The LogicHub Security Roundup
Hello, and welcome to the LogicHub Monthly Update! Each month we’ll be covering a broad view of this past month’s threats, a series of informative use cases seen this month by our teams, and a series of recommended articles, podcasts, and other useful resources.
September 2021
Highlights
VMWare Workspace One Open Network Access
Confluence OGNL Injection
Node.JS Input Validation Issues
Confluence OGNL Injection
Node.JS Input Validation Issues
Case Study
Okta Administration and Authorization
August 2021
Highlights
Windows Hyper-V RCE
Windows Kernel RCE
Google Chrome DevTools Sandbox Vulnerability
Windows Kernel RCE
Google Chrome DevTools Sandbox Vulnerability
Case Study
Suspicious Production Account Activity Triage
July 2021
Highlights
Windows Print Spooler Vulnerability
phplist RCE
phplist RCE
Case Study
Identity and Access Management Monitoring
June 2021
Highlights
Pulse Secure VPN RCE
Hyper-V Kernel Trickery
Solarwinds Validation Failure
Hyper-V Kernel Trickery
Solarwinds Validation Failure
Case Study
Detecting Binary Masquerading
May 2021
Highlights
Solarwinds Orion Escalated Privileges
Smart Air Fryer RCE
Smart Air Fryer RCE
Case Study
Oracle Cloud Infrastructure Detections
April 2021
Highlights
Netgear File Upload Zero Day
Cisco IOS XE Boundary Checks
Snapdragon Buffer Overflow
Cisco IOS XE Boundary Checks
Snapdragon Buffer Overflow
Case Study
Automatic Rule Pushing
March 2021
Highlights
Active Exploits on Chrome Zero-Day
vSphere Client RCE
Privileged Escalation in Cisco Application Services Engine (CASE)
vSphere Client RCE
Privileged Escalation in Cisco Application Services Engine (CASE)
Case Study
Distance-Based Detections
February 2021
Highlights
Active Exploits on Chrome Zero-Day
Android Packet Injection via Bluetooth
Android Packet Injection via Bluetooth
Case Study
CIS AWS Benchmarking
January 2021
Highlights
NGINX Absolute Paths
SolarWinds Authentication Bypass
Jabber Arbitrary Execution
SolarWinds Authentication Bypass
Jabber Arbitrary Execution
Case Study
Daily Metrics for Ease of Data Management
December 2020
Highlights
Samsung FRP Bypass
Android RCE
Android RCE
Case Study
Automated Salesforce Monitoring