runZero

⚠️ Fortinet has issued an advisory for the FortiWLM product. CVE-2023-34990 is rated as critical with a CVSS score of 9.6 and if successfully exploited, may allow an unauthenticated attacker to read sensitive files. 👉 Use runZero to locate systems running potentially vulnerable software without rescanning: https://lnkd.in/gy-GByPm

That's a wrap on Black Hat Europe! It was an amazing (and insanely busy!) week. So great to reconnect with old friends and meet new ones. Thank you to all of you who came by to say hello, and to my incredible team of rock stars who make the magic happen. I'm so grateful to work alongside all of you!

What a week at #BlackHatEurope! Thanks to all the industry friends, customers, partners, and new connections who stopped by our expresso cart, played our scratch-off game, uncovered unknown devices to win prizes, came by our booth, saw a demo, met our team, and taught us a thing or two. Not that we were counting, but that's... ☕ 500 cups of coffee served 🥳 498 scratch-off cards scratched (not including the 2 we QA’d!) 🎩 1000+ stickers distributed, but not yet stuck 🧦 572 pieces of swag grabbed 💅 50 bottles of teal nail polish nabbed 🤝 700+ new friends and connections made Thanks to our tireless onsite crew, Julie Albright, Dominik Bieszczad, Sam Choudhury, Wes Hutcherson, Karli Nutter, Chris Phillips, and Joe Taborek. Safe travels to everyone headed home… see you again next year in London! #BlackHat #BCEU #cybersecurity

❗ Siemens has disclosed 🔟 vulnerabilities in various products, including RUGGEDCOM and SENTRON. These vulnerabilities differ in severity from moderate to high and have been assigned CVSS scores ranging from 5.1 to 8.6. ⚠️ Successful exploitation of these vulnerabilities may result in allowing unauthenticated remote attackers to perform administrative actions if a local user clicks on a malicious link, denial-of-service conditions, or disclosure of sensitive information. 👉 Use runZero to locate systems running potentially vulnerable software: https://lnkd.in/e8YdvepU

❗ Ivanti has issued an advisory disclosing 3️⃣ critical vulnerabilities affecting versions 5.0.2 (and prior) of the Cloud Services Appliance product. Successful exploitation of CVE-2024-11772 and CVE-2024-11773, both rated as critical with a CVSS score of 9.1, would allow an attacker with admin privileges to execute arbitrary code. 📣 Be advised that: ⚠️ CVE-2024-11639 is rated as highly critical with a CVSS score of 10.0. Successful exploitation would allow an attacker to bypass authentication checks and gain admin privileges. 👉 Use runZero to find systems running potentially vulnerable software in minutes: https://lnkd.in/gxhBNvPa

🥳 Today’s the day! We're celebrating runZero Hour's one-year anniversary! Join us as we ring in a new year of research-driven insights with: 🤩 An all-star panel discussing 2024’s biggest security events and what’s coming in 2025, all through the lens of IT/OT convergence 🏆 A live raffle for a mystery mini-machine crafted by HD Moore 👕 Free commemorative t-shirts (while supplies last) 🗣️ Panelists: Kylie McClanahan, Jens Baetens, Pascal Ackerman, Rob King , and HD Moore. 👉Register now: https://lnkd.in/e7d_2CGG Please see terms & conditions on our website.

❗ Ivanti has disclosed five vulnerabilities in the Ivanti Connect Secure and Ivanti Policy Secure products. Successful exploitation of these vulnerabilities would allow an attacker to execute arbitrary code, read potentially sensitive resources, or create a DoS condition on impacted devices. 📣 For your awareness: CVE-2024-11633 & CVE-2024-11634 are rated as critical with a CVSS score of 9.1. CVE-2024-37401 & CVE-2024-37377 are rated as high with a CVSS score of 7.5. CVE-2024-9844 is rated as high with a CVSS score of 7.1. 👉 Fire up runZero to find potentially vulnerable systems in minutes without rescanning or credentials: https://lnkd.in/gqTW3Z5s 

❗ Huntress Labs has shared new research regarding CVE-2024-50623, a vulnerability disclosed by Cleo Software on October 27th. The provided patch does not fully resolve the issue affecting versions of Cleo Harmony, LexiCom, and VLTrader prior to 5.8.0.21. There is evidence that this vulnerability is being exploited in the wild. ⚠️ Of note, successful exploitation of this vulnerability potentially allows remote code execution and requires access to the Cleo web server. 👏 Thanks for Rob King for this Rapid Response post! 👉 Use runZero to find potentially vulnerable systems in minutes without rescanning: https://lnkd.in/eFPM2xGd

🎉 We're celebrating runZero Hour's one-year anniversary! Join us Wednesday as we ring in a new year of research-driven insights with commemorative t-shirts, a live raffle for a mystery mini-machine built by HD Moore, and an all-star panel that will unpack the biggest security events of 2024 and predict what's ahead in 2025 — all through the lens of IT/OT convergence. 🎙️ Thank you to Kylie McClanahan, Jens Baetens, Pascal Ackerman, Rob King, and HD Moore for joining us for this special occasion and sharing your expert insights. 👉 Subscribe now to get your free special-edition t-shirt before supplies run out and to enter the raffle*: https://lnkd.in/e7d_2CGG We hope to see you there! *Please see terms & conditions on our website.

Salt Typhoon, the latest evolution in China’s state-sponsored attacks, is targeting telecommunications providers and ISPs in an effort to a gain access to sensitive information related to parties involved in government and political activities. They have systematically and skillfully exploited IT, OT, and IoT systems to steal data and compromise private communications. Our latest blog from Wes Hutcherson offers insights into how organizations can protect themselves against Salt Typhoon's attack vectors, including specific steps you can take with the runZero Platform to improve visibility and proactively identify exposures that are commonly exploited as part of this campaign. If you aren’t a runZero customer or Community Edition user, our free 21-day trial also supports these features to help you stay a step ahead of the attackers. Get started here: https://lnkd.in/gMPCBXGk Read the blog here: https://lnkd.in/eA_2zz2X