runZero

🎙️ Join HD Moore on next week's Dark Reading webcast to explore new research that will forever redefine how you approach attack surface management. Learn how flipping external approaches inside-out overcomes common challenges like attribution accuracy and false positives, and see why starting with a deep understanding of your internal attack surface delivers significant improvements in external defenses. Tune in to see: 👉 Why an accurate view of your external attack surface starts with detailed asset fingerprinting, not IP addresses and domain names. 👉 How to identify assets with high-risk external exposures that traditional solutions miss, as well as cloned servers, duplicated certificates, misconfigurations, and more. 👉 How to apply new inside-out techniques in your organization to get a detailed view of what’s at risk and how everything is connected, including a live demonstration using the runZero Platform. Rethink the way you manage your attack surface. We hope you'll join us December 4th at 1pm ET/10am PT! Register here: https://lnkd.in/e6mNrEwx

🇪🇸 Our team is in Madrid today with our awesome partners DotForce Spain at XVIII Jornadas STIC CCN-CERT | VI Jornadas de Ciberdefensa ESPDEF-CERT 2024. Swing by our stand to say hello to Sam Choudhury and Dominik Bieszczad, and see the latest features in the runZero Platform!

❗D-Link has issued a security advisory for a vulnerability in discontinued router models, including the DSR-150, DSR-250, DSR-500, and DSR-1000 families. At this time, the vulnerability has not been assigned a CVE or CVSS score, but it is considered to be of critical severity. There is some limited indication that this vulnerability is being exploited in the wild. ➡ Successful exploitation of this vulnerability could result in arbitrary code execution and possibly allow attackers to take over the affected device.  👉 Use runZero to locate potentially vulnerable devices in minutes without rescanning: https://lnkd.in/gPG8RBVb

🇺🇸 Inside the Beltway? Join runZero and Carahsoft for an invitation-only lunch-and-learn with fellow government security leaders on December 5th. runZero’s Director of Research Rob King and solution experts Brian Carol and Ali Cheikh will present new research on the current threat landscape, including the impact of IT, OT, and IoT convergence. Gain insights into real-world attacks leveraging weaknesses in critical infrastructure, unknown assets, and network dark matter. We’ll also discuss how runZero leverages applied research to constantly improve defenses for sensitive assets, address the surge in OT and IoT network-integrated devices, and protect morphing attack surfaces. 👉 Request your invitation today from our public sector team, Jim Kovach, Peter Allen, and Derek Burke, or sign up here: https://lnkd.in/e_k58kJM

➡ Palo Alto Networks has issued a security advisory for a critical vulnerability affecting the PAN-OS management web interface. At this time, there is limited evidence that CVE-2024-0012, which has been assigned a CVSS score of 9.3, is being exploited in the wild. 📣 Be advised that if an attacker can access the web administration interface and successfully exploit this vulnerability, they may gain administrative privileges enabling full control over the system. Additionally, this vulnerability may allow an attacker to exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474.  👉 Fire up runZero now to discover assets that could be affected – no rescanning or credentials required: https://lnkd.in/gnZnY9D5

❗Broadcom has issued a security advisory indicating that CVE-2024-38812, a vulnerability affecting VMware vCenter, is being actively exploited in the wild. This vulnerability was initially disclosed on September 17 and fully patched on October 21. CVE-2024-38812 is considered highly critical and has been assigned a CVSS score of 9.8. 📌 Please note that an attacker with remote access to a vulnerable system could send specially crafted requests triggering a heap-overflow, resulting in code execution or privilege escalation into root. 👉 Use runZero to find potentially vulnerable systems in minutes. No credentials or rescanning required: https://lnkd.in/gKQeHRF8

Today's the day! Join us at 1pm ET for the latest episode of runZero Hour: https://lnkd.in/ePpdjszU. We've got quite a lineup: 👉 Rob King will share techniques for discovering unknown OT/IoT assets lurking in the shadows of non-IP addressable spaces. 👉 Blain Smith will examine the ProConOS protocol and discuss how IT/OT convergence is appearing more frequently in smaller, non-industrial environments, including your own home. 👉 Tom Sellers and team will do a Rapid Response roundup on the latest vulnerabilities and emerging threats. We hope you'll join us!

If the NSA[1], GrapheneOS[2], and Apple[3] all believe that rebooting your mobile phone regularly is something that protects your data, you might consider doing it more often. Shortcuts on iOS make this super easy to setup: a) Open the Shortcuts application (use search to find it if its not on your home screen). b) Create a new shortcut, search actions for Shutdown, select Shutdown. c) Click on the Shutdown blue text, select Restart instead. Save the shortcut as Restart. d) At the bottom of the Shortcuts screen, select Automation, click the + sign to create one. e) Choose Time of Day, pick a convenient time (bedtime, etc), choose "Run Immediately" at the bottom of the screen, click Next. f) Search for and select your "Restart" shortcut. That's it. Once a (whatever time period you choose), your device will restart and be in a much safer Before First Unlock (BFU) state, and if you're lucky, disrupt any active malware installation. 1. https://lnkd.in/g2h_P9p8 2. https://lnkd.in/gzT2vTrR 3. https://lnkd.in/eVbxca2R

📺 Join us next Wednesday for a new episode of runZero Hour. If you are part of the OT/ICS security community, this episode is for you! 🤖 What's on tap: ➡️ Rob King will share techniques to uncover unknown OT/IoT assets hiding in non-IP addressable spaces. ➡️ Blain Smith will breakdown the ProConOS protocol and offer some intriguing observations of IT/OT convergence in smaller, non-industrial environments - even your own home! ➡️ Our Rapid Response roundup will keep you up-to-date on the latest vulnerabilities and emerging threats. 👉 Register here:  https://lnkd.in/ePpdjszU #OT #ICS #IoT #cybersecurity

🌆 Calling all security pros in Seattle! Swing by SecureWorld today and tomorrow to meet with our awesome onsite crew, Eric Anderson, Ali Cheikh, Heidi Dailey, and Kimberly Henry. They'll get you outfitted with some limited edition swag and show you how runZero can help you manage your total attack surface, minimize risk, and achieve compliance!