The LogicHub Security Roundup
Hello, and welcome to the LogicHub Monthly Update! Each month we’ll be covering a broad view of this past month’s threats, a series of informative use cases seen this month by our teams, and a series of recommended articles, podcasts, and other useful resources.
January 2022
Highlights
Batch of NETGEAR Vulnerabilities
Zoho ManageEngine Authentication Bypass
IBM Spectrum Protect Plus Cross-Origin Resource Sharing
Zoho ManageEngine Authentication Bypass
IBM Spectrum Protect Plus Cross-Origin Resource Sharing
Case Study
Log4J Automation and Response
December 2021
Highlights
Google Chrome Use After Free
Zoom Buffer Overflow
Palo Alto GlobalProtect Arbitrary Execution
Zoom Buffer Overflow
Palo Alto GlobalProtect Arbitrary Execution
Case Study
Phishing Context Automation and Response
November 2021
Highlights
Juniper Header Arbitrary Code Execution
Cisco Policy Suite Static SSH Keys
Ethereum PoS DDoS
Cisco Policy Suite Static SSH Keys
Ethereum PoS DDoS
Case Study
AWS Route 53 Domain Monitoring
October 2021
Highlights
WordPress Publications ZIP RCE
SAP Netweaver Proxy Attacks
Zoom Client Validation Failure
SAP Netweaver Proxy Attacks
Zoom Client Validation Failure
Case Study
Network Connection Triage with Talos
September 2021
Highlights
VMWare Workspace One Open Network Access
Confluence OGNL Injection
Node.JS Input Validation Issues
Confluence OGNL Injection
Node.JS Input Validation Issues
Case Study
Okta Administration and Authorization
August 2021
Highlights
Windows Hyper-V RCE
Windows Kernel RCE
Google Chrome DevTools Sandbox Vulnerability
Windows Kernel RCE
Google Chrome DevTools Sandbox Vulnerability
Case Study
Suspicious Production Account Activity Triage