Category: Analytics

  • Cisco Finds Two New IOS XE Software Web UI Zero-Day Vulnerabilities

    Cisco IOS XE Software, a critical component of many Cisco network devices, has recently been found to have vulnerabilities in its Web UI feature. These vulnerabilities, if exploited, can provide attackers with significant access and control over affected devices. The vulnerabilities are particularly concerning for systems where the web UI feature is activated in the…

  • Netizen: Technical Analysis and Advisory on CVE-2023-4966

    The highly exploitable CVE-2023-4966 vulnerability in Citrix NetScaler at first glance proves incredibly dangerous to NetScaler environments. While initial analyses have highlighted the potential risk and exploitation scenarios, a deeper technical examination is essential to fully comprehend its intricacies and the subsequent steps for mitigation. Affected Products and Versions: Affected Product Affected Version Fixed Version…

  • Emerging Technologies: A Cybersecurity Deep Dive into Web 3.0

    Web 3.0, often referred to as the Semantic or Decentralized Web, has emerged over the past few years as a both an ideological and technological shift from the current state of the internet, referred to as Web 2.0. The new technology is defined by decentralized databases and distributed ledgers across nodes, reducing the risks in…

  • Critical Vulnerability in Hikvision Surveillance Cameras Points to Greater Issue Within the IoT

    Security researchers from Cyfirma recently discovered that over 80,000 Hikvision surveillance cameras are still susceptible to a critical vulnerability that was patched in a security update over 2 years ago. CVE-2021-36260, which was added to the National Vulnerability Database in January of 2022, allows attackers to exploit Hikvision cameras due to their lack of input…

  • Overview: Phish Tale of the Week Phishing attempts can often target specific groups that can be exploited by malicious actors and come in many different forms. In this instance, we see a phishing scam targeting PayPal users with what appears to be a link that’s supposed to “reactivate your account.” PayPal says that our account…

  • That Time Of Year Again: Cisco Systems Releases Its Annual Cybersecurity Report

    Last week, Cisco Systems released the 2018 edition of its Annual Cybersecurity Report (ACR) you can find here. The report, compiled from a survey of 3,600 chief security officers (CSOs) and security operations leaders from across the globe, seeks to highlight emerging threats in the rapidly evolving landscape of cybersecurity. With 53% of all attacks…