Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Weitere Blogs vom Autor

User-Profilbild Jithin Nair

Jithin Nair

Sr Manager, Security Research
CVE-2023-34362 MOVEit Vulnerability
Einblicke zum Thema Sicherheit
5 Lesezeit: Min

Coverage Advisory for CVE-2023-34362 MOVEit Vulnerability

Background: MOVEit is a managed file transfer software produced by Progress(formerly Ipswitch). The MOVEit encrypts files and uses secure File Transfer Protocols to transfer data with automation, analytics and failove...
Job scams impersonate companies still hiring following tech layoffs
Einblicke zum Thema Sicherheit
5 Lesezeit: Min

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information a...
FreeBSD Ping Stack-Based Overflow Security Advisory
Einblicke zum Thema Sicherheit
4 Lesezeit: Min

Security Advisory for FreeBSD Ping Stack-Based Overflow CVE-2022-23093

Background On Dec 01, 2022, a stack overflow vulnerability CVE-2022-23093 was found in the FreeBSD operating system (all supported versions) ping utility. The issue is a buffer overflow vulnerability affecting the “p...
OpenSSL Vulnerabilities CVE-2022-3602 & CVE-2022-3786
Einblicke zum Thema Sicherheit
5 Lesezeit: Min

Security Advisory for OpenSSL Vulnerabilities CVE-2022-3602 & CVE-2022-3786

Background On 01-Nov-2022, OpenSSL published an advisory about two high-severity security flaws - CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Bu...
Coverage Advisory for CVE-2022-30190
Einblicke zum Thema Sicherheit
3 Lesezeit: Min

Coverage Advisory for CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Background On May 27, 2022, nao_sec found a malicious Word document submitted to Virustotal from a Belarus IP address. The document was abusing MS-MSDT URI scheme to execute PowerShell within the context of Word bypas...
Spring Cloud Framework Vulnerabilities
Einblicke zum Thema Sicherheit
5 Lesezeit: Min

Analysis of Spring Cloud Framework Vulnerabilities

Background: Over the past few days, the Zscaler ThreatLabz team has been closely monitoring the reports of potential RCEs in Spring Cloud Framework and Spring Cloud Function. Spring is an open-source lightweight Ja...
ThreatLabz security advisory
Einblicke zum Thema Sicherheit
6 Lesezeit: Min

ThreatLabz Security Advisory: Cyberattacks Stemming from the Russia-Ukraine Conflict [Updated: March 21, 2022]

Updated Security Advisory - March 21, 2022 Earlier today, US President Joe Biden issued a statement warning of the potential for malicious cyber conduct against the United States as a response to economic sanctions ag...
CVE-2021-44228 Log4j2 Remote Code Execution (RCE) Vulnerability
Einblicke zum Thema Sicherheit
3 Lesezeit: Min

Security Advisory: Log4j 0-Day Remote Code Execution Vulnerability (CVE-2021-44228)

Background The Apache Software Foundation has released a security advisory with patch and mitigation details to address a remote code execution vulnerability (CVE-2021-44228) affecting Log4j versions 2.0-beta9 to 2.14.1...
Zero-day Exploits Related to Microsoft Exchange Servers
Einblicke zum Thema Sicherheit
3 Lesezeit: Min

Coverage Advisory for Exploits Related to Microsoft Exchange Servers

Update [19-Mar-2021] Microsoft has released to GitHub the new Microsoft Exchange On-Premises Mitigation Tool and posted a blog with step-by-step instructions on how to use the tool. This is a free, one-click tool desi...
Ransomware
Ransomware
2 Lesezeit: Min

Coverage Advisory for Ransomware Activity Targeting Healthcare and Public Health Sector

Background A joint cybersecurity advisory was released by the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS) r...
Targeted attacks on Australian Networks (ACSC Advisory) - Zscaler Coverage
Einblicke zum Thema Sicherheit
4 Lesezeit: Min

Targeted attacks on Australian Networks (ACSC Advisory) - Zscaler Coverage

Background Earlier today Australian Cyber Security Centre (ACSC) released an advisory regarding a cyber campaign targeting Australian networks. The campaign is dubbed ‘Copy-paste compromises’ due to the threat actor’s...
Zscaler Coverage for the Maze Ransomware
Ransomware
2 Lesezeit: Min

Zscaler Coverage for the Maze Ransomware

In this blog, the Zscaler ThreatLabZ team provides details on the Maze ransomware. Background On April 18, 2020, Cognizant confirmed a security incident causing service disruptions for some of its clients due to a ...
A look at recent Emotet Campaigns - August 2017
Einblicke zum Thema Sicherheit
3 Lesezeit: Min

A look at recent Emotet Campaigns - August 2017

Introduction Emotet, the credential stealing banking Trojan, was first reported in 2014 when it wreaked havoc in Europe and the United States. The Zscaler Threat Research team has been monitoring the new variant...

Weitere Artikel

Weitere Themen entdecken