November, 2018 - Rewterz

November 9, 2018

Rewterz Threat Advisory – CVE-2018-15443 – Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability

Cisco’s TCP intrusion prevention system can be bypassed due to a vulnerability in firepower detection engine. IMPACT: MEDIUM PUBLISH DATE: 09-11-2018 […]

November 8, 2018

Rewterz Threat Advisory – Virtual Box zero-day vulnerability exposed

An attacker could escape the virtual environment of the guest machine and reach the Ring 3 privilege layer, used for running code from most user programs. […]

November 7, 2018

Rewterz Threat Advisory – CVE-2018-16986 & CVE-2018-7080 – New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points

Two flaws in the Bluetooth Low Energy chips used in major Wi-Fi Access Points could give attackers control of the wireless network. IMPACT: CRITICAL […]

November 6, 2018

Rewterz Threat Advisory – Microsoft Edge Web Browser zero-day exploit about to unleash

Two researchers have successfully developed a zero-day exploit for bypassing Microsoft Edge browser’s sandboxing. IMPACT: NORMAL PUBLISH DATE: 06-11-2018 OVERVIEW Two […]

November 5, 2018

Rewterz Threat Advisory – Intel CPUs hyper-threading PortSmash Vulnerability

Intel CPUs are vulnerable to a timing attack that may steal information decryption keys from other processes running in the same CPU core with SMT/hyper-threading enabled. […]

November 5, 2018

Rewterz Threat Advisory – Red Hat update for glibc

Red Hat has released updates for glibc multiple vulnerabilities that cause privilege escalation and unauthorized system access. IMPACT: CRITICAL PUBLISH DATE: 05-11-2018 […]

November 5, 2018

Rewterz Threat Advisory – Red Hat update for libreoffice

Red Hat has issued an update for libreoffice. It fixes multiple vulnerabilities that can be used to gain access to and compromise a vulnerable system. […]

November 2, 2018

REWTERZ THREAT ADVISORY – CVE-2018-15454 – Cisco zero-day exploited to crash devices and cause Denial of Service

This is an advisory on a recent zero-day vulnerability of Cisco, that’s being exploited in the wild to crash devices. IMPACT: NORMAL PUBLISH […]

Platform

Managed Security Services

Managed Penetration Testing

Assess

Transform

Train

Respond

Resources

Cybercriminals Distribute GuptiMiner Malware by Hijacking Antivirus Update Systems – Active IOCs

Lazarus aka Hidden Cobra APT Group – Active IOCs

STOP aka DJVU Ransomware – Active IOCs

Threat Insights

About Us

Our Leadership

CSR

Connect with Us

Platform

Managed Security Services

Managed Penetration Testing

Assess

Transform

Train

Respond

Resources

Cybercriminals Distribute GuptiMiner Malware by Hijacking Antivirus Update Systems – Active IOCs

Lazarus aka Hidden Cobra APT Group – Active IOCs

STOP aka DJVU Ransomware – Active IOCs

Threat Insights

About Us

Our Leadership

CSR

Connect with Us

Rewterz Threat Advisory – CVE-2018-15443 – Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability

Rewterz Threat Advisory – Virtual Box zero-day vulnerability exposed

Rewterz Threat Advisory – CVE-2018-16986 & CVE-2018-7080 – New Bluetooth Vulnerabilities Exposed in Aruba, Cisco, Meraki Access Points

Rewterz Threat Advisory – Microsoft Edge Web Browser zero-day exploit about to unleash

Rewterz Threat Advisory – Intel CPUs hyper-threading PortSmash Vulnerability

Rewterz Threat Advisory – Red Hat update for glibc

Rewterz Threat Advisory – Red Hat update for libreoffice

REWTERZ THREAT ADVISORY – CVE-2018-15454 – Cisco zero-day exploited to crash devices and cause Denial of Service