Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

In Brief: Using Offense To Create Best Defense

50%
50%

SPONSORED: Mike Viscuso, CTO of Carbon Black, and Ben Johnson, Chief Security Strategist of Carbon Black talk to Brian Gilloly at the RSA Conference about how their background in offensive security helps them think like attackers, and better defend against them. For the full interview, see here.

Comment  | 
Print  | 
Comments
Oldest First  |  Newest First  |  Threaded View
Page 1 / 3   >   >>
MarkA558
50%
50%
MarkA558,
User Rank: Apprentice
3/25/2016 | 3:37:48 PM
Merger with Bit9
Bit9 was hacked to pieces in February of 2013, and merged with Carbon Black not very long after.

Was this merger also the result of your extensive offensive experience?

 
joerootreddy
50%
50%
joerootreddy,
User Rank: Apprentice
3/28/2016 | 5:34:12 AM
Re: Merger with Bit9
nice post buddy
Mathewpual
50%
50%
Mathewpual,
User Rank: Apprentice
3/31/2016 | 9:30:50 AM
Re: Merger with Bit9
nice post
sarrinodu
50%
50%
sarrinodu,
User Rank: Apprentice
4/18/2016 | 11:02:16 AM
Re: Merger with Bit9
gret post 
sarrinodu
50%
50%
sarrinodu,
User Rank: Apprentice
4/18/2016 | 11:03:00 AM
Re: Merger with Bit9
nice post buddy thank for sharing
swarajsoni
50%
50%
swarajsoni,
User Rank: Apprentice
4/23/2016 | 7:50:10 AM
Re: Merger with Bit9
nice post
Kyrgios
50%
50%
Kyrgios,
User Rank: Apprentice
6/10/2016 | 2:23:52 AM
Re: Merger with Bit9
GOOD ONE
Juliealbeartmak
50%
50%
Juliealbeartmak,
User Rank: Apprentice
6/21/2016 | 6:22:18 AM
Re: Merger with Bit9
nice post good
Cillyaussemak
50%
50%
Cillyaussemak,
User Rank: Apprentice
6/22/2016 | 4:25:45 AM
Re: Merger with Bit9
great one post
Tracyaustinmak
50%
50%
Tracyaustinmak,
User Rank: Apprentice
6/23/2016 | 4:16:50 AM
Re: Pending Review
gerat one
Page 1 / 3   >   >>
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-22953
PUBLISHED: 2021-09-23
A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security Research Team"
CVE-2021-22016
PUBLISHED: 2021-09-23
The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link.
CVE-2021-22017
PUBLISHED: 2021-09-23
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
CVE-2021-22018
PUBLISHED: 2021-09-23
The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files.
CVE-2021-22019
PUBLISHED: 2021-09-23
The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a specially crafted jsonrpc message to create a denial of service condition.