Uncovering hidden threats by changing mindset
What is Threat intelligence and why it is important?
As per Gartner “Threat intelligence is evidence based knowledge, including context, mechanisms, indicators and actionable advice, about an existing or emerging menace or hazard or assets that can be used to inform decisions regarding the subject’s response to that manace or hazard” or simply put, threat intelligence means “knowledge of threat that you can use to defend yourself”.
Ransomware protection via patch management
Background:
According to Forbes report, Ransomware continues to be top threat to the organizations. While most organizations are aware of this menace, and take active measures to mitigate its impact, one key mitigation measure is highly underrated by the organizations, which is patching.
Patch Management:
Ivanti Connect Secure VPN Vulnerabilities - saga continues
In continuation with first part of blog post on vulnerabilities identified on Ivanti VPN products, that shook IT infra of many large organizations towards at the end of 2023, we will be looking at three more vulnerabilities that Ivanti further disclosed on 31st January and 21st February in this second and conclusive part of this blog post series.
Ivanti Connect Secure VPN - Vulnerability, Prevention, Detection, Patching
Customers of Ivanti Connect Secure VPN had rough start of the year due to recently discovered high severity vulnerabilities that were already being exploited in the wild prior to being discovered by Security researchers. The combination of two vulnerabilities made overall discovery lethal for the users of Ivanti VPN servers. First one was an authentication bypass vulnerability whereas second allowed remote users to execute arbitrary code on VPN server. This post gives more information about the vulnerabilities, impact and mitigation techniques.