Threat Advisories
A CVE drops and the first question is which clients run the affected software. Each EnterProtect advisory names the threat, why it matters, the exposure and what to do, so you can check your clients before they ask.
New Microsoft Word Vulnerability CVE-2023-36761
Enterprotect's latest threat advisory highlights the recent Microsoft Word vulnerability, CVE-2023-36761. Learn about the threat, its significance, potential…
Critical Zero-Day Vulnerability in Libwebp Image Library
A comprehensive advisory on the recent zero-day vulnerability (CVE-2023-5129) in the libwebp image library, detailing its threat, significance, risks, and…
Earth Lusca's SprySOCKS Linux Backdoor Targets Governments
Dive into the details of the SprySOCKS Linux backdoor, a new threat from the Earth Lusca group targeting government entities.
Updated Bumblebee Malware Loader With Enhanced Evasion Capabilities
Enterprotect's latest threat advisory highlights the updated Bumblebee malware loader, detailing its enhanced evasion techniques and providing recommendations…
BlackCat Ransomware Targets Microsoft Azure Storage
Enterprotect's latest threat advisory highlights the BlackCat ransomware's targeting of Microsoft Azure storage. Learn about the threat, its significance…
Critical Zero-Day Vulnerability in Adobe Acrobat and Reader
Enterprotect's advisory on the recent critical zero-day vulnerability detected in Adobe Acrobat and Reader, detailing the threat, its significance, exposure…
Command Injection Flaw in Zyxel NAS Devices
Protect your organization from critical vulnerabilities in Zyxel NAS devices with Enterprotect's actionable recommendations for enhanced network security.
Critical Vulnerability Discovered in FortiNAC
Protect your network from the critical FortiNAC vulnerability (CVE-2023-33299) with actionable recommendations. Safeguard against unauthorized access and code…
“File Archiver in the Browser” Exploits - Protect Yourself From Deceptive ZIP Domains
Protect yourself from the emerging "File Archiver in the Browser" phishing trick that exploits ZIP domains. Learn about the risks, significance, and…
Fortinet SSL VPN RCE Vulnerability - Patches Released
Discover the critical Fortinet SSL VPN RCE vulnerability, its potential risks, and how to safeguard your network. Learn about the recommended patches and…
Global Cybersecurity Advisory Breakdown: The Threat of Volt Typhoon
Discover key insights from a multi-national cybersecurity advisory on the threat posed by Volt Typhoon. This article summarizes the advisory, highlighting the…
AWS Exploited for Crypto Mining Operation
Protect your organization from the exploitation of Amazon Web Services (AWS) for illicit crypto mining activities. Learn about the GUI-vil threat group and…
Critical Zero-Day Vulnerability in MOVEit Transfer Exploited in the Wild
Protect your organization from a critical zero-day vulnerability in MOVEit Transfer. Discover the risks, exposure, and recommended mitigation steps provided…
3 New Apple Zero-Day Vulnerabilities in WebKit Exploited
Stay informed about the latest Apple zero-day vulnerabilities and learn how to protect your devices. This advisory provides a comprehensive analysis of three…
Cisco Small Business Switches Remote Attack Vulnerabilities
Protect your organization from remote attack vulnerabilities in Cisco Small Business Switches. Learn about the latest threat advisory, its risks, and…
Critical PaperCut MF and NG Vulnerability Actively Exploited
Stay one step ahead of cyber threats with our in-depth threat advisory on the critical PaperCut vulnerability (CVE-2023-27350).
Escalating CACTUS Ransomware Group Targets SMBs With Advanced Techniques
Discover the escalating threat of the CACTUS ransomware group targeting SMBs with advanced techniques. Stay informed about their new variant, evasive tactics…
Qakbot Leveraging Compromised Websites for Initial Infiltration
Learn about the rise of Qakbot as an initial access threat, its techniques, and the risks it poses. Find out how Enterprotect recommends protecting your…
EvilExtractor Malware Spikes in Europe and the US
Stay informed and protect your organization from the rapidly spreading EvilExtractor malware, a stealthy threat targeting sensitive data.
