richard Warren with NCC Group has published a technical advisory for this flaw, explaining it is a patch bypass for CVE-2020-8260 which he disclosed in October 2020. Identifying affected systems. Background.

Software Review

Software Review Technical Review Authentication Systems Review

CVE-2020-14871: Critical Buffer Overflow in Oracle Solaris Exploited in the Wild as Zero-Day

Tenable

NOVEMBER 5, 2020

CVE-2020-14871 is a critical pre-authentication stack-based buffer overflow vulnerability in the Pluggable Authentication Module (PAM) in Oracle Solaris. PAM is a dynamic authentication component that was integrated into Solaris back in 1997 as part of Solaris 2.6. Hacker Fantastic (@hackerfantastic) November 3, 2020.

Authentication

Authentication Research Software Review Systems Review

CVE-2020-4006: VMware Command Injection Flaw Exploited by Russian State-Sponsored Threat Actors

Tenable

DECEMBER 8, 2020

The vulnerability was disclosed by the NSA to VMware, which published details in a security advisory, VMSA-2020-0027.2 , on November 23. CVE-2020-4066 is a command injection vulnerability in the administrative configurator component in certain versions of VMware products. Exploiting CVE-2020-4006 to access protected data.

Linux

Linux Software Review Systems Review Windows

Top 4 K-12 Cybersecurity Threats to Watch in 2020

PowerSchool

MARCH 3, 2020

How to prepare your edtech systems and prevent security breaches. The threat of a hack into your school or district’s edtech systems is any K-12 tech director’s constant worry. Other threats include system breaches when financial records are accessed, students trying to change grades, online harassment, and more.

Security

Security IoT Education Backup

Hold the Door: Why Organizations Need to Prioritize Patching SSL VPNs

Tenable

AUGUST 25, 2021

Vulnerabilities in SSL VPN products are some of the most exploited by attackers for initial access to target networks, acting as a doorway for exploitation. To defend distributed enterprise networks, teams must ensure their SSL VPN products are fully updated and properly configured to keep attackers out. Pulse Connect Secure SSL VPN.

Organization

Organization WAN Authentication Groups

Oracle Critical Patch Update for July 2020 Tops Previous Record with 443 Security Updates

Tenable

JULY 15, 2020

Oracle’s third Critical Patch Update of 2020 contains a record-breaking 443 security patches addressing 284 CVEs, including critical vulnerabilities in Oracle Communications Applications and Oracle Fusion Middleware products. Oracle Systems. Background. Oracle Product Family. Number of Patches. Remote Exploit without Auth.

WAN

WAN Systems Review Applications Construction

Tenable Research Discloses Multiple Vulnerabilities in Plex Media Server

Tenable

JUNE 16, 2020

Tenable Research discovered multiple vulnerabilities in Plex Media Server, a popular media streaming and sharing service, that could allow attackers to gain full system privileges and access to personal files. This type of service is very popular as people are homebound due to public health orders. CVE-2020-5742. CVE-2020-5741.

Media

Media Research Systems Review Software Review

Container Security – What Are Containers? – Part 1

Xebia

APRIL 27, 2023

A VM is the virtualization/emulation of a physical computer with its operating system, CPU, memory, storage and network interface, which are provisioned virtually. They also require more resources because they need a full guest operating system. It can be installed on a large variety of operating systems.

Linux

Linux Software Review Technical Review Virtualization

The need for DevSecOps in the embedded world

Xebia

DECEMBER 16, 2022

There were some common classes of vulnerabilities in the automotive, home connectivity and industrial control system devices. For example, look at how the OWASP Top 10 has changed from 2013 to 2020. Using the vulnerabilities found, an attacker could get root access to the BMC without any authentication.

Systems Review

Systems Review Software Review Automotive Education

IoT Device Security: How to protect your IoT devices from attack?

Trigent

FEBRUARY 7, 2023

749 billion USD was expected to be spent on IoT worldwide as per 2020 statistics, and global spending on IoT was predicted to touch 1.1 Ransomware and IoT attacks are converging, doubling the ransomware attacks in 2020 and 2021, as confirmed by the Identity Theft Resource Center. .” trillion USD by 2023.

IoT

IoT Technical Review Systems Review Software Review

CPOE Systems: Benefits and Risks of e-Prescribing and Test Ordering

Altexsoft

JUNE 26, 2020

The first CPOE system was built in 1971 by NASA Space Center and Lockheed Corporation for a hospital in California. It was not until the late 1990s that CPOE started to bring real value to hospitals due to technological advances, decreased cost of development, and enhanced computer literacy of medical professionals. a hard token.

