Navigation section
mitigation
-
AA19-168A: Microsoft Operating Systems BlueKeep Vulnerability
Original release date: June 17, 2019 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is issuing this Activity Alert to provide information on a vulnerability, known as “BlueKeep,” that exists in the following Microsoft Windows Operating Systems (OSs), including both 32- and...- News
- Thread
- bluekeep cisa cve-2019-0708 cybersecurity end-of-life exploitation malware microsoft mitigation network authentication patch management patches rdp remote access security tcp port user rights vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
TA18-276B: Advanced Persistent Threat Activity Exploiting Managed Service Providers
Original release date: October 3, 2018 Systems Affected Network Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of ongoing APT actor activity attempting to infiltrate the networks of global managed service providers (MSPs). Since May 2016...- News
- Thread
- apt authentication cloud security credential theft cybersecurity data protection incident reporting incident response logging managed service providers mitigation network architecture network security operational controls powershell risk management supply chain system integrity technical alert threat detection
- Replies: 0
- Forum: Security Alerts
-
Web Application Firewalls Aren’t Doing the Job, Survey Finds
Security, administration and cost issues mitigate the effectiveness of web application firewalls. Continue reading...- News
- Thread
- administration cost issues cybersecurity effectiveness firewalls mitigation network protection security survey web application
- Replies: 0
- Forum: Live RSS Feeds
-
AA19-122A: New Exploits for Unsecure SAP Systems
Original release date: May 02, 2019 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is issuing this activity alert in response to recently disclosed exploits that target unsecure configurations of SAP components. [1] Technical Details A presentation at the April 2019...- News
- Thread
- access control acls cisa configuration cybersecurity exploits internet exposure mitigation network security os commands presentation remote code execution research routing sap security recommendations security tools snc vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
AA19-024A: DNS Infrastructure Hijacking Campaign
Original release date: January 24, 2019 Summary The National Cybersecurity and Communications Integration Center (NCCIC), part of the Cybersecurity and Infrastructure Security Agency (CISA), is aware of a global Domain Name System (DNS) infrastructure hijacking campaign. Using compromised...- News
- Thread
- attack best practices campaign cisa credentials cybersecurity dns encryption hijacking infrastructure inspection malware manipulation mitigation network phishing security threat traffic validation
- Replies: 0
- Forum: Security Alerts
-
Standing behind “MSRC Listens”
Last week at BlueHat’s “MSRC Listens” session, I took the stage with Mechele Gruhn, manager of the Vulnerability Response PM team, to explain how MSRC is changing our communication, workflows, and tooling to deliver an improved user experience for our partners in the security research community...- News
- Thread
- bluehat bounty bounty terms cfg change logging communication community programs evaluation mitigation msrc research security submission tooling transparency user experience vulnerability workflows
- Replies: 0
- Forum: Security Alerts
-
Intel Foreshadow vulnerability
Intel has revealed another major security vulnerability in its CPUs, similar to the Meltdown/Spectre vulnerabilities revealed earlier this year. It is understood that at this time there are no current exploits and further information can be found on the released Link Removed . AMD chips are...- kemical
- Thread
- amd cache timing cpus cybersecurity data cache exploits hardware information disclosure intel l1tf meltdown mitigation processor core security side-channel spectre speculative execution technology vulnerability
- Replies: 1
- Forum: Windows Hardware
-
TA18-141A: Side-Channel Vulnerability Variants 3a and 4
Original release date: May 21, 2018 Systems Affected CPU hardware implementations Overview On May 21, 2018, new variants—known as 3A and 4—of the side-channel central processing unit (CPU) hardware vulnerability were Link Removed. These variants can allow an attacker to obtain access to...- News
- Thread
- attack cpu cve-2017-5715 cve-2017-5753 cve-2017-5754 cve-2018-3639 cve-2018-3640 exfiltration hardware impact meltdown mitigation patches security side-channel software spectre variant 3a variant 4 vulnerability
- Replies: 0
- Forum: Security Alerts
-
How do you balance privacy and security
For a while now I've been trying to avoid Google and Microsoft services as much as possible. Yet we all know that's not probable if you want to function normally in today's world. Well I've kind of hit a point where the geeky side of me has won over the cautious once bitten twice from the...- Axel PC
- Thread
- best practices chrome community discussion concerns data protection digital life features geek culture google information sharing microsoft mitigation online safety privacy security service usage tech balance user advice windows forum
- Replies: 8
- Forum: Windows Security
-
TA18-106A: Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices
