Security Bulletin

Sure, everyone focuses on CVEs, but not every company has the ability to have full visibility into legacy IT.

Hybrid mesh firewall platforms enable security policy enforcement between workloads and users across any network, especially in on prem-first organizations.

In my previous diary[ 1], I explained why Python became popular for attackers. One of the given reason was that, from Python scripts, it&#x27s possible to call any Windows API and, therefore, perform low-level activities on the system. In another...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote code execution. Time to patch.

Pioneer Kitten was found to collaborate with ALPHV/BlackCat, NoEscape and Ransomhouse.

CISA warned about the RCE zero-day vulnerability in AVTECH IP cameras in early August, and now vulnerable systems are being used to spread malware.

The pivot is one of several changes the groups using the malware have used in recent attacks.

Security pros say by exploiting a recently discovered ESXi flaw, BlackByte has shifted to a more APT-style approach.

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environments into cryptomining networks.

Cisco Software Defined Access (SDA) just got better with Common Policy, a unique capability that ensures consistent policy enforcement at all network entry points through cross-domain context exchange.

The global market for managed services around Cisco products is projected to reach $161 billion by 2027, driven by customers seeking solutions and outcomes rather than just products or technology.