Join Grip Security on its mission to redefine identity security. Discover how innovation, empathy, and culture are shaping the future of digital protection.
The post Why I Joined Grip Security in Securing the Digital Future appeared first on Security Boulevard.
RSA Conference (RSAC) brings together cybersecurity practitioners from across the globe to learn about the latest cybersecurity defense strategies and tools, connect with industry peers, and share knowledge about the threat landscape.
The post 5 reasons to not miss Sonatype at RSAC 2025 appeared first on Security Boulevard.
Proof-of-concept code has been released after researchers disclosed a maximum severity remote code execution vulnerability in Erlang/OTP SSH. Successful exploitation could allow for complete takeover of affected devices.
BackgroundOn April 16, Fabian Bäumer, Marcus Brinkmann, Marcel Maehren, and Jörg Schwenk of the Ruhr University Bochum in Germany disclosed a critical vulnerability in Erlang/OTP SSH to the OpenWall vulnerability mailing list. Additionally an official advisory was posted to the GitHub project for Erlang/OTP crediting the researchers for their disclosure.
CVE Description CVSSv3 VPR CVE-2025-32433 Erlang/OTP SSH Remote Code Execution Vulnerability 10.0 10*Please note: Tenable’s Vulnerability Priority Rating (VPR) scores are calculated nightly. This blog post was published on April 18 and reflects VPR at that time.
AnalysisCVE-2025-32433 is a remote code execution (RCE) vulnerability affecting the Erlang/OTP SSH server. The vulnerability exists due to a flaw in the SSH protocol message handling which could allow an unauthenticated attacker to execute arbitrary code. According to the advisory, all users running Erlang/OTP SSH servers are impacted and to assume impact if your application utilizes the Erlang/OTP SSH library. This vulnerability received the maximum CVSSv3 score of 10.0 and when the SSH daemon is running as root, allows an attacker to completely compromise an affected device.
At the time this blog was published, no known exploitation has been observed, however with the ease of exploitation and critical severity, we anticipate attacks will occur soon.
Proof of conceptOn April 17, researchers at Platform Security released a public proof-of-concept (PoC) exploit for CVE-2025-32433. The writeup notes that the PoC was generated with the help of ChatGPT and Cursor, and that it was fairly simple to do so using those AI tools.
The PoC initiates an SSH protocol negotiation as a normal client would. But, before authenticating the user, the client sends an unexpected message with an arbitrary command. The vulnerable server will process these messages and execute the commands. A patched server will disconnect immediately upon seeing these messages prior to authentication.
An additional PoC has been released, and the Horizon3 Attack Team posted on X (formerly Twitter) that they had developed a PoC but have chosen not to release it as of writing.
Just finished reproducing CVE-2025-32433 and putting together a quick PoC exploit — surprisingly easy. Wouldn’t be shocked if public PoCs start dropping soon. If you’re tracking this, now’s the time to take action. #Erlang #SSH pic.twitter.com/hBqJMfFHMN
— Horizon3 Attack Team (@Horizon3Attack) April 17, 2025
SolutionErlang/OTP has released patches to address this vulnerability.
Affected Versions Fixed Versions OTP-27.3.2 and below OTP-27.3.3 OTP-26.2.5.10 and below OTP-26.2.5.11 OTP-25.3.2.19 and below OTP-25.3.2.20If immediate patching cannot be performed, restricting access via a firewall or disabling the SSH server are mitigation steps provided by Erlang/OTP. However, we strongly recommend upgrading as soon as possible to fully remediate this vulnerability.
Identifying affected systemsA list of Tenable plugins for this vulnerability can be found on the individual CVE page for CVE-2025-32433 as they’re released. This link will display all available plugins for this vulnerability, including upcoming plugins in our Plugins Pipeline.
Additionally, customers can utilize Tenable Attack Surface Management to identify hosts running Erlang/OTP SSH Server.
Get more informationJoin Tenable's Security Response Team on the Tenable Community.
Learn more about Tenable One, the Exposure Management Platform for the modern attack surface.
The post CVE-2025-32433: Erlang/OTP SSH Unauthenticated Remote Code Execution Vulnerability appeared first on Security Boulevard.
Author/Presenter: Yotam Perkal
Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.
The post BSidesLV24 – Common Ground – Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation appeared first on Security Boulevard.
Chris Kreb, the former CISA director who has come under fire from President Trump for refusing to support claims at the 2020 election was tampered with, resigned from his position with cybersecurity vendor SentinelOne, telling employees that "this is my fight, not the company's."
The post Krebs Steps Down from SentinelOne, Vows to Fight Trump Attack appeared first on Security Boulevard.
What is a White-Labeled XDR Platform? XDR stands for Extended Detection and Response — a security solution that integrates multiple security layers (endpoint, network, server, cloud, and more) into a unified system. It provides end-to-end visibility, real-time threat detection, and automated responses across the entire IT environment. Now add white labeling to the mix. A
The post White-Labeled XDR Platform appeared first on Seceon Inc.
The post White-Labeled XDR Platform appeared first on Security Boulevard.
