ZeroDay - Consuleria

Attackers exploit crucial zero-day flaw in Palo Alto Networks firewalls

[ad_1] “This difficulty is relevant solely to PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 firewalls with the configurations for each GlobalProtect gateway and system telemetry enabled,” the corporate mentioned in its advisory. Prospects can verify if they’ve the GlobalProtect gateway configured below the Community > GlobalProtect > Gateways menu within the firewall’s internet interface. The… Continua a leggere Attackers exploit crucial zero-day flaw in Palo Alto Networks firewalls

Zero-day exploitation surged in 2023, Google finds

[ad_1] 2023 noticed attackers more and more specializing in the invention and exploitation of zero-day vulnerabilities in third-party libraries (libvpx, ImagelO) and drivers (Mali GPU, Qualcomm Adreno GPU), as they will have an effect on a number of merchandise and successfully provide extra potentialities for assault. One other attention-grabbing conclusion from Google’s current rundown of… Continua a leggere Zero-day exploitation surged in 2023, Google finds

Fight Zero-Day Vulnerabilities with ESOF VACA

[ad_1] Within the ever-evolving panorama of cybersecurity, the relentless march of technological development brings forth not solely improvements but additionally unprecedented threats. As organizations try to guard their digital property, the specter of Zero-Day Vulnerabilities looms massive – silent, stealthy, and probably catastrophic. Enter ESOF VACA, a cutting-edge resolution designed to fight Zero-Day Vulnerabilities with… Continua a leggere Fight Zero-Day Vulnerabilities with ESOF VACA

Week in evaluation: Home windows Occasion Log zero-day, exploited vital Jenkins RCE flaw

[ad_1] Right here’s an outline of a few of final week’s most attention-grabbing information, articles, interviews and movies: Prioritizing cybercrime intelligence for efficient decision-making in cybersecurityOn this Assist Web Safety interview, Alon Gal, CTO at Hudson Rock, discusses integrating cybercrime intelligence into current safety infrastructures. Proactive cybersecurity: A strategic method to price effectivity and disaster… Continua a leggere Week in evaluation: Home windows Occasion Log zero-day, exploited vital Jenkins RCE flaw

How I Discovered My First Ever ZeroDay (In RDP)

[ad_1] Up till just lately, I’d by no means tried the bug looking a part of vulnerability analysis. I’ve been reverse engineering Home windows malware for over a decade, and I’d carried out the occasional patch evaluation, however I by no means noticed a degree in bug looking on a serious OS. In spite of… Continua a leggere How I Discovered My First Ever ZeroDay (In RDP)

CISA Points Emergency Directive to Federal Businesses on Ivanti Zero-Day Exploits

[ad_1] Jan 20, 2024NewsroomCommunity Safety / Risk Intelligence The U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Friday issued an emergency directive urging Federal Civilian Govt Department (FCEB) businesses to implement mitigations towards two actively exploited zero-day flaws in Ivanti Join Safe (ICS) and Ivanti Coverage Safe (IPS) merchandise. The event got here after the… Continua a leggere CISA Points Emergency Directive to Federal Businesses on Ivanti Zero-Day Exploits

Chinese language Hackers Silently Weaponized VMware Zero-Day Flaw for two Years

[ad_1] Jan 20, 2024NewsroomZero Day / Cyber Espionage A complicated China-nexus cyber espionage group beforehand linked to the exploitation of safety flaws in VMware and Fortinet home equipment has been linked to the abuse of a important vulnerability in VMware vCenter Server as a zero-day since late 2021. “UNC3886 has a observe document of using… Continua a leggere Chinese language Hackers Silently Weaponized VMware Zero-Day Flaw for two Years

Ivanti VPN Zero-Day Combo Chained ‘by China’

[ad_1] Beneath energetic exploitation since final 12 months—however nonetheless no patch obtainable. A important zero-day and one other high-severity CVE are being chained collectively to assault customers of Ivanti Join Safe. The hackers—believed to be Chinese language state actors—are utilizing the unpatched vulns to interrupt into networks and transfer laterally. Ivanti CEO Jeff Abbott (pictured) is feeling… Continua a leggere Ivanti VPN Zero-Day Combo Chained ‘by China’

Consuleria is a leading provider of digital forensic investigations, cybersecurity, and data protection services. Our team of experts has the skills and experience to conduct investigations on both a national and international scale, including support for homeland security efforts.

Consuleria is committed to providing the highest level of security for its clients. We offer a comprehensive range of services, including security assessment and penetration testing, all of which are conducted in accordance with the highest industry standards.

Useful Links

Contact Us

Legal Headquarter:
Via Papa Giovanni XXIII Albenga (Sv) – ITALY
Phone: +39 393 33 58 136
Email (general): info [at] consuleria [dot] com
Email (legal): legal.office[at] consuleria [dot] com
Email (administration): amministrazione [at] consuleria [dot] com