Vulnerability News - February 16, 2024

Snapshot

Feb. 10, 2024 - Feb. 16, 2024

CISA Known Exploited Vulnerabilities
CVE	Summary	Severity	Vendor	Date Added
CVE-2024-21410	Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.	CRITICAL	Microsoft	Feb. 15, 2024
CVE-2020-3259	Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.	HIGH	Cisco	Feb. 15, 2024
CVE-2024-21412	Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.	HIGH	Microsoft	Feb. 13, 2024
CVE-2024-21351	Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.	HIGH	Microsoft	Feb. 13, 2024
CVE-2023-43770	Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.	MEDIUM	Roundcube	Feb. 12, 2024
Newswires
SolarWinds Patches Critical RCE Vulnerabilities in Access Rights Manager SolarWinds, a major provider of IT management software, has released patches for five remote code execution (RCE) vulnerabilities found in its Access Rights Manager (ARM) tool.				Feb. 16, 2024
CISA Issues Alert on Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the Akira ransomware group exploiting a previously patched security flaw in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software.				Feb. 16, 2024
Critical Web Application Vulnerabilities Threatening Credit Unions Uncovered by LMG Security LMG Security, a leading cybersecurity consulting company, has identified three critical software vulnerabilities posing a substantial threat to hundreds of U.S. organizations.				Feb. 15, 2024
Critical Security Flaws Leave Over 13,000 Ivanti Gateways at Risk Several Ivanti Connect Secure and Policy Secure endpoints are still susceptible to a host of security vulnerabilities that were initially revealed over a month ago.				Feb. 15, 2024
CISA Adds Two Microsoft Windows Bugs to Its Known Exploited Vulnerabilities Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two Microsoft Windows vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.				Feb. 15, 2024
Microsoft Warns of Critical Exchange Server Bug Exploited as Zero-Day Microsoft has updated its security advisory to warn about a critical vulnerability in Exchange Server, identified as CVE-2024-21410.				Feb. 14, 2024
Critical Privilege Elevation Flaw in Zoom's Windows App Patched Zoom, a cloud-based video conferencing service used for corporate meetings, educational sessions, and social gatherings, has patched a critical flaw in its Windows applications.				Feb. 14, 2024
Critical RCE Vulnerability in Microsoft Outlook: Easy to Exploit, Hard to Defend A critical security flaw in Microsoft Outlook, which can be exploited by remote unauthenticated attackers, has been discovered.				Feb. 14, 2024
Windows Defender Zero-Day Exploited to Deliver DarkMe RAT: Microsoft Issues Patch Microsoft has addressed a zero-day vulnerability in its Windows Defender SmartScreen that was being exploited by a threat group, referred to as Water Hydra and DarkCasino, to distribute the DarkMe remote access trojan (RAT).				Feb. 13, 2024
Microsoft's February 2024 Patch Tuesday Addresses 73 Flaws and Two Zero-Days The February 2024 Patch Tuesday from Microsoft addresses a total of 73 vulnerabilities, including two zero-days that are currently being exploited.				Feb. 13, 2024
Bumblebee Malware Resurfaces after Four Months, Targets US Organizations The Bumblebee malware, first identified in April 2022, is back after a four-month pause.				Feb. 13, 2024
CISA Adds Roundcube Webmail XSS Vulnerability to its Known Exploited Vulnerabilities Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included a persistent Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail, tracked as CVE-2023-43770, in its Known Exploited Vulnerabilities catalog.				Feb. 12, 2024
Ivanti SSRF Flaw Exploited by Hackers to Deploy New DSLog Backdoor Hackers have taken advantage of a server-side request forgery (SSRF) vulnerability in Ivanti's Connect Secure, Policy Secure, and ZTA gateways to deploy a newly identified backdoor, DSLog, on susceptible devices.				Feb. 12, 2024
C3RB3R Ransomware Exploits Confluence Vulnerability Arctic Wolf Labs has discovered that the C3RB3R ransomware is being deployed by threat actors exploiting a critical template injection vulnerability (CVE-2023-22527) in Atlassian's Confluence Server and Data Center.				Feb. 12, 2024
Raspberry Robin Worm Incorporates Two New 1-Day LPE Exploits Raspberry Robin, a Windows worm, was discovered by Red Canary's cybersecurity researchers.				Feb. 11, 2024
Vulnerabilities In The News
CVE	Summary	Severity	Vendor	Risk Context
CVE-2024-21410 (17)	Microsoft Exchange Server Elevation of Privilege Vulnerability	CRITICAL	Microsoft	CISA Known Exploited Actively Exploited
CVE-2024-21413 (14)	Microsoft Outlook Remote Code Execution Vulnerability	CRITICAL		Actively Exploited Remote Code Execution Public Exploits Available
CVE-2024-21887 (6)	A command injection vulnerability in web components of Ivanti Connect Secure and Ivanti Policy Secure allows an authentica...	CRITICAL	Ivanti	CISA Known Exploited Remote Code Execution Public Exploits Available
CVE-2023-36025 (6)	Windows SmartScreen Security Feature Bypass Vulnerability	HIGH	Microsoft	CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available
CVE-2024-21893 (9)	A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure and Ivanti Policy Secure and Iva...	HIGH	Ivanti	CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available
CVE-2023-46805 (6)	An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote ...	HIGH	Ivanti	CISA Known Exploited Remote Code Execution Public Exploits Available
CVE-2024-21412 (19)	Internet Shortcut Files Security Feature Bypass Vulnerability	HIGH	Microsoft	CISA Known Exploited Remote Code Execution
CVE-2023-38831 (7)	RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.	HIGH	Rarlab	CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available
CVE-2024-21351 (17)	Windows SmartScreen Security Feature Bypass Vulnerability	HIGH	Microsoft	CISA Known Exploited
CVE-2023-43770 (6)	Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted li...	MEDIUM	Debian, Roundcube	CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

