As cybersecurity threats and challenges continually adapt, organizations must remain vigilant against emerging threats and vulnerabilities. This week’s digest highlights […]
The post Weekly Threat Landscape Digest – Week 46 appeared first on HawkEye.
Introduction Microsoft’s November 2024 Patch Tuesday addresses 87 vulnerabilities across its software suite, including critical zero-day vulnerabilities actively exploited in […]
The post Microsoft November 2024 Patch Tuesday- Critical Updates and Key Vulnerabilities appeared first on HawkEye.
On November 8, 2024, Palo Alto Networks issued a security advisory concerning a potential remote code execution (RCE) vulnerability affecting […]
The post Critical Remote Code Execution Vulnerability in Palo Alto Networks PAN appeared first on HawkEye.
Background Lateral movement refers to a post-exploitation activity in which a threat actor attempts to penetrate adjacent devices. After acquiring […]
The post Detecting and Mitigating Lateral Movement appeared first on HawkEye.
Background Three recently identified zero-day vulnerabilities in Ivanti’s Cloud Service Appliance (CSA) are being actively exploited, the company has notified […]
The post Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited appeared first on HawkEye.
Background The most recent GitHub Enterprise Server (GHES) security update fixes three recently found vulnerabilities, one of which is a […]
The post CVE-2024-9487: Critical Vulnerability Affecting GitHub Enterprise Server appeared first on HawkEye.
Background To facilitate the process of transferring configurations from different vendors to Palo Alto Networks’ PAN-OS, Expedition is an enhanced […]
The post Critical vulnerabilities in Palo Alto Expedition appeared first on HawkEye.
Background Microsoft’s October 2024 Patch Tuesday updates are now available. They provide essential safety enhancements that IT professionals should apply. […]
The post October 2024 – Microsoft patch tuesday highlights appeared first on HawkEye.
Background Cybersecurity risks in today’s quickly changing digital environment are getting more complex and challenging to identify. As organizations strengthen […]
The post HookChain: A New Approach to Bypassing EDR Solutions appeared first on HawkEye.
Background The parent company of Aruba Networks, Hewlett Packard Enterprise (HPE), issued a security bulletin on September 24, 2024, addressing […]
The post Critical RCE Vulnerabilites affecting Aruba Access Points appeared first on HawkEye.
Background Two critical vulnerabilities in VMware’s vCenter Server platform were recently patched by Broadcom, with the more severe of the […]
The post CVE-2024-38812: VMware vCenter Server RCE Vulnerability appeared first on HawkEye.
Background Microsoft’s September 2024 Patch Tuesday rollout includes security patches for 79 vulnerabilities. Among these are four zero-days that are […]
The post September 2024 – Microsoft Patch Tuesday Highlights appeared first on HawkEye.
Background A recent ransomware-as-a-service (RaaS) campaign has swiftly targeted organizations across the globe by pretending to be the authentic Cicada […]
The post Cicada – A new ransomware targeting VMware ESXi systems appeared first on HawkEye.
Background Threat actors target Middle Eastern enterprises using malware masquerading as the genuine Palo Alto GlobalProtect Tool, which can steal […]
The post New Malware Masquerades as Palo Alto VPN Targeting Middle East Organizations appeared first on HawkEye.
Background A pre-authentication vulnerability in Apache OFBiz can result in remote code execution. With a CVSS score of 9.8, the […]
The post CISA Warning: CVE-2024-38856 Apache OFBiz RCE Vulnerability under active exploitation appeared first on HawkEye.
Background Concerns have been raised by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the potential exploitation of a […]
The post CVE-2024-6800: A critical authentication bypass vulnerability affects the GitHub Enterprise Server appeared first on HawkEye.