2022 Authentication Systems Review 
Tenable
JANUARY 14, 2025
Fortinet patched a zero day authentication bypass vulnerability in FortiOS and FortiProxy that has been actively exploited in the wild as a zero-day since November 2024. CVE Description CVSSv3 CVE-2024-55591 FortiOS and FortiProxy Authentication Bypass Vulnerability 9.6 websocket module. through 7.0.16 Upgrade to 7.0.17 through 7.0.19
CIO
OCTOBER 16, 2023
Earlier this year, I wrote about the importance of organizations reviewing their password management strategies. According to a Reuters report, these ransomware bandits also breached the systems of several other companies operating in manufacturing, retail, and technology. Déjà vu can suck sometimes.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
OCTOBER 22, 2024
CVE-2010-2568: Windows Shell Remote Code Execution Vulnerability Remote Code Execution Exploited Zero-Day Local Stuxnet High 2010 Why it’s significant: Regarded as one of the most sophisticated cyberespionage tools ever created, Stuxnet was designed to target SCADA systems in industrial environments to reportedly sabotage Iran's nuclear program.
CIO
AUGUST 29, 2024
When you add multi-factor authentication (MFA) resets to the picture, that number is likely even higher. Most authentication methods are actually quite easy to get around, and in many cases were never intended to be security factors. In 2022, Microsoft reported more than 382,000 MFA fatigue attacks.
TechCrunch
OCTOBER 24, 2022
Creating systems that are resilient against ransomware isn’t top of mind for early-stage startups, but many companies don’t even follow basic best practices, much to their detriment. “Enable multifactor authentication (MFA) on everything you have,” said Katie Moussouris, founder of Luta Security.
Tenable
APRIL 12, 2022
Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521). Microsoft addresses 117 CVEs in its April 2022 Patch Tuesday release, including two zero-day vulnerabilities, one of which was exploited in the wild and reported to Microsoft by the National Security Agency. Windows Common Log File System Driver.
Ivanti
MARCH 8, 2022
For example, the Windows OS update has a pair of publicly disclosed vulnerabilities including an RDP Remote Code Execution vulnerability ( CVE-2022-21990 ) and a Windows Fax and Scan Service Elevation of Privilege vulnerability ( CVE-2022-24459 ) which have reached proof-of-concept exploit code maturity.
Expert insights. Personalized for you.
118 
Let's personalize your content