Bedrohungswarnzentrum

30 Mar, 2023 KS THREAT RESEARCH

3CX Supply Chain Attack ‘SmoothOperator’

Written by Anton Jörgensson, Eric Dodge & Yann Lehmann of the Kudelski Security Threat Detec...

15 Mar, 2023 KS THREAT RESEARCH

CVE-2023-23397 – Microsoft Outlook Privilege Elevation Critical Vulnerability

Written by Lina Jiménez Becerra, Anton Jörgensson and Mark Stueck of the Kudelski Security Threat...

10 Mar, 2023 KS THREAT RESEARCH

CVE-2023-27532 – Veeam Backup & Replication Vulnerability Exposes Stored Credentials, No Auth Necessary

Written by Mark Stueck and Scott Emerson of the Kudelski Security Threat Detection & Re...

9 Feb, 2023 KS THREAT RESEARCH

Ransomware as a Service – Nevada Ransomware campaign targeting VMWare ESXi servers

Written by Michal Nowakowski of the Kudelski Security Threat Detection & Research Team UPDAT...

22 Dec, 2022 KS THREAT RESEARCH

Linux Kernel ksmbd Remote Code Execution Vulnerability

Note: This bulletin was written by Eric Dodge of the Kudelski Security Threat Detection & Re...

15 Dec, 2022 KS THREAT RESEARCH

Active exploitation of Citrix ADC and Gateway Critical Remote Code Execution Vulnerability by Suspected Chinese APT5 (CVE-2022-27518)

Written by Harish Segar of the Kudelski Security Threat Detection & Research Team Summary On...

15 Dec, 2022 KS THREAT RESEARCH

SPNEGO NEGOEX: Critical Pre-Authentication RCE Vulnerability in Modern Microsoft Windows Operating Systems (CVE-2022-37958)

Written by Mark Stueck of the Kudelski Security Threat Detection & Research Team Summary On ...

13 Dec, 2022 KS THREAT RESEARCH

Critical Severity Buffer Overflow 0-Day Vulnerability in Fortinet SSL-VPN Under Active Exploitation (CVE-2022- 42475)

This bulletin was authored by Mark Stueck of the Kudelski Security Threat Detection & Resear...

1 Nov, 2022 KS THREAT RESEARCH

OpenSSL 3 Buffer overflow vulnerabilities: CVE-2022-3786 and CVE-2022-3602

Note: This Bulletin was contributed to by Kudelski Security’s Threat Detection & Resea...

11 Aug, 2022 KS THREAT RESEARCH

Critical VMware Authentication Bypass and RCE Vulnerabilities: CVE-2022-31656 and CVE-2022-31659

Proof-of-Concept (PoC) exploit recently released by security researchers. VMware recommends patch...

15 Jun, 2022 KS THREAT RESEARCH

“SynLapse” – Azure Synapse Pipeline and Data Factory Vulnerability (CVE-2022-29972)

This bulletin was written by Eric Dodge of the Kudelski Security Threat Detection & Research...

31 May, 2022 KS THREAT RESEARCH

“Follina” (CVE-2022-30190): Microsoft Support Diagnostic Tool 0-Day Vulnerability Being Actively Exploited

This bulletin was written by Michal Nowakowski of the Kudelski Security Threat Detection & R...

20 May, 2022 KS THREAT RESEARCH

High Severity VMware Vulnerabilities Under Active Exploitation

This bulletin was written by Travis Holland and Eric Dodge of the Kudelski Security Threat Detect...

16 May, 2022 KS THREAT RESEARCH

Active Directory Domain Services Elevation of Privilege Vulnerability

This bulletin was written by Michal Nowakowski of the Kudelski Security Threat Detection & R...

6 May, 2022 KS THREAT RESEARCH

BIG-IP iControl REST API Authentication Bypass

This bulletin was written by Yann Lehmann of the Kudelski Security Threat Detection & Resear...

3CX Supply Chain Attack ‘SmoothOperator’

CVE-2023-23397 – Microsoft Outlook Privilege Elevation Critical Vulnerability

CVE-2023-27532 – Veeam Backup & Replication Vulnerability Exposes Stored Credentials, No Auth Necessary

Ransomware as a Service – Nevada Ransomware campaign targeting VMWare ESXi servers

Linux Kernel ksmbd Remote Code Execution Vulnerability

Active exploitation of Citrix ADC and Gateway Critical Remote Code Execution Vulnerability by Suspected Chinese APT5 (CVE-2022-27518)

SPNEGO NEGOEX: Critical Pre-Authentication RCE Vulnerability in Modern Microsoft Windows Operating Systems (CVE-2022-37958)

Critical Severity Buffer Overflow 0-Day Vulnerability in Fortinet SSL-VPN Under Active Exploitation (CVE-2022- 42475)

OpenSSL 3 Buffer overflow vulnerabilities: CVE-2022-3786 and CVE-2022-3602

Critical VMware Authentication Bypass and RCE Vulnerabilities: CVE-2022-31656 and CVE-2022-31659

“SynLapse” – Azure Synapse Pipeline and Data Factory Vulnerability (CVE-2022-29972)￼

“Follina” (CVE-2022-30190): Microsoft Support Diagnostic Tool 0-Day Vulnerability Being Actively Exploited

High Severity VMware Vulnerabilities Under Active Exploitation￼

Active Directory Domain Services Elevation of Privilege Vulnerability

BIG-IP iControl REST API Authentication Bypass

Anmelden für die neuesten Updates!

Kontaktieren Sie uns

“SynLapse” – Azure Synapse Pipeline and Data Factory Vulnerability (CVE-2022-29972)

High Severity VMware Vulnerabilities Under Active Exploitation