Blog | Holm Security | Cyberattacks & exploits (2)

January 23, 2024 — Cyberattacks & exploits Exploited vulnerabilities in Ivanti: Connect Secure and Policy Secure pose serious threats On January 10, Ivanti released a security advisory for two zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure, which pose significant risks to organizations. Threat actors are actively exploiting these vulnerabilities, known as...

October 18, 2023 — Cyberattacks & exploits Cisco zero-day vulnerability: Exploiting thousands of devices

Understanding CVE-2023-20198 The vulnerability, rooted in the web UI feature, affects...

June 2, 2023 — Cyberattacks & exploits MOVEit Transfer zero-day vulnerability exploited in data theft attacks

MOVEit Transfer is a popular file transfer program developed by Ipswitch, a subsidiary of...

May 29, 2023 — Cyberattacks & exploits Barracuda email security gateway appliance zero-day vulnerability

Security flaw in email security gateway The California-based company investigation has...

Filter posts

March 17, 2023 — Cyberattacks & exploits Microsoft Outlook zero-day vulnerability CVE-2023-23397 exploited

Outlook vulnerability allows zero-click attackers to compromise user authentication An attacker who successfully exploited this vulnerability could access a...

December 16, 2022 — Cyberattacks & exploits Critical vulnerability in FortiOS

Overview FortiOS SSL-VPN doesn't validate HTTP requests properly, leading to an overflow of heap buffer using specially crafted requests.

October 31, 2022 — Cyberattacks & exploits OpenSSL update to fix critical vulnerability

OpenSSL has categorized the issue as critical, a designation it uses to indicate a vulnerability that “affects common configurations” and is likely...

April 1, 2022 — Cyberattacks & exploits Spring4Shell: zero-day vulnerability in Spring Framework

General information Two RCEs exist and three vectors are being discussed online (one of which is not known to be remotely exploitable):

December 14, 2021 — Cyberattacks & exploits How to remediate the Log4j 2 vulnerability

This vulnerability can allow an attacker to gain complete control over entire systems if exploited on a server. Any system that could be exploited should be...

October 3, 2019 — Cyberattacks & exploits Are you protected against malware attacks?

At Holm Security, we provide solutions for vulnerability assessment. In meetings with our customers, we sometimes discuss previous incidents that could've...