Authentication issues block 75% of enterprise SaaS deals, with companies losing millions in revenue annually. This deep dive reveals how forward-thinking SaaS leaders transform auth from a technical headache into a strategic advantage to accelerates enterprise adoption and shortens sales cycles.
The post The Enterprise-Ready Dilemma: Navigating Authentication Challenges in B2B SaaS appeared first on Security Boulevard.
LLMs won’t fix a broken SOC, but apprenticeship might. ATLSecCon 2025 revealed how outdated hiring and cultural gatekeeping are breaking cybersecurity from the inside out.
The post ATLSecCon 2025: Security Readiness Means Human Readiness appeared first on Security Boulevard.
Fear is one of the greatest barriers to innovation and entrepreneurship. The fear of failure. The fear of imperfection. The fear of not having the...Read More
The post Don’t Let Fear Stop You from Innovating or Launching a Startup Business appeared first on ISHIR | Software Development India.
The post Don’t Let Fear Stop You from Innovating or Launching a Startup Business appeared first on Security Boulevard.
In today's complex threat landscape, gut feelings and disparate risk scores are no longer sufficient for effective cyber risk management. Organizations need concrete, data-driven insights to make informed decisions, prioritize security investments, and ultimately, protect their bottom line. This is where cyber risk quantification (CRQ) steps in, offering a powerful lens through which to view and manage cyber threats. By translating cyber risks into financial terms, CRQ delivers invaluable cyber risk insights that resonate across all levels of an organization, from the security analyst to the boardroom.
The post Unlock the Power of Financial Quantification of Cyber Risk appeared first on Security Boulevard.
For most MSPs, Security Awareness Training (SAT) is an unavoidable part of the service stack, but let’s be honest, it often feels more like a recurring project than a meaningful security strategy.
The post Reimagining SAT For MSPs: From Static Lessons to Smart Defense appeared first on Security Boulevard.
Overview On April 16, 2025, NSFOCUS CERT detected that Oracle officially released the Critical Patch Update (CPU) for April. A total of 390 vulnerabilities with different degrees were fixed this time. This security update involves Oracle MySQL Connectors, Oracle MySQL Server, Oracle Java SE, Oracle Fusion Middleware, Oracle Financial Services Applications, Oracle Communications Applications and […]
The post Critical Patch Update Announcement in April for All Oracle Products appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..
The post Critical Patch Update Announcement in April for All Oracle Products appeared first on Security Boulevard.
Credential stuffing is a pervasive and increasingly sophisticated cyberattack that exploits the widespread habit of password reuse among users. By […]
The post Understanding Credential Stuffing: A Growing Cybersecurity Threat appeared first on Security Boulevard.
Medusa: Its operations, the main factor driving its recent resurgence, which has led to warnings issued by global authorities, its targets and why it’s so dangerous.
The post Medusa Ransomware: Inside the 2025 Resurgence of One of the Internet’s Most Aggressive Threats appeared first on Security Boulevard.
Using high availability (HA) clustering to test patches and updates more easily and to apply them in production environments with near-zero application downtime.
The post Unlocking Near-Zero Downtime Patch Management With High Availability Clustering appeared first on Security Boulevard.
If we want privacy, trust and resilience in our digital infrastructure, tokenization is no longer optional. It’s essential.
The post The Urgent Need for Tokenizing Personally Identifiable Information appeared first on Security Boulevard.
The digital world is crumbling, and conventional vulnerability management alone is not enough to defend your organization against the unannounced cyber threats. Identifying the flaws present within your organizational platforms and patching them is a golden rule of protection. However, what about those vulnerabilities that interact with the broader attack surface? Thus, the need for […]
The post What is Vulnerability Exposure Management? appeared first on Kratikal Blogs - Information Hub For Cyber Security Experts.
The post What is Vulnerability Exposure Management? appeared first on Security Boulevard.
The industry is evolving yet again. With the CA/Browser Forum’s recent decision to reduce the maximum SSL/TLS certificate lifecycle to 47 days by 2029, the way organizations manage their certificates is going to change significantly—and sooner than most realize. This update builds on the trend of strengthening web security by minimizing risks associated with stale […]
The post The Future of SSL Certificate Management: Adapting to Shortened Renewal Periods appeared first on Blog.
The post The Future of SSL Certificate Management: Adapting to Shortened Renewal Periods appeared first on Security Boulevard.
Why is Cloud Security of Paramount Importance? It’s a well-acknowledged fact, isn’t it, that our reliance on cloud services has significantly increased in the past few years? According to data from Dell Technologies, almost every organization, regardless of size and industry, has adopted some form of cloud storage or applications. This shift has prompted many […]
The post How to Ensure Security in Cloud Compliance appeared first on Entro.
The post How to Ensure Security in Cloud Compliance appeared first on Security Boulevard.
Are Interactions in Your Digital Environment Truly Secure? Cybersecurity has grown beyond the protection of human accounts alone. Increasingly, the focus is on securing machine-based interactions, such as APIs and service accounts, that occur billions of times a day. Non-Human Identities (NHIs) and Secrets Security Management has emerged to be a pivotal strategy in securing […]
The post Securing Cloud Data: A Relief for CFOs appeared first on Entro.
The post Securing Cloud Data: A Relief for CFOs appeared first on Security Boulevard.
