¡Desconecta con la aplicación Player FM !
Podcasts que vale la pena escuchar
PATROCINADO
Update 1 to CISA Alert AA22-174A – Malicious cyber actors continue to exploit Log4Shell in VMware Horizon systems.
Manage episode 354338038 series 3444271
CISA and the US Coast Guard Cyber Command are releasing this joint Cybersecurity Advisory to warn network defenders that cyber threat actors, including state-sponsored APT actors, have continued to exploit CVE-2021-44228 (Log4Shell) in VMware Horizon and Unified Access Gateway servers to obtain initial access to organizations that did not apply available patches or workarounds.
AA22-174A Alert, Technical Details, and Mitigations
(Update July 18, 2022) Malware Analysis Report 10382580-2 stix
Malware Analysis Report 10382254-1 stix
Malware Analysis Report 10382580-1 stix
CISA’s Apache Log4j Vulnerability Guidance webpage
Joint CSA Mitigating Log4Shell and Other Log4j-Related Vulnerabilities
CISA’s database of known vulnerable services on the CISA GitHub page
See National Security Agency (NSA) and Australian Signals Directorate (ASD) guidance Block and Defend Web Shell Malware for additional guidance on hardening internet-facing systems.
All organizations should report incidents and anomalous activity to CISA’s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI’s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.
Learn more about your ad choices. Visit megaphone.fm/adchoices
52 episodios
Manage episode 354338038 series 3444271
CISA and the US Coast Guard Cyber Command are releasing this joint Cybersecurity Advisory to warn network defenders that cyber threat actors, including state-sponsored APT actors, have continued to exploit CVE-2021-44228 (Log4Shell) in VMware Horizon and Unified Access Gateway servers to obtain initial access to organizations that did not apply available patches or workarounds.
AA22-174A Alert, Technical Details, and Mitigations
(Update July 18, 2022) Malware Analysis Report 10382580-2 stix
Malware Analysis Report 10382254-1 stix
Malware Analysis Report 10382580-1 stix
CISA’s Apache Log4j Vulnerability Guidance webpage
Joint CSA Mitigating Log4Shell and Other Log4j-Related Vulnerabilities
CISA’s database of known vulnerable services on the CISA GitHub page
See National Security Agency (NSA) and Australian Signals Directorate (ASD) guidance Block and Defend Web Shell Malware for additional guidance on hardening internet-facing systems.
All organizations should report incidents and anomalous activity to CISA’s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI’s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.
Learn more about your ad choices. Visit megaphone.fm/adchoices
52 episodios
כל הפרקים
×

1 CISA Alert AA23-158A – #StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability. 2:41

1 CISA Alert AA23-144A – People's Republic of China state-sponsored cyber actor living off the land to evade detection. 2:43



1 CISA Alert AA23-108A – APT28 exploits known vulnerability to carry out reconnaissance and deploy malware on Cisco routers. 2:45

1 CISA Alert AA23-074A – Threat actors exploit progress telerik vulnerability in U.S. government IIS server. 2:48

1 CISA Alert AA23-059A – CISA red team shares key findings to improve monitoring and hardening of networks. 2:46

1 CISA Alert AA23-040A – #StopRansomware: ransomware attacks on critical infrastructure fund DPRK malicious cyber activities. 3:01


1 CISA Alert AA23-025A – Protecting against malicious use of remote monitoring and management software 2:41
Bienvenido a Player FM!
Player FM está escaneando la web en busca de podcasts de alta calidad para que los disfrutes en este momento. Es la mejor aplicación de podcast y funciona en Android, iPhone y la web. Regístrate para sincronizar suscripciones a través de dispositivos.