CyberArm partners with Neustar Security Services to offer best-in-class DNS, application, and network security CyberArm and Neustar Security Services are pleased to announce our entrance into a strategic partnership, combining CyberARM’s industry leading Managed Security & Consulting Services with Neustar Security’s cloud-delivered security services to enable businesses to thrive online. [...]
CyberArm’s risk advisories are intended for senior management to aid their understanding of current events and the cyber risk posed to their organizations. What has happened? A vulnerability in the ‘print spooler’ (which handles interactions between the operating system and USB or network printers) for Microsoft Windows has been identified ...
This post by Rich Warren and Sander Laarhoven discusses NCC Group observed in the wild exploitation attempts and detection logic for the F5 BIG-IP/BIG-IQ iControl REST API vulnerabilities CVE-2021-22986. Update March 20th, 2021 We have seen PoCs of a variant posted to Twitter that doesn’t require SSRF, our advice is ...
Implement an IIS Re-Write Rule and disable Unified Messaging (UM), Exchange Control Panel (ECP) VDir, and Offline Address Book (OAB) VDir Services These mitigations have some known impact to functionality described below in detail. These mitigations are effective against the attacks we have seen so far in the wild but ...
Note: This Alert was updated by our security researchers on March 4, 2021 to provide further guidance. CyberARM has observed active exploitation of vulnerabilities in Microsoft Exchange Server products. Successful exploitation of these vulnerabilities allows an unauthenticated attacker to execute arbitrary code on vulnerable Exchange Servers, enabling the attacker to gain ...