Supply Chain Attack Compromises 3CXDesktopApp
Protect your business from the 3CXDesktopApp malware. Our threat advisory provides technical details, exposure risks, and recommendations to help mitigate the…
Critical Elevation of Privilege Vulnerability Discovered in Microsoft Outlook
Microsoft Outlook users are at risk from a critical elevation of privilege vulnerability, allowing threat actors to potentially steal credentials and gain…
Critical Unauthorized Remote Execution Code Vulnerability Found in Fortinet FortiOS and FortiProxy
Take immediate action to protect your systems from the critical unauthorized remote execution code vulnerability found in Fortinet's FortiOS and FortiProxy…
Malicious Packages Found in Python Package Index (PyPI)
This threat advisory by Enterprotect highlights the discovery of malicious packages on the Python Package Index that can steal sensitive data from developers.
MortalKombat Ransomware Campaign Targets US Systems
This threat advisory outlines the risks and exposure of the MortalKombat ransomware campaign, which is targeting systems in the United States.
Google Advertisements Promote Antivirus-Evading 'Virtualized' Malware
Google advertisements promoting antivirus-evading 'virtualized' malware. Discover the exposure and risk and get expert recommendations on how to protect…
The Return of Medusa Botnet as a Mirai-Based Variant With Ransomware Sting
Learn about the newly discovered Medusa botnet variant featuring a ransomware module and Telnet brute-forcer. Discover its attack capabilities and the…
Critical Remote Code Execution Vulnerability in Atlassian's Jira Service Management Server and Data Center
Learn about the critical remote code execution vulnerability in Atlassian's Jira Service Management Server and Data Center.
ESXiArgs Ransomware Attacks Targeting Vulnerable VMware ESXi Servers
Stay protected from ESXiArgs ransomware attacks with our latest threat advisory. Learn about the vulnerability and follow our recommended measures to upgrade…
Critical Vulnerability in QNAP Devices Allowing Remote Attackers to Inject Malicious Code
Stay protected against the recently discovered critical vulnerability in QNAP devices with our Threat Advisory. Read about the SQL injection flaw, the…
Unpatched VMware vRealize Log Insight Appliances at Risk of Unauthorized Remote Code Execution
Cybersecurity firm Enterprotect warns VMware vRealize Log Insight users of a newly discovered exploit targeting a vulnerability chain that allows remote code…
Thousands of Norton LifeLock Customers Compromised in Credential Stuffing Attack
Stay informed and protect yourself with our latest threat advisory. Learn about the recent Norton LifeLock data breach caused by a credential stuffing attack…
Vulnerability in Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Exposed to Remote Command Execution
Enterprotect is issuing a threat advisory on a critical vulnerability in Cisco Small Business RV016, RV042, RV042G, and RV082 routers.
Critical Remote Code Execution Vulnerability in Sophos Firewall Devices
Enterprotect, a cybersecurity company, is issuing a threat advisory on a critical remote code execution (RCE) vulnerability found in the User Portal and…
Hackers Exploit Cacti Critical Bug to Install Malware and Open Reverse Shells
Enterprotect is issuing a threat advisory regarding a critical security issue in Cacti, a network device monitoring tool.
Malicious 'Lolip0p' PyPi Packages Install Info-Stealing Malware
Learn about the recent threat of malicious 'Lolip0p' PyPi packages that install info-stealing malware. Discover why it's noteworthy, the exposure or risk and…
Linux Kernel Vulnerability - A New Security Flaw Discovered in Linux 5.15 SMB3 Server
A new Linux Kernel Vulnerability has been disclosed by the Zero Day Initiative that could lead to code execution in the context of the kernel.
LastPass Security Incident Update
Stay informed on the latest LastPass security incident update. Learn about the unauthorized access to LastPass's cloud storage, the exposure and risk to…
Citrix ADC and Citrix Gateway Vulnerabilities Exploited in Targeted Attacks
Learn about the critical vulnerabilities in Citrix ADC and Gateway versions 12.1 and 13.0 before 13.0-58.32 and the recommended steps to mitigate the threat.
Fortinet Zero-Day Vulnerability Actively Exploited in Attacks
Enterprotect warns of an actively exploited zero-day vulnerability in Fortinet's FortiOS operating system. The vulnerability, which allows attackers to…
Malicious Open Broadcaster Software (OBS) Studio Being Delivered Through Paid Sponsored Links
Enterprotect is actively monitoring a new iteration of malware distribution through the use of sponsored links. Learn about the malicious version of Open…
The Week's Breaches in One Email
The breaches and advisories that touched MSPs and their clients, and the one thing worth checking, free every week.
Confirm from the email we send, and the next issue is yours. One click to leave.