Original release date: April 16, 2018 Systems Affected Generic Routing Encapsulation (GRE) Enabled Devices Cisco Smart Install (SMI) Enabled Devices Simple Network Management Protocol (SNMP) Enabled Network Devices Overview This joint Technical Alert (TA) is the result of analytic efforts...- News
- Thread
- command and control critical infrastructure cybersecurity dhs espionage exploitation fbi hacking indicators of compromise infrastructure international security legacy protocols malware mitigation network devices russian actors smart install snmp telnet tftp
- Replies: 0
- Forum: Security Alerts
-
Speculative Execution Bounty Launch
Today, Microsoft is announcing the launch of a limited-time bounty program for speculative execution side channel vulnerabilities. This new class of vulnerabilities was disclosed in January 2018 and represented a major advancement in the research in this field. In recognition of that threat...- News
- Thread
- attack methods azure bounty program bounty tiers coordinated disclosure cve-2017-5715 cve-2017-5753 microsoft mitigation payout research security research speculative execution threat environment tier 1 tier 2 tier 3 tier 4 vulnerabilities windows 10
- Replies: 0
- Forum: Security Alerts
-
KB4090007: Intel microcode updates
Intel release updates for Spectre on 6th generation (Skylake) chips: Intel Link Removed that they have completed their validations and started to release microcode for newer CPU platforms around Spectre Variant 2 (CVE 2017-5715 (“Branch Target Injection”)). This update includes microcode...- kemical
- Thread
- cpus cve 2017-5715 device manufacturer fall creators update guidance intel microcode mitigation patch registry rtm security skylake spectre speculative execution update update catalog vulnerabilities windows 10 windows server
- Replies: 0
- Forum: Software Updates
-
TA17-318B: HIDDEN COBRA – North Korean Trojan: Volgmer
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- backdoor trojan botnet cybersecurity dhs fbi hidden cobra incident response indicators of compromise ip addresses malicious activity malware malware analysis mitigation network defense network security north korea spear phishing trojan user-agent volgmer
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- application vulnerabilities botnet cyber attacks cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip addresses lazarus group malware mitigation network security north korea security advisory software patch threat intelligence
- Replies: 0
- Forum: Security Alerts
-
TA17-163A: CrashOverride Malware
Original release date: June 12, 2017 | Last revised: July 27, 2017 Systems Affected Industrial Control Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of public reports from ESET and Dragos outlining a new, highly capable Industrial...- News
- Thread
- attack authentication crashoverride cybersecurity detection exploitation ics industrial control systems infrastructure malware mitigation monitoring nccic remote access response risk evaluation threat ttps vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA17-156A: Reducing the Risk of SNMP Abuse
Original release date: June 05, 2017 Systems Affected SNMP enabled devices Overview The Simple Network Management Protocol (SNMP) may be abused to gain unauthorized access to network devices. SNMP provides a standardized framework for a common language that is used for monitoring and...- News
- Thread
- access control authentication best practices community strings configuration encryption management mib mitigation network devices network security protocols protocols best practices remote attacks security recommendations snmp snmpv3 udp vulnerability
- Replies: 0
- Forum: Security Alerts
-
Announcing the Windows Bounty Program
Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit...- News
- Thread
- application guard bounty program bug bounty customer privacy defensive technologies hyper-v insider preview microsoft edge mitigation payments payout range remote code execution research security security bugs software security vulnerabilities windows 10 windows defender windows server
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...- News
- Thread
- adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security practices threat detection vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
TA17-163A: CrashOverride Malware
Original release date: June 12, 2017 Systems Affected Industrial Controls Systems Overview The National Cybersecurity and Communications Integration Center (NCCIC) is aware of public reports from ESET and Dragos outlining a new, highly capable Industrial Controls Systems (ICS) attack...- News
- Thread
- applicationwhitelisting authentication backupstrategies commandinjection crashoverride criticalinfrastructure cybersecurity detection ics industrial malware mitigation nccic procedures remoteaccess riskevaluation tactics techniques threat
- Replies: 0
- Forum: Security Alerts
-
TA17-156A: Reducing the Risk of SNMP Abuse
Original release date: June 05, 2017 Systems Affected SNMP enabled devices Overview The Simple Network Management Protocol (SNMP) may be abused to gain unauthorized access to network devices. SNMP provides a standardized framework for a common language that is used for monitoring and...- News
- Thread
- access control authpriv best practices configuration cybersecurity devices encryption integrity management mib mitigation monitor network network traffic recommendations security snmp udp update whitelisting
- Replies: 0
- Forum: Security Alerts