Authentication SMB Software Review 
Tenable
NOVEMBER 12, 2024
Successful exploitation would lead to the unauthorized disclosure of a user’s NTLMv2 hash, which an attacker could then use to authenticate to the system as the user. Microsoft’s advisory also includes several mitigation steps for securing certificate templates which we highly recommend reviewing. It was assigned a CVSSv3 score of 7.5
Tenable
OCTOBER 22, 2024
CVE-2010-2568: Windows Shell Remote Code Execution Vulnerability Remote Code Execution Exploited Zero-Day Local Stuxnet High 2010 Why it’s significant: Regarded as one of the most sophisticated cyberespionage tools ever created, Stuxnet was designed to target SCADA systems in industrial environments to reportedly sabotage Iran's nuclear program.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
JUNE 9, 2020
CVE-2020-1226 and CVE-2020-1225 | Microsoft Excel Remote Code Execution Vulnerability. CVE-2020-1226 and CVE-2020-1225 are remote code execution (RCE) vulnerabilities in Microsoft Excel. Exploitation of these vulnerabilities could result in arbitrary code execution with the same permissions as the current user.
Kaseya
OCTOBER 1, 2019
Did you know that 81 percent of data breaches are due to weak or stolen passwords? Phishing, social engineering and unsecured networks have made password based authentication insecure for some time. In today’s age where security breaches have become an everyday occurrence, password-only authentication is not sufficient.
Tenable
NOVEMBER 30, 2023
Start doing authenticated scanning. Performing authenticated scans of your environment offers essential benefits and is a practice widely recognized as valuable. The scan configurations we observe in Tenable’s SaaS products are telling: our customers run unauthenticated scans 20 times more than authenticated ones.
Tenable
DECEMBER 9, 2022
Cyber Safety Review Board published a 50-plus page report on the Log4j event, and a key takeaway was that Log4Shell is an “endemic vulnerability” that’ll be around for a decade — or perhaps longer. . Multi-Factor Authentication Request Generation ” (MITRE). 4 - Cybersecurity looms large in SMB software purchases.
Tenable
OCTOBER 29, 2021
We’ll explore how attackers: achieve initial access, elevate privileges, compromise Active Directory and perform remote code execution. A recent government alert warns that the BlackMatter ransomware group typically targets remote desktop software and leverages previously compromised credentials. Assorted bag: Initial access.
Expert insights. Personalized for you.
117 
Let's personalize your content