CVE

CVE-2024-53677 – Exploitation Attempts of Critical Apache Struts RCE Vulnerability

Alexander Ervik Johnsen Apache Struts, CVE, CVE-2024-53677, Cyber Security, Palo Alto, PAN-OS, RCE 2024-12-19

On December 15, 2024, reports emerged that threat actors have begun attempting to exploit a recently disclosed critical vulnerability in Apache Struts (CVE-2024-53677) shortly after the publication of a Proof-of-Concept (PoC) exploit. Apache Struts is a widely used open-source web application framework for developing Java-based applications. CVE-2024-53677 is a file upload path traversal vulnerability in Struts that […]

Arctic Wolf/ Cyber Security/ Palo Alto Networks/ SOC

Arctic Wolf Observes Threat Campaign Targeting Palo Alto Networks Firewall Devices

Alexander Ervik Johnsen Arctic Wolf, Arctic Wolf Labs, cobalt strike, CVE, exploit, Firewall, Palo Alto Networks, PAN-OS, RCE vulnerability, Sliver C2, Vulnerability 2024-11-28

Arctic Wolf Observes Ongoing Exploitation of Critical Palo Alto Networks Vulnerability CVE-2024-0012 Chained with CVE-2024-9474 On November 19, 2024, Arctic Wolf began observing active exploitation of the recently-disclosed CVE-2024-0012 and CVE-2024-9474 vulnerabilities impacting Palo Alto Networks PAN-OS software. When chained together, these vulnerabilities allow an unauthenticated threat actor with network access to the management web interface to gain administrator […]

Veeam Software

Critical Vulnerabilities Patched in Veeam Products

Alexander Ervik Johnsen CVE, patch, Veeam, Vulnerabilities 2024-09-07

On September 4, 2024, Veeam released a security bulletin announcing that they have fixed several vulnerabilities affecting various Veeam products. Arctic Wolf has highlighted five of these vulnerabilities, which are classified as critical. Vulnerability CVSS Affected Product Description CVE-2024-40711 9.8 Veeam Backup and Replication Enables an unauthenticated attacker to achieve remote code execution (RCE). CVE-2024-42024 […]

Citrix/ NetScaler

DoS and RCE Vulnerabilities Exploited in Citrix NetScaler ADC and NetScaler Gateway multiple CVE´s

Alexander Ervik Johnsen Citrix, Citrix Bleed, CVE, NetScaler, NetScaler ADC, NetScaler Gateway 2024-02-01

On January 16, 2024, Citrix published a security bulletin disclosing two zero-day vulnerabilities (CVE-2023-6548 & CVE-2023-6549) being actively exploited in Citrix NetScaler ADC and NetScaler Gateway. CVE-2023-6548 CVSS 5.5 – Medium Actively Exploited? Code injection vulnerability on the Management Interface can result in authenticated Remote Code Execution (RCE) for low-privileged threat actors.· Pre-requisite: Access to NSIP, CLIP […]

Cyber Security/ Microsoft

Microsoft January 2024 Security update

Alexander Ervik Johnsen Arctic Wolf, CVE, Cyber Security, Microsoft, patch, security update, Update 2024-01-12

CVE-2024-20674, CVE-2024-0057 and CVE-2024-20677 Microsoft published their January 2024 security update with patches for 48 vulnerabilities. Among these vulnerabilities, Arctic Wolf has highlighted 3 in this blog that were categorized as either critical or high severity. There is no available evidence to suggest that these vulnerabilities have been actively exploited in the wild. Impacted Product: Windows Impacted […]

Networking & Security/ Nutanix/ Nutanix AHV/ Nutanix Flow

Microsegmentation is a breeze with Nutanix Flow

Alexander Ervik Johnsen CVE, cybersecurity, Maleware, Microsegmentation, Nutanix, Nutanix AHV, Nutanix Flow, Ransomware, Security, WORM 2021-04-16

Nutanix Flow enables customer to do Microsegmentation in minutes, rather than weeks, months or years :). You might think that introducing Microsegmentation into your existing Infrastructure would be hard, time consuming and requires very skilled professional services. That is not the case! In true Nutanix spirit, no new infrastructure is needed to setup and start […]