Risks and Vulnerabilities

Remote access is a powerful tool for configuration and system management, but it also introduces new risks around unauthorized access and unsecured network

Two chainable zero-day vulnerabilities face Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS): CVE-2023-46805 and CVE-2024-21887.

Because file transfer moves files over the internet, insecure file transfer ports create opportunities for malicious actors.

Open ports that direct traffic to and from machines in the office could become an attack vector. Secure these ports to protect your sensitive data.

Understand what the risks mean and how to fix them when Google Safe Browsing flags your website for cybersecurity concerns.

The Diffie-Hellman key exchange is a method for agreeing to and calculating a secret symmetric key between parties on a public network.

Your HTTP response header carries server information. If exposed, that server information can increase your attack surface.

Implementing a DMARC policy protects your email recipients, while maintaining your domain and brand credibility.

LDAP provides communication with data, including sensitive data like user credentials, so take proactive security measures.

You use a database management system to interact with your stored data, so it's critical to implement security features that protect the DBMS and any data.

43% of all websites are built in WordPress, and custom sites rely on plugins and themes that can be attack vectors.

SysAid on-premises software faces a zero-day vulnerability for path traversal, currently tracked as CVE-2023-47246.

Tracking pixels are a powerful way to aggregate user behaviors, but they can also become a siphon for data leaks.

A misconfigured SSL certificate puts communication at risk, whereas a revoked certificate could render the site inaccessible to most browsers.

The Content Security Policy is a standard to prevent cross-site scripting attacks (XSS), clickjacking, packet sniffing, and malicious code injection.

CVE-2023-20198 is a critical, unpatched vulnerability impacting Internet-facing Cisco IOS XE devices.