On May 31, 2023, Progress released a security advisory for their MOVEit Transfer application detailing a SQL injection vulnerability leading to remote code execution. Customers were urged to update to the latest version. This vulnerability, CVE-2023-34362, was believed to have been exploited in the wild as a 0-day dating back at least 30 days. Threat intelligence reports suggested that exploitation activity could be traced back to 2021. The attacks were attributed to the cl0p

The cyber threat landscape is a constantly evolving space where new vulnerabilities are discovered and old ones are patched up. However, the cat-and-mouse game between attackers and defenders often leads to gaps in security, which can be ruthlessly exploited. A recent example of this is the discovery of a critical heap-based buffer overflow vulnerability in Fortinet FortiOS and FortiProxy SSL-VPN devices, dubbed CVE-2023-27997. This post aims to delve into the details of this

The vulnerability CVE-2023-27350 enables remote actors to sidestep authentication and execute remote code on several versions of PaperCut installations, including: Version 8.0.0 up to 19.2.7 Version 20.0.0 up to 20.1.6 Version 21.0.0 up to 21.2.10 Version 22.0.0 up to 22.0.8 The susceptibility arises from inadequate access controls in the SetupCompleted Java class in PaperCut servers affected by CVE-2023-27350. This flaw enables malicious entities to circumvent user authentic

In today's digital age, businesses of all sizes face an ever-growing number of cybersecurity threats. Protecting sensitive information and ensuring data privacy has become a top priority for organizations worldwide. One of the most effective ways to achieve this is by implementing Multi-Factor Authentication (MFA). In this blog post, we'll discuss the importance of MFA for businesses, outline its benefits, and provide a step-by-step guide to getting started. The Importance of

In today's fast-paced digital world, businesses face numerous cybersecurity threats. One of the most prevalent and financially damaging is Business Email Compromise (BEC). BEC attacks target large corporations and small businesses, resulting in massive financial losses. Inception Security offers comprehensive BEC Assessments that help protect your organization from these cyber threats. In this blog, we'll explore why every business needs BEC Assessments from Inception Securit