Vulnerabilities / Threats

8/12/2014
02:30 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Pwnie Express Announces Pwn Pulse SaaS Security Assessment Solution

Solution Enterprise-class Offering Combines Pwnie Express Sensors with Central Management for Remote Location Intelligence

Boston, MA, August 5, 2014

Pwnie Express, the only company to assess wired and wireless network security in remote locations on demand, today announced the Pwn Pulse software as a service (SaaS) solution.  The enterprise-class offering uses Pwnie Express’s easy-to-deploy sensors to provide highly scalable continuous intelligence.

An end-to-end security assessment solution designed specifically for hard-to-reach distributed remote sites, Pwn Pulse delivers real-time wired and wireless asset discovery, continuous vulnerability scanning, pentesting, risk trending and alerting.

Known for its drop-box penetration testing solutions, the new SaaS solution completes the entire enterprise security assessment lifecycle. The solution delivers a robust centralized management console that:

  • Allows for out-of-the-box deployment of sensors
  • Aggregates and correlates sensor data
  • Provides trending and analysis of data with the ability to drill down to sensor asset level
  • Pwn Pulse also easily and seamlessly integrates with existing security information and event management (SIEM) products.

Product benefits:

  • Provides a cost-effective lightweight, non-intrusive and easy-to-deploy solution for remote locations
  • Delivers the most comprehensive asset discovery to remote sites
  • Extends vulnerability management to remote sites
  • Enables subsequent on-demand penetration testing to remote sites
  • Allows for easy anywhere multi-site deployment
  • Increases frequency and scope of remote site assessment
  • Expands awareness of wired, wireless, BYOD and rogue devices across all sites
  • Addresses PCI DSS and HIPAA compliance requirements at remote sites
  • Reduces travel and operational overhead required to do security testing

“Businesses have fortified their headquarters and are now finding that they are increasingly at risk at their remote and branch offices as they remain vulnerable to attack, “ said Dave Porcello, CTO and founder of Pwnie Express “Remote locations have often been overlooked as the ideal attack entry point and the attackers know and use this. Attackers have also relied on and benefited from the difficulty organizations have experienced when trying to conduct security assessments and penetration test these remote wired and wireless environments which leaves them open to attack.

“Pwn Pulse is a game changer. It leverages the data generated by our proven sensors to provide a total end-to-end security assessment solution that integrates all of the intelligence for remote locations.”

Pwn Pulse provides consolidated asset discovery, vulnerability scanning, and pentesting in a single unified solution to deliver actionable risk information showing organizations where they are most vulnerable. This allows organizations to focus on high probability threats and threat vectors. With Pwn Pulse’s integrated intelligence, delivering continuous in-depth analysis to accurately identify attack paths, organizations can now extend their security from the headquarters across their entire organization.

“Working with large and mid-sized organizations, some of the largest challenges we see is the ability to understand what risks remote locations truly have. We continue to see a number of breaches occur at bank beaches, remote hospital locations, retail store locations, and other areas that are not directly at the “corporate” environment.,” said Dave Kennedy,  Founder and Principal Security Consultant TrustedSec LLC.

“It’s challenging to get visibility into these different areas and something we simulate as attackers on a regular basis. Our easiest entry points are usually in these remote locations. It’s really great to see Pwnie Express come out with Pwn Pulse, which helps gain valuable data and information into the remote locations around what risks and exposures you may have to really start to fix a lot of the issues we see regularly.  The more information an organization has, the better off they are in understanding what they can to do defend against the attacks we are seeing today.”

Pwnie Express’s network security assessment sensors are rapidly deployable and have been providing more than X (number) enterprises access to, and intelligence in hard to reach locations. At Pwnie Express’s core are open source tools available in a variety of form factors.

Availability

Pwn Pulse is currently in Beta testing. General availability will be in Q4. If you are interested in being part of the Beta please contact Pwnie Express at [email protected]

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Julian Assange Arrested in London
Dark Reading Staff 4/11/2019
Tips for the Aftermath of a Cyberattack
Kelly Sheridan, Staff Editor, Dark Reading,  4/17/2019
The Single Cybersecurity Question Every CISO Should Ask
Arif Kareem, CEO, ExtraHop,  4/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-11320
PUBLISHED: 2019-04-18
In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address.
CVE-2019-11321
PUBLISHED: 2019-04-18
An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
CVE-2019-11322
PUBLISHED: 2019-04-18
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
CVE-2019-8999
PUBLISHED: 2019-04-18
An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account.
CVE-2018-17168
PUBLISHED: 2019-04-18
PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery (CSRF) vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer (Disable, Approve, etc).