NRW.social

1 Beitrag1 Beteiligte*r0 Beiträge heute

Pyrzout :vm:Critical Commvault RCE vulnerability fixed, PoC available (CVE-2025-34028) <a href="https://www.helpnetsecurity.com/2025/04/24/critical-commvault-rce-vulnerability-fixed-poc-available-cve-2025-34028/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/04/24/critical-commvault-rce-vulnerability-fixed-poc-available-cve-2025-34028/</a> <a href="https://social.skynetcloud.site/tags/dataprotection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataprotection</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Commvault" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Commvault</a> <a href="https://social.skynetcloud.site/tags/WatchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WatchTowr</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/backup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#backup</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/PoC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PoC</a>

Pyrzout :vm:NAKIVO Backup & Replication vulnerability exploited by attackers (CVE-2024-48248) <a href="https://www.helpnetsecurity.com/2025/03/21/nakivo-backup-replication-vulnerability-exploited-by-attackers-cve-2024-48248/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/03/21/nakivo-backup-replication-vulnerability-exploited-by-attackers-cve-2024-48248/</a> <a href="https://social.skynetcloud.site/tags/disasterrecovery" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#disasterrecovery</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://social.skynetcloud.site/tags/enterprise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enterprise</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/WatchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WatchTowr</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/backup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#backup</a> <a href="https://social.skynetcloud.site/tags/NAKIVO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NAKIVO</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/SMBs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMBs</a> <a href="https://social.skynetcloud.site/tags/MSP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MSP</a> <a href="https://social.skynetcloud.site/tags/PoC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PoC</a>

Pyrzout :vm:Critical Veeam Backup & Replication RCE vulnerability fixed, patch ASAP! (CVE-2025-23120) <a href="https://www.helpnetsecurity.com/2025/03/20/critical-veeam-backup-replication-rce-vulnerability-cve-2025-23120/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/03/20/critical-veeam-backup-replication-rce-vulnerability-cve-2025-23120/</a> <a href="https://social.skynetcloud.site/tags/VeeamSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VeeamSoftware</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://social.skynetcloud.site/tags/enterprise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enterprise</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/WatchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WatchTowr</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/backup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#backup</a> <a href="https://social.skynetcloud.site/tags/Rapid7" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rapid7</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/SMBs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMBs</a> <a href="https://social.skynetcloud.site/tags/PoC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PoC</a>

Pyrzout :vm:Abandoned Amazon S3 Buckets Enabled Attacks Against Governments, Big Firms <a href="https://www.securityweek.com/abandoned-amazon-s3-buckets-enabled-attacks-against-governments-big-firms/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.securityweek.com/abandoned-amazon-s3-buckets-enabled-attacks-against-governments-big-firms/</a> <a href="https://social.skynetcloud.site/tags/ApplicationSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ApplicationSecurity</a> <a href="https://social.skynetcloud.site/tags/abandoneddomains" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#abandoneddomains</a> <a href="https://social.skynetcloud.site/tags/WatchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WatchTowr</a> <a href="https://social.skynetcloud.site/tags/AWS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AWS</a>

Pyrzout :vm:UK domain registry Nominet breached via Ivanti zero-day <a href="https://www.helpnetsecurity.com/2025/01/13/uk-domain-registry-nominet-breached-via-ivanti-zero-day-cve-2025-0282/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/01/13/uk-domain-registry-nominet-breached-via-ivanti-zero-day-cve-2025-0282/</a> <a href="https://social.skynetcloud.site/tags/Shadowserver" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shadowserver</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/WatchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WatchTowr</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/Mandiant" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mandiant</a> <a href="https://social.skynetcloud.site/tags/Nominet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nominet</a> <a href="https://social.skynetcloud.site/tags/Ivanti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ivanti</a> #0-day <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CISA</a>

NetzpalaverArctic Wolf beobachtet Bedrohungskampagne gegen Firewalls von Palo Alto<a href="https://social.tchncs.de/tags/ArcticWolf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ArcticWolf</a> <a href="https://social.tchncs.de/tags/ArcticWolfLabs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ArcticWolfLabs</a> <a href="https://social.tchncs.de/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.tchncs.de/tags/Firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Firewall</a> @AWNetworks <a href="https://social.tchncs.de/tags/PaloAltoNetworks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PaloAltoNetworks</a> <a href="https://social.tchncs.de/tags/Schwachstelle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Schwachstelle</a> <a href="https://social.tchncs.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.tchncs.de/tags/SecurityBreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityBreach</a> <a href="https://social.tchncs.de/tags/Sicherheitsl%C3%BCcke" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücke</a> <a href="https://social.tchncs.de/tags/Watchtowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Watchtowr</a><a href="https://netzpalaver.de/2024/11/25/arctic-wolf-beobachtet-bedrohungskampagne-gegen-firewalls-von-palo-alto/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://netzpalaver.de/2024/11/25/arctic-wolf-beobachtet-bedrohungskampagne-gegen-firewalls-von-palo-alto/</a>

Pyrzout :vm:PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577) <a href="https://www.helpnetsecurity.com/2024/06/13/cve-2024-4577-exploited/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2024/06/13/cve-2024-4577-exploited/</a> <a href="https://social.skynetcloud.site/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://social.skynetcloud.site/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/WatchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WatchTowr</a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hotstuff</a> <a href="https://social.skynetcloud.site/tags/Devcore" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Devcore</a> <a href="https://social.skynetcloud.site/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploit</a> <a href="https://social.skynetcloud.site/tags/Imperva" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Imperva</a> <a href="https://social.skynetcloud.site/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a> <a href="https://social.skynetcloud.site/tags/PHP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PHP</a>

Tod Beardsley<a href="https://infosec.exchange/@ha888t" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ha888t</a> <a href="https://infosec.exchange/@catc0n" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@catc0n</a> <a href="https://infosec.exchange/@simontsui" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@simontsui</a> <a href="https://infosec.exchange/@ntkramer" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ntkramer</a> <a href="https://mastodon.social/@serghei" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@serghei</a> <a href="https://infosec.exchange/@dangoodin" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@dangoodin</a> Heya Ben! Welcome to Mastodon! We're pretty friendly around here.Thanks for the clarification that you're not talking about EITW vulns here. That'll be comforting to many.And I happen to agree with your notes on not cavalierly releasing PoCs without doing the usual CVD dance, and I'm glad to hear that you'll push disclosure up in the event of patch availability.My gripe with the announcement is not so much that watchTowr failed to provide proof, but that the statement of "we know about vulns" is just about the least actionable form of RUMINT around. It makes management freak out, and there's kind of nothing that IT folks can do about it other than set a calendar reminder. In the worst cases, it feels like bullying the responsible vendor, since it puts them on a back foot. It also puts the vendor in a position to have to decide how much to inform customers versus how much to respect confidentiality expectations.I far prefer CVD styles that include limited-time embargoes for everything, including the existence of new research being disclosed, validated, and patched. This is the usual norm. I wouldn't implicate vendors, products, projects, or people until I'm ready to put them on the spot with a PoC.I'm a fan of the work <a href="https://infosec.exchange/tags/watchTowr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#watchTowr</a> puts out. Keep it up. Just try to be a little more kind about it?

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#watchtowr