CISA Known Exploited Vulnerabilities

CISA added five vulnerabilities to the known exploited vulnerabilities list.

Microsoft — Exchange Server

CVE-2024-21410 / Added: Feb. 15, 2024

CRITICAL CVSS 9.80 EPSS Score 0.71 EPSS Percentile 79.90

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Headlines

Cisco — Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

CVE-2020-3259 / Added: Feb. 15, 2024

HIGH CVSS 7.50 EPSS Score 1.93 EPSS Percentile 88.24

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.

Headlines

Microsoft — Windows

CVE-2024-21412 / Added: Feb. 13, 2024

HIGH CVSS 8.10 EPSS Score 1.01 EPSS Percentile 83.23

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.

Headlines

Microsoft — Windows

CVE-2024-21351 / Added: Feb. 13, 2024

HIGH CVSS 7.60 EPSS Score 0.57 EPSS Percentile 77.15

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Headlines

Roundcube — Webmail

CVE-2023-43770 / Added: Feb. 12, 2024

MEDIUM CVSS 6.10 EPSS Score 11.47 EPSS Percentile 95.06

Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.

Headlines

In The News

Vulnerabilities receiving the most attention in traditional news media.

CVE-2024-21410

CRITICAL CVSS 9.80 EPSS Score 0.71 EPSS Percentile 79.90

CISA Known Exploited Actively Exploited

Published: Feb. 13, 2024

Microsoft Exchange Server Elevation of Privilege Vulnerability

Vendor Impacted: Microsoft

Product Impacted: Exchange Server

Quotes

Could lead to the attacker gaining the ability to interact with other tenant’s applications and content
We know that flaws that can disclose sensitive information like NTLM hashes are very valuable to attackers
The impact of this vulnerability is profound, compromising security and undermining trust in protective mechanisms like SmartScreen
The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim's behalf
This will happen when running the GUI version of Setup and when running the command line version of Setup without using either the /DoNotEnableEP or /DoNotEnableEPFEEWS setup switch to opt out
The vulnerability allows a malicious actor to inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
In the exploitation scenario, an attacker must send a specifically crafted file to a target user and persuade them to open it, since the attacker cannot compel the user to engage with the malicious content directly
ASP.NET SignalR is a library for ASP.NET developers that simplifies the process of adding real-time web functionality to applications. Real-time web functionality is the ability to have server code push content to connected clients instantly as it becomes available, rather than having the server wait for a client to request new data
An attacker could target an NTLM client such as Outlook with an NTLM credentials-leaking type vulnerability. The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim’s behalf. For more information about Exchange Server’s support for Extended Protection for Authentication(EPA), please see Configure Windows Extended Protection in Exchange Server
Water Hydra deployed a spearphishing campaign on forex trading forums and stock trading Telegram channels to lure potential traders into infecting themselves with DarkMe malware using various social engineering techniques, such as posting messages asking for or providing trading advice, sharing fake stock and financial tools revolving around graph technical analysis, graph indicator tools, all of which were accompanied by a URL pointing to a trojan horse stock chart served from a compromised Russian trading and cryptocurrency information site (fxbulls[.]ru)