Systems Review

Systems Review System Testing Technical Review

Securing IoMT Devices: Best Practices for Hospitals to Prevent Cyberattacks

Ivanti

SEPTEMBER 21, 2023

Additionally, advanced automation solutions can automate processes like patching (with the assistance of the healthcare device manufacturer) and updating software operating systems, ensuring all systems are up-to-date with the latest defense measures against cyberattacks.

Healthcare

Healthcare Systems Review Analytics Software Review

Cybersecurity Is a Top Priority – What to Do About It?

Kaseya

NOVEMBER 9, 2020

Cybersecurity affects the everyday lives of most IT practitioners and IT leaders worldwide, with more than 50 percent of them citing “Improving IT Security” as a top priority in 2021 as per our 2020 IT Operations Survey Results Report. Two-Factor Authentication (2FA). Moreover, only about 45 percent have automated patch management.

Disaster Recovery

Disaster Recovery Artificial Inteligence Backup Technical Review

It’s No Secret: Enterprises Reveal Customers’ Choice in the 2024 Gartner® Peer Insights™ Voice of the Customer for Primary Storage

Infinidat

MARCH 28, 2024

You can find out right now why a slew of Global Fortune 500 enterprises deploy Infinidat enterprise storage solutions, including our award-winning InfiniBox™ SSA II all-flash system, InfiniBox® hybrid, and InfiniGuard®, supported by our unparalleled white glove service. You don’t only have to take our word for it.

Storage

Storage Biotech Enterprise Part-Time VPE

Cybersecurity Snapshot: Latest MITRE ATT&CK Update Offers Security Insights on GenAI, Identity, Cloud and CI/CD

Tenable

APRIL 26, 2024

Given the ongoing nature and complexity of the data review, it is likely to take several months of continued analysis before enough information will be available to identify and notify impacted customers and individuals,” the statement reads. Protect email and other digital accounts with multi-factor authentication.

Security

Security Cloud Artificial Inteligence Generative AI

Top 5 Terrifying Cybersecurity Trends to Watch Out for Going Into 2020

Kaseya

OCTOBER 10, 2019

Here are five of the most alarming cybersecurity trends you need to look out for going into 2020. Another reason is the general lack of skills due to the traditional approach of education in colleges and universities. This trend is expected to continue in 2020 as well. Inadequate Cyber Hygiene.

Trends

Trends Software Review Malware Systems Review

Microsoft Windows Netlogon Vulnerability – Patch Before You Lose Control Over Your Domain

Kaseya

SEPTEMBER 24, 2020

In August 2020, Microsoft released security patches for a critical vulnerability CVE-2020-1472 , also dubbed “Zerologon,” to be deployed on Active Directory domain controllers. It is the result of a flaw in the cryptographic algorithm used in the Netlogon Remote Protocol authentication process.

Windows

Windows Authentication Systems Review Guidelines

Why Endpoint Security is Important for Remote Workforces

Kaseya

JUNE 4, 2020

According to a recent study by the Information Systems Audit and Control Association (ISACA) , “nearly 60 percent of enterprises are aware that cybercriminals are exploiting the COVID-19 crisis to target their IT systems and employees.” The May 2020 Patch Tuesday provided patches for 111 vulnerabilities across 12 products.

Backup

Backup Systems Review Software Review Authentication

Cybersecurity Tips From Unit 42 for the 2021 Back to School Season

Palo Alto Networks

AUGUST 2, 2021

School districts tend to run older equipment and older software, which means that they’re more susceptible to cyberattacks since legacy systems are more difficult to update. From there, use a strong username and password for the password manager itself and make sure to enable two-factor authentication (2FA) as well.

Technical Review

Technical Review Authentication Education Software Review

Nightmare Email Attacks (and Tips for Blocking Them)

Palo Alto Networks

OCTOBER 21, 2021

financial services firm that relies on a widely used multi-factor authentication (MFA) mobile app to protect access to email, customer files and other sensitive data. He was annoyed by the intrusion, figuring it was some kind of system error, and rejected each request so he could focus on work. The FBI reports that BECs caused $1.87

Software Review

Software Review Authentication Systems Review Education

Top 5 Terrifying Cybersecurity Trends to Watch Out for Going Into 2020

Kaseya

OCTOBER 9, 2019

Here are five of the most alarming cybersecurity trends you need to look out for going into 2020. Another reason is the general lack of skills due to the traditional approach of education in colleges and universities. This trend is expected to continue in 2020 as well. Inadequate Cyber Hygiene.

