PetitPotam, ProxyShell and the Autodiscover vulnerabilities on the Microsoft Exchange servers have created a need for an automated emergency risk mitigation tools for on-premise Microsoft Exchange servers. The Cloud based Microsoft Exchange is already end-to-end managed by the Microsoft cloud …
Google has released a new security update Version 94.0.4606.61 on 24th September, 2021. This update specifically seeks to remediate a critical vulnerability that allowed a remote attacker to hack the Chrome browser and cause a remote code execution vulnerability on …
Apple’s watch 7 carries watchOS 8.0, and brings in new features through the introduction of the latest version of the watchOS operating system. Besides this, the major upgrade from Apple watch 6 to Apple watch 7 has happened in the …
I have seen sports enthusiasts move from Apple watches to the Garmin’s Fenix watches. The Apple Vs Fenix watch comparison is a very interesting piece, as we seek to find a common ground between two watches that bring altogether different …
It is unclear if the Microsoft Exchange’s Autodiscover could be called a vulnerability as of now or whether this must be treated as a gap in the best practices for implementation of Microsoft Exchange’s autodiscover feature. In any case, Amit …
VMware released a new security advisory on 21st September, 2021. The security advisory seeks to provide solution for the CVE-2021-22005, a critical vulnerability on the vCenter server 7.0, vCenter server 6.7 and vCenter Cloud foundation server version 4.x. The vulnerability …
The following have been the major reported security incidents, malware, ransomware on the prowl on 22nd September 2021. Cobalt Strike Cobalt strike servers have been found to be active since the last week. More than 1000 instances of the Cloud …
There have been a series of ransomware attacks on US based corporations, healthcare organizations and even the essential service providers. The ransomware activity has picked up pace in the last few months. In the past week, we have seen BlackMatter …
US based domain registrar EPIK has encountered a security incident with potential theft of credit card data of the domain name registrants. The company sent out mass emails to the customers on Sunday. In the email, EPIK has shared details …
Zoho’s Manage Engine is in continuous news these days. It has run into another critical vulnerability that allows the attacker to remotely execute malicious code on the target. The vulnerability on Manage Engine affects the ADSelfService Plus. The vulnerability is …