Background Cybersecurity risks in today’s quickly changing digital environment are getting more complex and challenging to identify. As organizations strengthen […]
The post HookChain: A New Approach to Bypassing EDR Solutions appeared first on HawkEye.
Background The parent company of Aruba Networks, Hewlett Packard Enterprise (HPE), issued a security bulletin on September 24, 2024, addressing […]
The post Critical RCE Vulnerabilites affecting Aruba Access Points appeared first on HawkEye.
Background Two critical vulnerabilities in VMware’s vCenter Server platform were recently patched by Broadcom, with the more severe of the […]
The post CVE-2024-38812: VMware vCenter Server RCE Vulnerability appeared first on HawkEye.
Background Microsoft’s September 2024 Patch Tuesday rollout includes security patches for 79 vulnerabilities. Among these are four zero-days that are […]
The post September 2024 – Microsoft Patch Tuesday Highlights appeared first on HawkEye.
Background A recent ransomware-as-a-service (RaaS) campaign has swiftly targeted organizations across the globe by pretending to be the authentic Cicada […]
The post Cicada – A new ransomware targeting VMware ESXi systems appeared first on HawkEye.
Background Threat actors target Middle Eastern enterprises using malware masquerading as the genuine Palo Alto GlobalProtect Tool, which can steal […]
The post New Malware Masquerades as Palo Alto VPN Targeting Middle East Organizations appeared first on HawkEye.
Background A pre-authentication vulnerability in Apache OFBiz can result in remote code execution. With a CVSS score of 9.8, the […]
The post CISA Warning: CVE-2024-38856 Apache OFBiz RCE Vulnerability under active exploitation appeared first on HawkEye.
Background Concerns have been raised by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the potential exploitation of a […]
The post CVE-2024-6800: A critical authentication bypass vulnerability affects the GitHub Enterprise Server appeared first on HawkEye.
Background SonicWall has released a patch to address a severe vulnerability discovered in certain SonicOS-based firewall devices. The vulnerability, CVE-2024-40766 […]
The post CVE-2024-40766: Critical SonicWall Firewall Vulnerability appeared first on HawkEye.
Background Concerns have been raised by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the potential exploitation of a […]
The post CISA Warning: SolarWinds’ RCE Vulnerability Being Exploited appeared first on HawkEye.
Background Microsoft’s August 2024 Patch Tuesday release includes security patches for 85 vulnerabilities. These are six actively exploited zero-day vulnerabilities […]
The post August 2024 – Microsoft Patch Tuesday Highlights appeared first on HawkEye.
Background On Monday, July 29, Microsoft issued a comprehensive threat intelligence blog detailing the observed exploitation of CVE-2024-37085, an Active […]
The post CVE-2024-37085: VMware ESXi Hypervisor Vulnerability Exploited by Ransomware Groups appeared first on HawkEye.