What Exactly Happened with the Exim Vulnerability?

In September 2019, a vulnerability has been discovered in EXIM, an open-source mail transfer agent,
which is a program responsible for receiving, routing and delivering email messages.

According to EXIM developers. The vulnerability has a highly critical CVE score of 9.8 affecting versions 4.92.1 and prior, which can:

Allow for authenticated remote attackers to execute arbitrary system commands when initiating TLS connections to affected mail as well through similar means,
They can then install programs.
View, delete, change or create new accounts with full user rights,

Putting CISOs under immense pressure as they're responsible for the entire company cyber security.

Vicarius TOPIA is an ultimate platform for IT Security teams to which:

Predict the vulnerability even before it becomes common knowledge giving CISOs a huge advantage of staying ahead of the curve, it's the world's first platform that's capable of proactively analyzing third-party binary files and alert on potential vulnerabilities and threats in real time.
Prioritize the most updated security vulnerabilities to the IT Security team at the organization.
Take action on what really matters.

With the use of Vicarius's TOPIA CISOs can easily stop attackers to perform malicious activities through the mail server.

CISAnalysis - June 20, 2022

It’s Monday and time to take a gander at CISA’s Known Exploited Vulnerabilities Catalog.

By Kent Weigle

In: #exploitation

Can Old Vulnerabilities Learn New Tricks?

The public’s favorite government agency, CISA (not the CIA) has recently added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, the living, breathing, exponentially growing list of vulnerabilities that have seen active exploitation in the wild.

By Evan Kling

In: #patching

Nmap Advanced Uses Pt.3: Firewall Evasion

Intro

Today, firewalls are an essential part of almost every IT infrastructure and are being deployed in a myriad of shapes and forms. They usually focus on layers 3 and 4 of the OSI Model (occasionally layer 2). Next-generation Firewalls (NGFW) can also cover layers 5, 6, and 7. With more layers covered, we gain more control, but also spend more computing power.

By Nikola Kundacina

In: #vulnerability