Headlines

CVE-2024-21413

CRITICAL CVSS 9.80 EPSS Score 0.09 EPSS Percentile 37.34

Actively Exploited Remote Code Execution Public Exploits Available

Published: Feb. 13, 2024

Microsoft Outlook Remote Code Execution Vulnerability

Quotes

Could lead to the attacker gaining the ability to interact with other tenant’s applications and content
We know that flaws that can disclose sensitive information like NTLM hashes are very valuable to attackers
The impact of this vulnerability is profound, compromising security and undermining trust in protective mechanisms like SmartScreen
An attacker who successfully exploited this vulnerability could gain high privileges, which include read, write, and delete functionality
Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode
In the exploitation scenario, an attacker must send a specifically crafted file to a target user and persuade them to open it, since the attacker cannot compel the user to engage with the malicious content directly
An attacker could target an NTLM client such as Outlook with an NTLM credentials-leaking type vulnerability. The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim’s behalf
ASP.NET SignalR is a library for ASP.NET developers that simplifies the process of adding real-time web functionality to applications. Real-time web functionality is the ability to have server code push content to connected clients instantly as it becomes available, rather than having the server wait for a client to request new data
Water Hydra deployed a spearphishing campaign on forex trading forums and stock trading Telegram channels to lure potential traders into infecting themselves with DarkMe malware using various social engineering techniques, such as posting messages asking for or providing trading advice, sharing fake stock and financial tools revolving around graph technical analysis, graph indicator tools, all of which were accompanied by a URL pointing to a trojan horse stock chart served from a compromised Russian trading and cryptocurrency information site (fxbulls[.]ru)

Headlines

CVE-2024-21887

CRITICAL CVSS 9.10 EPSS Score 97.30 EPSS Percentile 99.85

CISA Known Exploited Remote Code Execution Public Exploits Available

Published: Jan. 12, 2024

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

Vendor Impacted: Ivanti

Products Impacted: Connect Secure And Policy Secure, Policy Secure, Connect Secure

Quotes

Previously unknown and interesting backdoor
I don't see how Ivanti survives as an enterprise firewall brand
We initially flagged the code in question during our internal review
Pulse Secure runs an 11-year-old version of Linux which hasn't been supported since November 2020
So far, we have only been seeing payloads similar to the original proof-of-concept (PoC) [exploit] published by watchTowr

Headlines

CVE-2023-36025

HIGH CVSS 8.80 EPSS Score 0.79 EPSS Percentile 80.94

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: Nov. 14, 2023

Windows SmartScreen Security Feature Bypass Vulnerability

Vendor Impacted: Microsoft

Products Impacted: Windows, Windows Server 2022, Windows Server 2008, Windows 11 23h2, Windows Server 2019, Windows Server 2012, Windows 11 22h2, Windows 10 1809, Windows 11 21h2, Windows 10 22h2, Windows 10 1607, Windows 10 21h2, Windows Server 2016, Windows 10 1507

Quotes

We know that flaws that can disclose sensitive information like NTLM hashes are very valuable to attackers
The impact of this vulnerability is profound, compromising security and undermining trust in protective mechanisms like SmartScreen
An unauthenticated attacker could send the targeted user a specially crafted file that is designed to bypass displayed security checks
The vulnerability allows a malicious actor to inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
Water Hydra deployed a spearphishing campaign on forex trading forums and stock trading Telegram channels to lure potential traders into infecting themselves with DarkMe malware using various social engineering techniques, such as posting messages asking for or providing trading advice, sharing fake stock and financial tools revolving around graph technical analysis, graph indicator tools, all of which were accompanied by a URL pointing to a trojan horse stock chart served from a compromised Russian trading and cryptocurrency information site (fxbulls[.]ru)

