Echobot IoT Botnet Casts a Wide Net with Raft of Exploit Additions
13 new exploits have been added to the malware’s bag of tricks. Continue reading Echobot IoT Botnet Casts a Wide Net with Raft of Exploit Additions
Category Archives: Palo Alto
TrickBot Evolves to Go After SSH Keys
The info-stealing malware has updated its password-grabbing module. Continue reading TrickBot Evolves to Go After SSH Keys
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
The flaws in the container technology, CVE-2019-16276 and CVE-2019-11253, are simple to exploit. Continue reading Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
Critical RCE Flaw in Palo Alto Gateways Hits Uber
The bug is previously unknown but yet still fixed in later releases. However, many organizations are likely still vulnerable. Continue reading Critical RCE Flaw in Palo Alto Gateways Hits Uber
Verodin, Palo Alto, & Okta – Enterprise Security Weekly #139
John Strand and Paul Asadoorian discuss how Okta joins forces with Secret Double Octopus, Tenable unveils new innovations for Cyber Exposure analytics, Barracuda launches bot protection feature for firewall offerings, and some acquisition and fundi… Continue reading Verodin, Palo Alto, & Okta – Enterprise Security Weekly #139
Security weakness in popular VPN clients
Numerous enterprise VPN clients could be vulnerable to a potentially serious security weakness that could be used to spoof access. Continue reading Security weakness in popular VPN clients
Authentication Bypass Bug Hits Top Enterprise VPNs
Business users of Cisco, F5 Networks, Palo Alto Networks and Pulse Secure platforms are impacted, according the U.S. government. Continue reading Authentication Bypass Bug Hits Top Enterprise VPNs
Facebook exec gets SWATted
The imposter claimed to be the Facebook exec and said he’d shot his wife, tied up his kids and planted pipe bombs “all over the place.” Continue reading Facebook exec gets SWATted
Splunk, White Hat, and Palo Alto – Enterprise Security Weekly #110
Splunk unveils first IoT platform for customers, Palo Alto Networks acquires RedLock to build out Cloud Security Tech, KnowBe4 boosts security awareness training with Virtual Risk Officer, Symantec brings workload assurance security to the Cloud, and m… Continue reading Splunk, White Hat, and Palo Alto – Enterprise Security Weekly #110
Tech support scam article for ESET
There may be persuasive reasons why providers are reluctant to engage directly with their customers, but the consequences may be grim for both provider and customer. (Plus links to stories about Nigerian BEC scams and fraudulently-obtained airline tick… Continue reading Tech support scam article for ESET