#vulnerability vulnerabilitymanagement vulnerabilityscanning

[tacsec]

Cyber-attack on U.S. Marshals Service: Data Stolen

The U.S. Marshals Service, the country’s oldest law enforcement agency, recently disclosed that it became the victim of a cyber assault last week, resulting in cybercriminals’ pilfering of confidential information.  

As per the declaration of a representative from the U.S. Marshals, the grave occurrence impacted a “standalone” computer system, housing data about targets of active investigations, personal information of employees, and internal workflows.  

As per the spokesperson’s statement, the system did not comprise confidential information of individuals registered under the Federal Witness Protection Program, whose safety may be put at risk if disclosed publicly. The U.S. Marshals contend that the system is isolated from the more extensive network and expeditiously terminated upon detecting the intrusion before handing it over to the Department of Justice.  

The Latest Ransomware Attack: How It Happened and Who’s at Risk  

On February 17, the Service became aware of an ongoing ransomware attack, during which the perpetrators were actively extracting sensitive files. NBC News initially reported this breach.  

The Department is engaged in continuous remedial measures and criminal forensic inquiries,” stated a spokesperson from the U.S. Marshals Service via email. We are working quickly and effectively to reduce any risks that could result from this occurrence.  

Additional information regarding whether the assailants issued threats to make public the exfiltrated data in the event of non-payment of a ransom or how the agency is procuring access to its records after the breach through a workaround was not disclosed by the U.S. Marshals Service.  

In the scenario where the hackers infiltrated the system and encoded the files as if it were a ransomware attack but refrained from demanding payment. Therefore, the possibility is that the primary objective behind the data theft was not financial gain.  

For Foreign espionage, government agencies and the FBI are easy targets. Federal law enforcement agency explicitly advises against paying ransoms. It is improbable that a shrewd ransomware criminal syndicate would anticipate receiving payment from the U.S. Marshals. Nevertheless, some criminal organizations aim to victimize targets randomly based on security vulnerabilities or convenience.  

The absence of a ransom demand could suggest a concealed motive. In the past, nation-state adversaries such as Russia and Iran have orchestrated harmful cyber offensives camouflaged as ransomware attacks to mask their endeavors of pilfering intelligence or creating chaos.  

Recently, big Tech like Microsoft has monitored who, according to them, resemble ransomware attacks in Poland and Ukraine to gather intelligence and purpose to desolate.  

While the U.S. Marshals endeavor to re-establishing the Service, the Justice Department is probing the origin of the security violation. As they strive to maintain the momentum of ongoing casework, they are utilizing a temporary approach to gain access to sensitive files, including data about subjects of investigations. Nevertheless, whether the Marshals successfully recuperated the files or are using copies from a backup server or another computing system remains to be determined.  

However, it remains unclear whether the attackers are still deliberating on whether to release the stolen files ultimately.  

Secure data, and block ransomware threats with ESOF VMDR  

ESOF, a next-gen Vulnerability Management platform, which implements ESOF VMDR to protect from malicious cyberattacks, prioritizes, automatically, immediately, and continuously monitors all vulnerabilities as soon as the user installs them on their system. ESOF VMDR is crucial in protecting systems from data breaches that recently affected the U.S. Marshals Service and may have been caused by attackers taking advantage of holes in their IT stack.  

ESOF VMDR can do the following:  

It can identify which assets are weak using its threat intelligence feature.  

The cyber risk score improves the organization’s communications. As a result, it lowers cyber risk and gives business owners an impression of their company’s security.  

Turn down significant vulnerabilities as soon as possible with automatic prioritization and cleanup.  

Secure the whole IT stack of your company, including all the real-time files.  

Schedule scanning lets you detect zero-day vulnerabilities for several platforms, including web, mobile, SCR, and infrastructure.  

ESOF VMDR assists in locating the system’s covert vulnerabilities and separating those deemed high risk.

Download ESOF VMDR Datasheet for more information!

https://tacsecurity.com/cyber-attack-on-u-s-marshals-service-data-stolen/

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/GkGh7llQ4z via appknox #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… https://t.co/vBwpDxmWB7

3 Common Misconceptions About Vulnerability Scanning https://t.co/GkGh7llQ4z via appknox#Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… pic.twitter.com/vBwpDxmWB7

— Akhil Menon (@akhilmenonz1) July 21, 2018

via Twitter https://twitter.com/akhilmenonz1 July 22, 2018 at 02:06AM

[tacsec]

New Vulnerability Found in FortiOS and FortiProxy

Fortinet has released updates to address 15 security flaws, one of which is a critical vulnerability that affects FortiOS and FortiProxy, allowing a threat actor to gain control of impacted systems. The vulnerability, named CVE-2023-25610, has been assigned a severity rating of 9.3 out of 10 and was discovered and reported by Fortinet’s security teams.  

Fortinet’s advisory stated that the vulnerability is a buffer underwrite issue in the administrative interface of FortiOS and FortiProxy, which could enable an unauthenticated, remote attacker to execute arbitrary code on the device and perform a DoS on the GUI by using specifically crafted requests.

When the reserved space is larger than the input data, it leads to underflow bugs or buffer underruns, resulting in unpredictable behavior or the inadvertent disclosure of sensitive data from memory.

Additional potential outcomes involve memory corruption that could be exploited to cause a crash or perform unauthorized code execution.

According to Fortinet, no reported instances of the vulnerability being maliciously exploited exist. However, considering the history of previous software vulnerabilities being used in the wild, users must act swiftly in installing the patches.

