Blog

A report published by Barracuda Networks and researchers at UC Berkley which examines email compromise attacks at 111 organisations sheds light on how email is abused in cyber-attacks – often as the opening shot in the attack. The research reveals that 30% of the attacks were part of the emerging economy of ‘accounts for sale’Read more

Dell has patched a path-traversal vulnerability in the remote management web interface for its latest PowerEdge servers The iDRAC controller is a Linux computer within the PowerEdge server which is used to remotely manage the host server – even when the host itself is powered down. According to Dell’s security advisory: Dell EMC iDRAC9 versionsRead more

Mozilla has suspended the new Firefox Send service just four months after in launched, due to criminals increasingly using it as a malware delivery platform. When it was launched, Firefox Send allowed files of up to 1Gb to be shared for free without needing to login or create an account.  In a statement Mozilla advises:Read more

Tsunami is a security vulnerability scanner designed for very large networks – originally created by Google for scanning their own huge network. Google has now released Tsunami as an open source project – it is under active development and users are warned to expect significant changes in future releases. Security Managers responsible for very largeRead more

What is a Next Generation Firewall and how can it help keep your network secure? The phrase ‘next generation firewall’ is increasingly being used by security vendors to describe their network security products. However, the definition of precise capabilities required to call a firewall next generation (or not) are far from universally agreed. This articleRead more

Microsoft has released a patch to resolve a critical remote code execution vulnerability that has lived in the DNS server code for 17 years. A blog post from the Microsoft Security Response Centre states: Today we released an update for CVE-2020-1350, a Critical Remote Code Execution (RCE) vulnerability in Windows DNS Server that is classified as a ‘wormable’ vulnerability and has a CVSS base score of 10.0. This issue results from a flawRead more

The July patch bundle from SAP includes a critical patch to resolve a vulnerability in the NetWeaver application server which could allow an unauthenticated attacker to gain unrestricted access to the SAP environment and database. According to the description for the vulnerability recorded as CVE CVE-2020-6287 : SAP NetWeaver AS JAVA (LM Configuration Wizard), versionsRead more

Enterprise security provider F5 has disclosed details of a critical vulnerability affecting their BIG-IP systems used by governments and global enterprises. The flaw in the Traffic Management User Interface of the BIG-IP Application Delivery Controller allows an unauthenticated attacker to perform remote code execution.  The vulnerability ( CVE-2020-5902) is rated the top CVSS rating of 10/10Read more

Microsoft has launched Project Freta, a new malware detection service aimed at Linux systems. Named Project Freta (after the street where x-ray pioneer Marie Curie lived in Poland) the free service provides a means to scan the memory of Linux systems in order to detect malware.  Rather than install agents or scanning code onto theRead more

VERIS is a framework to record and categorise security incidents – making it easier to record and later report on a single incident or track trends over time. VERIS is the Vocabulary for Event Recording and Information Sharing. VERIS is designed around a four part model that can describe any incident: someone (the Actor) doesRead more