Background Lateral movement refers to a post-exploitation activity in which a threat actor attempts to penetrate adjacent devices. After acquiring […]
The post Detecting and Mitigating Lateral Movement appeared first on HawkEye.
Background Three recently identified zero-day vulnerabilities in Ivanti’s Cloud Service Appliance (CSA) are being actively exploited, the company has notified […]
The post Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited appeared first on HawkEye.
Background The most recent GitHub Enterprise Server (GHES) security update fixes three recently found vulnerabilities, one of which is a […]
The post CVE-2024-9487: Critical Vulnerability Affecting GitHub Enterprise Server appeared first on HawkEye.
Background To facilitate the process of transferring configurations from different vendors to Palo Alto Networks’ PAN-OS, Expedition is an enhanced […]
The post Critical vulnerabilities in Palo Alto Expedition appeared first on HawkEye.
Background Microsoft’s October 2024 Patch Tuesday updates are now available. They provide essential safety enhancements that IT professionals should apply. […]
The post October 2024 – Microsoft patch tuesday highlights appeared first on HawkEye.
Background Cybersecurity risks in today’s quickly changing digital environment are getting more complex and challenging to identify. As organizations strengthen […]
The post HookChain: A New Approach to Bypassing EDR Solutions appeared first on HawkEye.
Background The parent company of Aruba Networks, Hewlett Packard Enterprise (HPE), issued a security bulletin on September 24, 2024, addressing […]
The post Critical RCE Vulnerabilites affecting Aruba Access Points appeared first on HawkEye.
Background Two critical vulnerabilities in VMware’s vCenter Server platform were recently patched by Broadcom, with the more severe of the […]
The post CVE-2024-38812: VMware vCenter Server RCE Vulnerability appeared first on HawkEye.
Background Microsoft’s September 2024 Patch Tuesday rollout includes security patches for 79 vulnerabilities. Among these are four zero-days that are […]
The post September 2024 – Microsoft Patch Tuesday Highlights appeared first on HawkEye.
Background A recent ransomware-as-a-service (RaaS) campaign has swiftly targeted organizations across the globe by pretending to be the authentic Cicada […]
The post Cicada – A new ransomware targeting VMware ESXi systems appeared first on HawkEye.
Background Threat actors target Middle Eastern enterprises using malware masquerading as the genuine Palo Alto GlobalProtect Tool, which can steal […]
The post New Malware Masquerades as Palo Alto VPN Targeting Middle East Organizations appeared first on HawkEye.
Background A pre-authentication vulnerability in Apache OFBiz can result in remote code execution. With a CVSS score of 9.8, the […]
The post CISA Warning: CVE-2024-38856 Apache OFBiz RCE Vulnerability under active exploitation appeared first on HawkEye.
Background Concerns have been raised by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the potential exploitation of a […]
The post CVE-2024-6800: A critical authentication bypass vulnerability affects the GitHub Enterprise Server appeared first on HawkEye.
Background SonicWall has released a patch to address a severe vulnerability discovered in certain SonicOS-based firewall devices. The vulnerability, CVE-2024-40766 […]
The post CVE-2024-40766: Critical SonicWall Firewall Vulnerability appeared first on HawkEye.
Background Concerns have been raised by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the potential exploitation of a […]
The post CISA Warning: SolarWinds’ RCE Vulnerability Being Exploited appeared first on HawkEye.