|
Description:
A host header injection vulnerability has been discovered in SecZetta's NEProfile product. Authenticated remote adversaries can poison the host header resulting in the attacker controlling response 302 execution flow. The issue affects version 3.3.11 and has not been tested on other versions of the product. Nice work, Bryan. More to follow! https://seclists.org/fulldisclosure/2020/Aug/17
0 Comments
We are excited to announce that IntelMonkey is now Pathfynder! Pathfynder embodies our expanded capability set and dedication to bringing the best cyber solutions to our customers in these uncertain times. Defeating tomorrow's cyber threats requires conviction, agility, and innovation. We are here for you. Any time. Any place.  We've looked forward to this release since March and have incorporated these sub-techniques in our threat modeling process. We've found the increased technique fidelity and the ability to address more nuanced adversary behaviors to be really impactful.
From MITRE ATT&CK: "We’re excited to announce the release of ATT&CK with sub-techniques! We released a beta preview of the content in March, and now (with some small updates and fixes) it has become the current version of ATT&CK. Our hope is that this sets up ATT&CK on a much more sustainable path for the years to come. You can find the new version of ATT&CK and what's changed on our website (https://lnkd.in/e_DrbMC). We've also released a new blog post pulling together what's changed, why, and how to shift to this new version of ATT&CK." We are excited to welcome Bryan Clements to the Pathfynder team as Senior Director, Cyber Operations.
Bryan is a highly respected cybersecurity professional with over 15 years helping Fortune 50 and Small and Medium Businesses(SMB) successfully navigate complex security challenges. Bryan’s experience assessing and improving cyber readiness, designing and building security systems, and leading and maturing insider threat programs will both complement and expand our capability set. And most importantly, Bryan shares Pathfynder’s commitment to service and passion for helping organizations defeat cyber adversaries. Welcome to the team, Bryan! Justin Jackson - Director, Revenue Operations Sometimes marketer. Aspiring analytics nerd. Donut lover.  German soldiers parade on the Champs Élysées on 14 June 1940 (Bundesarchiv) The Bottom-Line Up Front: Don't assume your defenses are effective; instead, continuously test and probe them for weaknesses, because that is what your adversary is doing. These are lessons that have been painfully learned, both in the annals of military history and corporate conference calls following a major data breach. Justin Jackson - Director, Revenue Operations Sometimes marketer. Aspiring analytics nerd. Donut lover.  The Bottom-Line Up Front: Cyber adversaries thrive in times of chaos and they have rapidly pivoted to take advantage of the current situation. Right now, they are hard at work launching COVID-19 related attacks against companies and their employees. Are the defensive controls you had in place 3-months ago sufficient today? |
Archives
June 2021
Categories
All
|
RSS Feed
|
Pathfynder 2021 | All Rights Reserved
|