Week in review: IE zero-day, S3 bucket security, rise of RDP as a target vector
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-16759 | Pre-Authentication Remote Code Execution in vBulletin 5.x | 9.8 | 100% | KEVPoC ×9 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | cloudflare.net | gitimate sites and Content Delivery Networks (CDNs) such as CloudFlare.net, CloudFront.net (which belongs to Amazon), SharePoint and A |
| domain | my.mixtape.moe | onaws.com, along with legitimate file-sharing websites like my[.]mixtape[.]moe, according to WatchGuard. vBulletin zero-day exploited |
From the original article
6 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles and podcasts: Automated systems are invaluable when it comes to performing asset discovery, evaluation and vulnerability remediation, sifting through mountains of data, detecting anomalous activity and, consequently, alleviating the everyday burdens of security teams.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.