All CySec articles about Zero-day: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
A newly disclosed exploit chain gives attackers root on on-premises N-central servers; attacks began hours after the proof of concept. No complete fix yet — immediate checks.
Read articleAn exploited Outlook flaw leaks NTLM password hashes from a crafted file. Microsoft fixed over 1,000 vulnerabilities this month — here is what to prioritise.
Read articleGoogle fixed a use-after-free in Chrome that is already exploited. The fix only works after the browser restarts — here is how to make sure every PC is protected.
Read articleA flaw in how OpenSSH handles locked accounts on musl-based systems was exploited within two days of the fix. Who is affected and what to check.
Read articleShell, Mark-of-the-Web and NTLM flaws were exploited before or soon after patches this year. A short overview and the protections that help against the whole class.
Read articleA critical authentication bypass in FortiOS, FortiManager, FortiAnalyzer and other Fortinet products was exploited in the wild. Fixed versions and checks.
Read articleTwo chained flaws in Cisco firewall VPN services were exploited before patches existed, prompting an emergency directive. What owners of Cisco ASA should check.
Read articleA zero-day in on-premises SharePoint let attackers run code and steal server keys. Why patching had to be followed by rotating machine keys.
Read articleCommand injection in the VPN feature of PAN-OS allowed attackers to run commands as root on the firewall itself. What to learn about edge devices.
Read articleTwo chained flaws gave attackers full control of Ivanti VPN gateways. Why a factory reset was recommended even after patching.
Read articleA memory leak in NetScaler let attackers copy logged-in sessions. Why patching alone was not enough and what to do after a VPN gateway flaw.
Read articleA SQL injection in a managed file transfer product let a ransomware group steal data from hundreds of organizations. What it teaches about file exchange systems.
Read articleAttackers abused the Microsoft Support Diagnostic Tool through Office documents. No macros, sometimes not even opening the file was needed.
Read articleOne line of text in a log could give attackers full control of a server. Why Log4Shell still matters and how to make sure you are protected.
Read articleA chain of Exchange Server flaws let attackers take over mail servers without a password. Lessons for anyone still running Exchange on-premises.
Read articleA file manager plugin with about 700,000 installations allowed unauthenticated file upload and code execution. A classic lesson about risky plugins.
Read articleA cryptographic flaw in the Netlogon protocol let an attacker on the network become domain administrator. Why domain controllers must be patched first.
Read articleA path traversal in Citrix ADC let attackers run code without logging in. Patches took a month — mitigation steps were the only defence in the meantime.
Read articleTell us about your infrastructure and goals. We'll get back to you within one business day with next steps.
