Lacework

DECEMBER 12, 2021

Key Takeaways CVE-2021-22448 is being adopted by opportunistic attackers. Mirai and Kinsing are being distributed via this attack vector. Overview Lacework Labs is constantly monitoring for attackers adopting new vulnerabilities into their toolkits through their honeypots.

136

136

Lacework

FEBRUARY 7, 2024

We know that understanding and effectively prioritizing threats starts with identifying the enemy. In this blog, we’ll explore the motivations of bad actors, the top threats the Lacework Labs team is seeing, and practical ways to lock down your cloud and protect your data. Who’s behind the threats?

Weak Development Team 109

Weak Development Team Malware Cloud Internet 109

Lacework

APRIL 5, 2022

Attackers use tools to scan networks for vulnerabilities and sometimes these tools can be used to our advantage. Project Discovery currently accounts for roughly half of all Log4j (CVE-2021-44228) attacks and a quarter of total attacks observed by Lacework Labs. domain for Log4j exploitation.

Analysis 98

Analysis Testing Tools Examples 98

Lacework

FEBRUARY 24, 2022

On December 10th, 2021, CVE-2021-44228 took the security industry by storm when a remote code execution vulnerability was discovered in the popular logging library “ Log4j ”. Which is why Lacework is releasing our latest research on how to respond to Log4j vulnerabilities in your environment.

Google Cloud 52

Google Cloud Malware Azure Research 52

Lacework

MAY 12, 2022

Since the announcement of this vulnerability numerous Github repositories have been created showing proof-of-concept attacks which require nothing more than a POST request with an HTTP body of commands to execute on a victim host. Lacework Labs is also beginning to see payloads associated with this vulnerability within their honeypots.

Malware 96

Malware Technical Support Open Source Research 96

Lacework

FEBRUARY 10, 2022

The change stems from recent attacks that allow adversaries to pivot and target the Public sector through the use of activities like phishing or installing malware as a trusted partner. Log4j ( CVE-2021-44228 ). The most memorable (and recent) security concern is related to Log4j. Microsoft Exchange Server.

Software Review 52

Software Review Malware Systems Review Government 52