The following versions of FortiOS and FortiProxy are impacted by the vulnerability –

FortiOS version 7.2.0 through 7.2.3

FortiOS version 7.0.0 through 7.0.9

FortiOS version 6.4.0 through 6.4.11

FortiOS version 6.2.0 through 6.2.12

FortiOS 6.0 all versions

FortiProxy version 7.2.0 through 7.2.2

FortiProxy version 7.0.0 through 7.0.8

FortiProxy version 2.0.0 through 2.0.11

FortiProxy 1.2 all versions

FortiProxy 1.1 all versions

Several versions of FortiOS and FortiProxy have available fixes, including FortiOS versions 6.2.13, 6.4.12, 7.0.10, 7.2.4, and 7.4.0; FortiOS-6K7K versions 6.2.13, 6.4.12, and 7.0.10; and FortiProxy versions 2.0.12, 7.0.9, and 7.0.9.

Fortinet is suggesting two workarounds for users, which are either disabling the HTTP/HTTPS administrative interface or restricting the IP addresses that are allowed to access it.

The network security company released fixes for 40 vulnerabilities a few weeks ago, two of which are classified as Critical and affect FortiNAC (CVE-2022-39952) and FortiWeb (CVE-2021-42756) Products. The disclosure of these vulnerabilities has now been made.

ESOF VMDR enables the detection of vulnerabilities

ESOF is a cutting-edge technology for vulnerability management that finds and fixes vulnerabilities (CVE-2023-25610) throughout the whole IT stack. ESOF VMDR is used as protection against malicious online attacks. It automatically prioritizes, checks for vulnerabilities immediately, and continuously scans for them after the user installs them on their system.

ESOF VMDR improves an enterprise’s security posture by identifying vulnerable assets, calculating a cyber risk score, and offering auto-prioritization and auto-remediation. In addition to this, it does a scheduled scan of your entire system across the web, mobile, SCR, and infrastructure. It separates the vulnerabilities that pose a severe threat to our system.

Our new ESOF Prediction function predicts the number of vulnerabilities in the following month. You may read more about it in our ESOF Prediction solution brief.  

The foundation of TAC’s ESOF prediction model is that risk stems not from vulnerabilities but from attackers who take advantage of them. Network vulnerabilities are so prevalent that businesses require assistance to stay current. Your system is protected against assaults by these vulnerabilities if you can predict which ones will exist in the coming month.

Download ESOF VMDR Datasheet to know more about it.

Request a Demo Now!

https://tacsecurity.com/new-vulnerability-found-in-fortios-and-fortiproxy/

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/kSJYliYqhC via appknox #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… https://t.co/86Bp2tjJrM

3 Common Misconceptions About Vulnerability Scanning https://t.co/kSJYliYqhC via appknox#Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… pic.twitter.com/86Bp2tjJrM

— Akhil Menon (@akhilmenonz1) July 16, 2018

via Twitter https://twitter.com/akhilmenonz1 July 16, 2018 at 03:01PM

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/KVx6CtKsTo via appknox #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… https://t.co/hnA4uovuQ1

3 Common Misconceptions About Vulnerability Scanning https://t.co/KVx6CtKsTo via appknox#Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… pic.twitter.com/hnA4uovuQ1

— Akhil Menon (@akhilmenonz1) July 9, 2018

via Twitter https://twitter.com/akhilmenonz1 July 10, 2018 at 02:35AM

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/lLsJkDcKjL via appknox #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… https://t.co/xO1Y4tqUZX

3 Common Misconceptions About Vulnerability Scanning https://t.co/lLsJkDcKjL via appknox#Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #C… pic.twitter.com/xO1Y4tqUZX

— Akhil Menon (@akhilmenonz1) July 1, 2018

via Twitter https://twitter.com/akhilmenonz1 July 01, 2018 at 06:01PM

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/OKdMwxhEUZ #ThursdayThoughts #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Inf… https://t.co/hHtH6uim35

3 Common Misconceptions About Vulnerability Scanning https://t.co/OKdMwxhEUZ #ThursdayThoughts #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Inf… pic.twitter.com/hHtH6uim35

— Akhil Menon (@akhilmenonz1) June 7, 2018

via Twitter https://twitter.com/akhilmenonz1 June 07, 2018 at 01:04PM

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/OjFUfOunmb #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #CyberAware https://t.co/OPqFXI8nIu

3 Common Misconceptions About Vulnerability Scanning https://t.co/OjFUfOunmb#Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #CyberAware pic.twitter.com/OPqFXI8nIu

— Akhil Menon (@akhilmenonz1) June 2, 2018

via Twitter https://twitter.com/akhilmenonz1 June 02, 2018 at 06:00PM

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/o9BSDFBK61 #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #CyberAware https://t.co/rYgEOvdo93

3 Common Misconceptions About Vulnerability Scanning https://t.co/o9BSDFBK61#Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAppknox #Infosec #CyberAware pic.twitter.com/rYgEOvdo93

— Akhil Menon (@akhilmenonz1) May 25, 2018

via Twitter https://twitter.com/akhilmenonz1 May 26, 2018 at 12:19AM

[akhilmenonz1]

3 Common Misconceptions About Vulnerability Scanning https://t.co/lBQosNnHiS via appknox #WednesdayWisdom #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAp… https://t.co/noJJ6g3Vj6

3 Common Misconceptions About Vulnerability Scanning https://t.co/lBQosNnHiS via appknox#WednesdayWisdom #Cybersecurity #Vulnerability #Pentest #VulnerabilityManagement #VulnerabilityScanning #MobileSecurity #MobileApps #MobileAppSecurity #SecuredByAp… pic.twitter.com/noJJ6g3Vj6

— Akhil Menon (@akhilmenonz1) May 10, 2018

via Twitter https://twitter.com/akhilmenonz1 May 10, 2018 at 11:34PM