Risks and Vulnerabilities

If you do not set up an SPF record, untrustworthy emails from unauthorized sources can be sent to your employees and customers, seemingly from your domain.

CVE-2023-22515 is a privilege escalation and broken access control vulnerability affecting Confluence Data Center and Confluence Server.

A major vulnerability in the libwebp library puts web users at risk of remote code execution.

UpGuard Breach Risk provides continuous monitoring and automated scanning for potential threats, including exposed ports that known RATs can exploit.

Secure your domain against common findings related to your domain name registration.

Domains that expire become unavailable for users, which can negatively impact your brand reputation. Keep track of expiry dates for stable domain access.

Ensure your HTTPS Strict Transport Policy is configured properly to ensure secure communications.

Without encrypted communications, information transfer is not protected and sensitive data becomes vulnerable to attackers. Set up HTTPS redirection.

An access control vulnerability impacting Citrix ShareFile can lead to remote code execution.

If your server uses a weak SSL algorithm or an insecure SSL/TLS version, you'll need to update the system to protect your customers and your assets.

Identify if your assets are impacted by the Ivanti EPMM and MobileIron vulnerabilities (CVEs) and, if so, what actions to take next.

Software with an end-of-life finding can lead to security vulnerabilities in your technical stack. Identify risks and coordinate updates for EOL software.

Identify if your assets are impacted by the Citrix/NetScaler ADC and Gateway vulnerabilities (CVEs) and, if so, what actions to take next.

If your server does not have a valid SSL/TLS certificate installed and configured, your site will not be able to serve traffic using SSL/TLS encryption.

SSL/TLS certificates provide a critical security layer for encrypting traffic to your public web systems.

Learn how to identify if you've been impacted by CVE-2023-27997 and, if you are, how to quickly secure your IT ecosystems from exploitation.