2022-12-07 15:16
Vulnerability Intelligence is a critical element of vulnerability management. It enables teams to gain a greater understanding of the risk posed by a vulnerability based on real-world contex… Read More
Blog Directory > Technology Blogs > Rootshell Security technology Blog >
Rootshell Security Blog
rootshellsecurity.net/blog
Tags:
vulnerability
prism
published november background
vulnerability management
tenant
code execution
testing
conference
published november
engagements
Continuous, next generation penetration testing with actionable results.
2022-12-02 10:34
Last week, a number of Prism Platform’s developers went to SymfonyCon at the one and only Disneyland Paris!
SymfonyCon is the first conference the engineering team have attended since… Read More
2022-12-01 11:27
Prism Platform continuously scans a user’s estate for any issues that are being actively exploited by threat actors in the wild. If any of these vulnerabilities are detected, users are… Read More
2022-11-30 13:52
Voice-Scamming Site “iSpoof” Seized, 100s Arrested in Massive Crackdown
(published: November 25, 2022)
Background:
iSpoof was a threat group offering spoofing for caller phone nu… Read More
2022-11-25 13:55
DEV-0569 Finds New Ways to Deliver Royal Ransomware, Various Payloads
(published: November 17, 2022)
Background:
From August to October, 2022, Microsoft researchers detected new campaigns by… Read More
2022-11-24 16:28
Prism Platform (version 2.7) is live, including a range of new features that transform how testing providers and clients are able to collaborate.
Track the Progress of Engagements with Ease… Read More
2022-11-24 11:46
Application Features
Platform Improvements
Qualys Scan and Report Importing – Prism now supports both scan and asset based report imports from Qualys. This is to enable Qualys scan age… Read More
2022-11-16 16:36
Testing providers typically juggle separate systems for creating documents for clients, scheduling engagements, and tracking the progress of both administrative and testing processes.
Not on… Read More
2022-11-14 10:41
The vulnerability management process consists of the actions required for an IT security team to remediate security vulnerabilities within their organization’s network.
An effective vu… Read More
2022-11-10 17:40
It’s impossible for teams to resolve every issue within their estates, and many may never need fixing. That’s why vulnerability management prioritization is such an important par… Read More
2022-11-09 09:34
Welcome to our summary of this month’s Patch Tuesday (November 2022). We have tabulated the vulnerabilities that the latest patches from Microsoft, so that you can easily export them f… Read More
2022-11-08 13:45
Threat Analysis: Active C2 Discovery Using Protocol Emulation Part3 (ShadowPad)
(published: October 27, 2022)
Background:
ShadowPad is a custom, modular malware in use by multiple China-spon… Read More
2022-11-07 17:00
In our three part series on what makes an effective vulnerability management program, we have explored how to set up successful processes, as well as how to build highly performing teams.
In… Read More
2022-11-02 15:50
Author: Liam Hackett (Head of Development)
AI is the buzzword of the decade.
The most downloaded app on IOS and Android uses an AI algorithm to cater people’s content. Nvidia, a leader… Read More
2022-10-31 13:36
As is the case for any high performing team, the talent and experience of your personnel is paramount to delivering successful outcomes. Although there’s no one-size-fits-all solution… Read More
2022-10-27 08:34
Ransom Cartel Ransomware: A Possible Connection With REvil
(published: October 14, 2022)
Background:
Palo Alto Networks researchers analyzed Ransom Cartel, a double extortion ransomware-as-a… Read More
2022-10-24 15:53
In its simplest form, a vulnerability management program will consist of running scans, distributing results, and remediating issues.
Although this is far better than nothing, a vulnerabilit… Read More
2022-10-17 09:55
VMware Report Exposes Emotet Malware’s Supply Chain
Background:
VMware researchers analyzed the Emotet malware-as-a-service evolution and its command-and-control (C2) infrastructure. I… Read More
2022-10-13 11:29
Today marks the release of Prism Platform (version 2.6), one of our most feature-packed updates yet, including Global Search, Remediator Dashboard, Asset Grouping, Single Sign On (SSO), and… Read More
2022-10-13 10:56
Application Features
New Features
Single Sign-On (SSO) – Prism now supports Okta and Azure AD single sign-on capabilities. This has been included to assist those clients that wish to c… Read More
2022-10-13 09:59
Prism Platform continuously scans a user’s estate for any issues that are being actively exploited by threat actors in the wild. If any of these vulnerabilities are detected, users are… Read More
2022-10-12 15:49
Vulnerability management as-a-service provides teams with the expertise of a dedicated, managed scanning service. Some vendors will also provide a vulnerability management solution, to suppo… Read More
2022-10-12 08:23
Welcome to our summary of this month’s Patch Tuesday (October 2022). We have tabulated the vulnerabilities that the latest patches from Microsoft and Adobe fix, so that you can easily… Read More
2022-10-11 08:16
Prism Platform now integrates with single sign-on (SSO) solutions Okta and Azure AD to make access management seamless.
Once the integration is set up, teams can make changes to their users… Read More
2022-10-06 14:55
A vulnerability management dashboard is a useful way of organizing vulnerability data to make it as insightful and actionable as possible.
