PoC for critical ManageEngine bug to be released, so get patching! (CVE-2022-47966)

If your enterprise is running ManageEngine products that were affected by CVE-2022-47966, check now whether they’ve been updated to a non-vulnerable version because Horizon3’s will be releasing technical details and a PoC exploit this week…. Continue reading PoC for critical ManageEngine bug to be released, so get patching! (CVE-2022-47966)

Researchers release PoC for Fortinet firewall flaw, exploitation attempts mount

Horizon3.ai researchers have released a PoC exploit for CVE-2022-40684, the authentication bypass vulnerability affecting Fortinet‘s firewalls and secure web gateways, and soon after exploitation attempts started rising. “[On Thursday], the… Continue reading Researchers release PoC for Fortinet firewall flaw, exploitation attempts mount

Horizon3.ai extends its NodeZero platform to include both internal and external penetration testing

Horizon3.ai announced it has extended the capabilities of its NodeZero platform to include external penetration testing. With this enhancement, Horizon3.ai is the first autonomous penetration testing platform to offer organizations both internal and ex… Continue reading Horizon3.ai extends its NodeZero platform to include both internal and external penetration testing

Intelligent Waves and Horizon3.ai join forces to provide security for DoD mission support

Intelligent Waves announced a strategic collaboration with Horizon3.ai to support next-generation cybersecurity protection in DevOps for the DoD special operations community. Intelligent Waves will utilize Horizon3.ai’s NodeZero autonomous penetr… Continue reading Intelligent Waves and Horizon3.ai join forces to provide security for DoD mission support

Attackers are attempting to exploit critical F5 BIG-IP RCE

Researchers have developed PoC exploits for CVE-2022-1388, a critical remote code execution bug affecting F5 BIG-IP multi-purpose networking devices/modules. Simultaneously, in-the-wild exploitation attempts have also been detected. CVE-2022-1388 PoC exploits Security researchers have started sharing evidence of their successful exploitation attempts of CVE-2022-1388 during the weekend: #CVE-2022-1388 successfully exploited. pic.twitter.com/P04K4PJsAN — Matus Bursa #strongertogether (@BursaMatus) May 9, 2022 🔥 We have reproduced the fresh CVE-2022-1388 in F5’s BIG-IP. Successful exploitation could lead to RCE from … More

The post Attackers are attempting to exploit critical F5 BIG-IP RCE appeared first on Help Net Security.

Continue reading Attackers are attempting to exploit critical F5 BIG-IP RCE

Legion Cyberworks and Horizon3.ai join forces to improve security controls for organizations

Legion Cyberworks announced a partnership with Horizon3.ai to provide customers with a new comprehensive VRT (Virtual Red Team) service. This partnership will enable customers to complete the find, fix, verify loop to ensure any exploit is remediated a… Continue reading Legion Cyberworks and Horizon3.ai join forces to improve security controls for organizations