Headlines

CVE-2024-21893

HIGH CVSS 8.20 EPSS Score 96.25 EPSS Percentile 99.47

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: Jan. 31, 2024

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

Vendor Impacted: Ivanti

Products Impacted: Neurons For Zero-Trust Access, Connect Secure, Policy Secure, And Neurons, Policy Secure, Connect Secure

Quotes

Previously unknown and interesting backdoor
I don't see how Ivanti survives as an enterprise firewall brand
The backdoor is inserted into an existing Perl file called 'DSLog.pm
Pulse Secure runs an 11-year-old version of Linux which hasn't been supported since November 2020
So far, we have only been seeing payloads similar to the original proof-of-concept (PoC) [exploit] published by watchTowr
This appliance had the initial XML mitigation (API endpoints blocked) in place but not yet the second mitigation (or patch)

Headlines

CVE-2023-46805

HIGH CVSS 8.20 EPSS Score 96.27 EPSS Percentile 99.48

CISA Known Exploited Remote Code Execution Public Exploits Available

Published: Jan. 12, 2024

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

Vendor Impacted: Ivanti

Products Impacted: Connect Secure And Policy Secure, Policy Secure, Connect Secure

Quotes

Previously unknown and interesting backdoor
I don't see how Ivanti survives as an enterprise firewall brand
We initially flagged the code in question during our internal review
Pulse Secure runs an 11-year-old version of Linux which hasn't been supported since November 2020
So far, we have only been seeing payloads similar to the original proof-of-concept (PoC) [exploit] published by watchTowr

Headlines

CVE-2024-21412

HIGH CVSS 8.10 EPSS Score 1.01 EPSS Percentile 83.23

CISA Known Exploited Remote Code Execution

Published: Feb. 13, 2024

Internet Shortcut Files Security Feature Bypass Vulnerability

Vendor Impacted: Microsoft

Product Impacted: Windows

Quotes

An authorized attacker must send the user a malicious file and convince the user to open it
Could lead to the attacker gaining the ability to interact with other tenant’s applications and content
We know that flaws that can disclose sensitive information like NTLM hashes are very valuable to attackers
An attacker could target an NTLM client such as Outlook with an NTLM credentials-leaking type vulnerability
The impact of this vulnerability is profound, compromising security and undermining trust in protective mechanisms like SmartScreen
An unauthenticated attacker could send the targeted user a specially crafted file that is designed to bypass displayed security checks
In this attack chain, the threat actor leveraged CVE-2024-21412 to bypass Microsoft Defender SmartScreen and infect victims with the DarkMe malware
Inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim's behalf
The vulnerability allows a malicious actor to inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
When faced with uncertain intrusions, behaviors and routines, organizations should assume that their system is already compromised or breached and work to immediately isolate affected data or toolchains
In the exploitation scenario, an attacker must send a specifically crafted file to a target user and persuade them to open it, since the attacker cannot compel the user to engage with the malicious content directly
In late December 2023, we began tracking a campaign by the Water Hydra group that contained similar tools, tactics, and procedures (TTPs) that involved abusing internet shortcuts (.URL) and Web-based Distributed Authoring and Versioning (WebDAV) components
Water Hydra deployed a spearphishing campaign on forex trading forums and stock trading Telegram channels to lure potential traders into infecting themselves with DarkMe malware using various social engineering techniques, such as posting messages asking for or providing trading advice, sharing fake stock and financial tools revolving around graph technical analysis, graph indicator tools, all of which were accompanied by a URL pointing to a trojan horse stock chart served from a compromised Russian trading and cryptocurrency information site (fxbulls[.]ru)

Headlines

CVE-2023-38831

HIGH CVSS 7.80 EPSS Score 33.60 EPSS Percentile 96.92

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: Aug. 23, 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through October 2023.