In this article, we have made suggestions for how y… Read More
2022-10-06 10:47
New Royal Ransomware Emerges in Multi-Million Dollar Attacks
Background:
AdvIntel and BleepingComputer researchers describe the Royal ransomware group. Several experienced ransomware actors… Read More
2022-10-04 08:11
Prism’s new Asset Grouping feature enables users to manage their asset inventories with ease, and gives teams more control of how they divide up and report on their estates.
Users can… Read More
2022-09-27 08:09
Do you have a clear understanding of your remediation progress on a regular basis?
Where many tools simply display results from vulnerability scans, Prism Platform’s new Remediator Das… Read More
2022-09-21 12:50
Hacker Pwns Uber Via Compromised VPN Account
(published: September 16, 2022)
Background:
On September 15, 2022, ride-sharing giant Uber started an incident response after discovering a data… Read More
2022-09-20 11:35
Launching on Thursday, 13th October, Prism Platform (version 2.6) will be one of our most feature-packed updates yet.
Over the coming weeks, we will highlight some of the most exciting new f… Read More
2022-09-14 11:56
Vulnerability management is a vast and continuous process that needs to be closely tracked to ensure remediation is timely and successful. Because of this, a vulnerability remediation tracke… Read More
2022-09-14 09:46
Microsoft Investigates Iranian Attacks Against the Albanian Government
(published: September 8, 2022)
Background:
Microsoft researchers discovered that groups working under Iran’s Mini… Read More
2022-09-12 11:51
Author: Liam Romanis (Principal Security Consultant)
In previous reports for customers whose Microsoft 365 (M365) configurations have allowed Gifs and Memes, it has been recommended that the… Read More
2022-09-06 14:46
Security assessments can inundate teams with data. Translating your data into insightful vulnerability management metrics can make it more useful and actionable. In this article, we have sug… Read More
2022-08-30 15:57
LastPass Hackers Stole Source Code
(published: August 26, 2022)
Background:
In August 2022, an unidentified threat actor gained access to portions of the password management giant LastPass d… Read More
2022-08-22 11:40
Author: Liam Romanis (Principal Security Consultant)
When assessing Azure and Microsoft 365 configurations it is common to identify many vectors which enable users, and therefore threat acto… Read More
2022-08-12 13:57
Without vulnerability management reporting, vulnerability data becomes noise. Vulnerability management reports help teams gain clarity on the status of their vulnerability management program… Read More
2022-08-10 09:10
Welcome to our summary of this month’s Patch Tuesday (August 2022). We have tabulated the vulnerabilities that the latest patches from Microsoft and Adobe fix, so that you can easily e… Read More
2022-08-05 16:39
Vulnerability assessments identify security issues within a digital infrastructure, which is essential for helping organizations defend against attacks. Read on for how vulnerability assessm… Read More
2022-07-28 09:57
Today marks the release of Prism Platform v2.5, featuring the platform’s new, powerful Active Exploit Detection, as well as greater coverage for exploit alerts and enhanced collaborati… Read More
2022-07-28 09:26
Application Features
New Features
Exploit Detection Service – New Resource Added – We have now included a further resource to enhance this feature. The Cybersecurity and Infrastr… Read More
2022-07-21 10:36
Digium Phones Under Attack: Insight Into the Web Shell Implant
(published: July 15, 2022)
Background:
Palo Alto Unit42 researchers have uncovered a large-scale campaign targeting Elast… Read More
2022-07-18 12:11
2012 saw a spate of vulnerabilities in the Remote Desktop protocol implementation in Microsoft Windows.
One of these issues was MS12-020; a ‘double free’ issue in releasing memor… Read More
2022-07-14 14:28
Most security-conscious businesses would say they carry out vulnerability management, but what that means can differ dramatically from one organization to another. A Vulnerability Management… Read More
2022-07-01 09:10
For many organizations, cloud environments are a central and critical part of their digital estates. It’s essential that cloud environments are regularly assessed for security issues… Read More
2022-06-29 12:51
Lockbit Ransomware Disguised as Copyright Claim E-mail Being Distributed
(published: June 24, 2022)
Background:
ASEC researchers have released their analysis of a recent phishing campaign, a… Read More
2022-06-23 10:39
Application Features
New Features
Asset View – The assets default view now displays the individual affected instances of issues contained within Prism. This is the most granular view o… Read More
2022-06-16 10:10
Once upon a time, vendors would be grateful for bug hunters reporting flaws in their software so they could fix them.
With their more detailed understanding of the software in question (i.e… Read More
2022-06-14 16:39
It’s impossible to address every cyber security risk within an organization’s threat landscape – there could be hundreds. That’s why Risk Based Vulnerability Man… Read More
2022-06-08 10:52
Credit Card Stealer Targets PsiGate Payment Gateway Software
(published: May 25, 2022)
Background:
Sucuri Researchers have detailed their findings on a MageCart skimmer that had been discove… Read More
2022-06-07 12:21
Vulnerability management is essential to every modern cyber security strategy. However, it’s impossible to fix every issue discovered by vulnerability scans or penetration tests. A Vul… Read More
2022-05-27 12:32
Vulnerabilities Exploited in the Wild (CVE-2022-22954 and Others)
(published: May 20, 2022)
Background:
In April 2022, VMware publicly revealed several vulnerabilities affecting its produc… Read More
Subscribe to Rootshell Security
Get updates delivered right to your inbox!