Just over a month after the details of the initial Apache Log4j vulnerability surfaced, attacks against infrastructure running vulnerable versions of the application are continuing, including a recent furry of attacks targeting VMware Horizon servers by an unidentified threat actor group. VMware Horizon server versions 8.x and 7.x are vulnerable to two of the Log4j vulnerabilities (CVE-2021-44228 and CVE-2021-45046), and officials with the UK’s National Health Service Digital

In Microsoft Exchange, the three known vulnerabilities that threat actors use to get initial access are often referred to collectively as Proxyshells. These three known vulnerabilities are CVE-2021-34473, CVE-2021-34523, and CVE-2021- 31207. The attackers use these three vulnerabilities by bypassing the authentication and running a remote code as a privileged user. Microsoft has classified the Proxyshell vulnerabilities as critical. However, the proxyshell vulnerability is re

Access controls are a security technique that determines who or what may view or utilize resources in a computing environment controlled by a particular policy. Below is a list of Access controls used to minimize risk in businesses and organizations. Types of access control: Physical access control: It limits access to Campus buildings, rooms, and physical IT assets. Logical access control: It limits access to computer networks, systems, and data. Therefore, an enterprise mu

Strong passwords play an essential role in safeguarding your company's data and client information. Unfortunately, due to weak or non-existing password policies, many companies face a high risk of data breaches. Nowadays, cyber-attacks are common, and hackers use many techniques to crack passwords. Although a brute force attack is still old, it is still practical and common among hackers. Brute force attacks work on" trial-and-error" methods and guess the hidden content of we

The purpose of penetration testing is to assess an organization's security posture. Penetration testing encompasses all networks, applications, devices, IT infrastructure, and physical security. The goal is to emulate malicious actions. Cybersecurity experts use penetration testing to enhance a company's cybersecurity posture to identify risks to the business. Why is a Penetration Test Necessary? Companies can perform penetration tests to evaluate the security of their IT in