Vendor Impacted: Rarlab

Product Impacted: Winrar

Quotes

Aligns with a surge of cybercriminal threat activity after a notable absence of many threat actors and malware
An unauthenticated attacker could send the targeted user a specially crafted file that is designed to bypass displayed security checks
Inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
The vulnerability allows a malicious actor to inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
When faced with uncertain intrusions, behaviors and routines, organizations should assume that their system is already compromised or breached and work to immediately isolate affected data or toolchains
In late December 2023, we began tracking a campaign by the Water Hydra group that contained similar tools, tactics, and procedures (TTPs) that involved abusing internet shortcuts (.URL) and Web-based Distributed Authoring and Versioning (WebDAV) components

Headlines

CVE-2024-21351

HIGH CVSS 7.60 EPSS Score 0.57 EPSS Percentile 77.15

CISA Known Exploited

Published: Feb. 13, 2024

Windows SmartScreen Security Feature Bypass Vulnerability

Vendor Impacted: Microsoft

Product Impacted: Windows

Quotes

An authorized attacker must send the user a malicious file and convince the user to open it
Could lead to the attacker gaining the ability to interact with other tenant’s applications and content
We know that flaws that can disclose sensitive information like NTLM hashes are very valuable to attackers
An attacker could target an NTLM client such as Outlook with an NTLM credentials-leaking type vulnerability
The impact of this vulnerability is profound, compromising security and undermining trust in protective mechanisms like SmartScreen
Inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim's behalf
The vulnerability allows a malicious actor to inject code into SmartScreen and potentially gain code execution, which could potentially lead to some data exposure, lack of system availability, or both
In the exploitation scenario, an attacker must send a specifically crafted file to a target user and persuade them to open it, since the attacker cannot compel the user to engage with the malicious content directly
ASP.NET SignalR is a library for ASP.NET developers that simplifies the process of adding real-time web functionality to applications. Real-time web functionality is the ability to have server code push content to connected clients instantly as it becomes available, rather than having the server wait for a client to request new data
Water Hydra deployed a spearphishing campaign on forex trading forums and stock trading Telegram channels to lure potential traders into infecting themselves with DarkMe malware using various social engineering techniques, such as posting messages asking for or providing trading advice, sharing fake stock and financial tools revolving around graph technical analysis, graph indicator tools, all of which were accompanied by a URL pointing to a trojan horse stock chart served from a compromised Russian trading and cryptocurrency information site (fxbulls[.]ru)

Headlines

CVE-2023-43770

MEDIUM CVSS 6.10 EPSS Score 11.47 EPSS Percentile 95.06

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: Sept. 22, 2023

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

Vendors Impacted: Debian, Roundcube

Products Impacted: Webmail, Debian Linux

Quotes

We strongly recommend to update all productive installations of Roundcube 1.6.x with this new version
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages

Headlines

Vulnerability and threat intelligence direct to your inbox every week.

Subscribe to Pulse

Accelerate Security Teams

Schedule a free consultation with a vulnerability expert to discuss your use cases and to see a demo.

Request a Demo

Solutions

By Solution

By Feature

I Want To…

Learn More

VULNERA vs Vulnerability Scanners

Who It’s For

CISO’s

IT & Security Teams

Risk & Compliance

Security Assessment Buyers Guide

Resources

Resources

Blog

Threat Intelligence

I Want To…

Learn More

Top 10 Vulnerability Management Questions Answered

About

About

Partners

I Want To…

Learn More

Simplifying Vulnerability Management

VULNERA Pulse

A digest of noteworthy issues being discussed in the information security industry.

February 16, 2024

Subscribe

Accelerate Security Teams

Quick Menu

Solutions

Features

CISO Challenges

IT Challenges

Compliance

Subscribe

By Solution

By Feature

I Want To…

Learn More

VULNERA vs Vulnerability Scanners

Security Assessment Buyers Guide

Resources

Resources

Blog

Threat Intelligence

I Want To…

Learn More

Top 10 Vulnerability Management Questions Answered

About

About

Partners

I Want To…

Learn More

Simplifying Vulnerability Management

VULNERA Pulse

A digest of noteworthy issues being discussed in the information security industry.

February 16, 2024

Snapshot

CISA Known Exploited Vulnerabilities

Newswires

Vulnerabilities In The News

CISA Known Exploited Vulnerabilities

Microsoft — Exchange Server

Cisco — Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Microsoft — Windows

Microsoft — Windows

Roundcube — Webmail

In The News

Subscribe

Accelerate Security Teams

Quick Menu

Features

Subscribe