Trends

Trends Software Review Malware Systems Review

CVE-2020-2021: Palo Alto Networks PAN-OS Vulnerable to Critical Authentication Bypass Vulnerability

CVE-2024-3400: Zero-Day Vulnerability in Palo Alto Networks PAN-OS GlobalProtect Gateway Exploited in the Wild

Webinars

Trending Sources

Top 5 Network Security Challenges in 2020 and Beyond

Webinars

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Microsoft’s April 2020 Patch Tuesday Addresses 113 CVEs Including Adobe Type Manager Library Zero-Day Flaws (CVE-2020-0938, CVE-2020-1020)

Top 10 Cybersecurity Threats in 2020

CVE-2022-1388: Authentication Bypass in F5 BIG-IP

CVE-2020-11651, CVE-2020-11652: Critical Salt Framework Vulnerabilities Exploited in the Wild

Microsoft’s December 2020 Patch Tuesday Addresses 58 CVEs including CVE-2020-25705 (SAD DNS)

CVE-2018-13379, CVE-2019-5591, CVE-2020-12812: Fortinet Vulnerabilities Targeted by APT Actors

CVE-2020-2040: Critical Buffer Overflow Vulnerability in PAN-OS Devices Disclosed

Microsoft’s November 2020 Patch Tuesday Addresses 112 CVEs including CVE-2020-17087

CVE-2020-1472: 'Zerologon' Vulnerability in Netlogon Could Allow Attackers to Hijack Windows Domain Controller

CVE-2020-8597: Buffer Overflow Vulnerability in Point-to-Point Protocol Daemon (pppd)

10 Azure Best Practices for 2020

BluePallet raises $5M to take its chemical industry marketplace global

Oracle Critical Patch Update for October 2020 Addresses 402 Security Updates

Microsoft’s February 2020 Patch Tuesday Addresses 99 CVEs Including Internet Explorer Zero-Day (CVE-2020-0674)

Address COVID-19 Blended Learning Challenges in 2020-21 with a Flexible Student Information System

Vyne raises $15.5M seed round to grow its merchant-focused open banking solutions

Modernize Your EDI System for Faster, Flexible Integration and Scale

Biometric Data and Its Use for Person Authentication and Identification

CVE-2020-5902: Critical Vulnerability in F5 BIG-IP Traffic Management User Interface (TMUI) Actively Exploited

CVE-2021-22937: Remote Code Execution Patch Bypass in Pulse Connect Secure

CVE-2020-14871: Critical Buffer Overflow in Oracle Solaris Exploited in the Wild as Zero-Day

CVE-2020-4006: VMware Command Injection Flaw Exploited by Russian State-Sponsored Threat Actors

Top 4 K-12 Cybersecurity Threats to Watch in 2020

Hold the Door: Why Organizations Need to Prioritize Patching SSL VPNs

Oracle Critical Patch Update for July 2020 Tops Previous Record with 443 Security Updates

Tenable Research Discloses Multiple Vulnerabilities in Plex Media Server

Container Security – What Are Containers? – Part 1

The need for DevSecOps in the embedded world

IoT Device Security: How to protect your IoT devices from attack?

CPOE Systems: Benefits and Risks of e-Prescribing and Test Ordering

Securing IoMT Devices: Best Practices for Hospitals to Prevent Cyberattacks

Cybersecurity Is a Top Priority – What to Do About It?

It’s No Secret: Enterprises Reveal Customers’ Choice in the 2024 Gartner® Peer Insights™ Voice of the Customer for Primary Storage

Cybersecurity Snapshot: Latest MITRE ATT&CK Update Offers Security Insights on GenAI, Identity, Cloud and CI/CD

Top 5 Terrifying Cybersecurity Trends to Watch Out for Going Into 2020

Microsoft Windows Netlogon Vulnerability – Patch Before You Lose Control Over Your Domain

Why Endpoint Security is Important for Remote Workforces

Cybersecurity Tips From Unit 42 for the 2021 Back to School Season

Nightmare Email Attacks (and Tips for Blocking Them)

Top 5 Terrifying Cybersecurity Trends to Watch Out for Going Into 2020

Stay Connected