Skybox Security Blog - Cybersecurity from The Skybox View

6 02, 2019

Permalink
Gallery
Threadkit, Formbook Exploit Old Microsoft Vulnerability

Threat Intelligence

Threadkit, Formbook Exploit Old Microsoft Vulnerability

By Sivan Nir| 2019-02-06T14:41:15+00:00 February 6th, 2019|Threat Intelligence|Comments Off on Threadkit, Formbook Exploit Old Microsoft Vulnerability on Threadkit, Formbook Exploit Old Microsoft Vulnerability

A Microsoft Office vulnerability first discovered in July 2017 has been exploited by Formbook malware

Tags: CVE-2017-8570, Formbook, Microsoft Office, Microsoft Word, ThreadKit

1 02, 2019

Permalink
Gallery
New FaceTime Bug Allows Audio, Video Eavesdropping

Threat Intelligence

New FaceTime Bug Allows Audio, Video Eavesdropping

By Sivan Nir| 2019-02-04T13:07:44+00:00 February 1st, 2019|Threat Intelligence|Comments Off on New FaceTime Bug Allows Audio, Video Eavesdropping on New FaceTime Bug Allows Audio, Video Eavesdropping

The FaceTime Bug allowing unauthorized microphone and camera access is the latest chapter in Apple’s information disclosure story

Tags: FaceTime bug, Grant Thompson, Group FaceTime, report a bug to Apple

30 01, 2019

Permalink
Gallery
Kuwait Oil Company Spreadsheet Delivering OmniRAT to OT Networks

Threat Intelligence

Kuwait Oil Company Spreadsheet Delivering OmniRAT to OT Networks

By Marina Kidron| 2019-01-31T08:10:02+00:00 January 30th, 2019|Threat Intelligence|Comments Off on Kuwait Oil Company Spreadsheet Delivering OmniRAT to OT Networks on Kuwait Oil Company Spreadsheet Delivering OmniRAT to OT Networks

A weaponized Excel file titled “Kuwait Oil Company Business Profile” breathes new life into an old vulnerability, raising concern for unsuspecting OT networks

Tags: CVE-2016-7262, Kuwait Oil Company, malcrawler, malicious Excel, OmniRAT

29 01, 2019

Permalink
Gallery
Attacks on Cloud Networks Likely to Increase in 2019

Virtual and Cloud Network Security

Attacks on Cloud Networks Likely to Increase in 2019

By William.Grove| 2019-01-29T17:27:05+00:00 January 29th, 2019|Virtual and Cloud Network Security|Comments Off on Attacks on Cloud Networks Likely to Increase in 2019 on Attacks on Cloud Networks Likely to Increase in 2019

Tags: AWS, cloud migration, Cloud networks, cloud transformation, infrastructure as a service, Kubernetes, Tesla

18 01, 2019

Permalink
Gallery
Juniper Vulnerabilities Missed by a Number of Popular Scanners

Vulnerability Assessment

Juniper Vulnerabilities Missed by a Number of Popular Scanners

By Marina Kidron| 2019-01-23T01:26:28+00:00 January 18th, 2019|Vulnerability Assessment|Comments Off on Juniper Vulnerabilities Missed by a Number of Popular Scanners on Juniper Vulnerabilities Missed by a Number of Popular Scanners

Tags: CVE-2018-0732, CVE-2019-0013, IBM AIX, Juniper, JunOS, NVD, OpenSSL, Palo Alto Pal-OS, Tenable Nessus, WebLogic

28 12, 2018

Permalink
Gallery
OT Threat Shamoon Returns with its Biggest Attack Yet

Threat Intelligence

OT Threat Shamoon Returns with its Biggest Attack Yet

By Skybox Blog Team| 2019-01-03T10:31:24+00:00 December 28th, 2018|Threat Intelligence|Comments Off on OT Threat Shamoon Returns with its Biggest Attack Yet on OT Threat Shamoon Returns with its Biggest Attack Yet

Tags: defense in depth, disk-wiping, DistTrack, MaintenanceSrv, Saipem, Saudi Aramco, Shamoon

7 12, 2018

Permalink
Gallery
Zero-Day Attack on Russia Prompts OOB Patches

Threat Intelligence

Zero-Day Attack on Russia Prompts OOB Patches

By Shannon Ragan| 2018-12-07T12:03:22+00:00 December 7th, 2018|Threat Intelligence|Comments Off on Zero-Day Attack on Russia Prompts OOB Patches on Zero-Day Attack on Russia Prompts OOB Patches

A malicious Word document was used to exploit an Abobe Flash Player bug in a targeted zero-day attack on Russia

Tags: Adobe Flash Player, Adobe PSIRT, CVE-2018-15982, Gigamon, Hacking Team, Microsoft operating systems, Out-of-Band Patch, Qihoo, use-after-free, Zero-day attack on Russia

8 11, 2018

Permalink
Gallery
Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide

Vulnerability & Threat Management

Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide

By Skybox Blog Team| 2018-11-08T16:28:12+00:00 November 8th, 2018|Vulnerability & Threat Management|Comments Off on Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide on Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide

The Bleedingbit vulnerabilities impact Bluetooth low-energy chips used in millions of wireless access points

Tags: Aironet, Armis, Aruba, Bleedingbit, Bluetooth low-energy, Cisco access point, CVE-2018-16986, CVE-2018-7080, Meraki, Meraki access point, Texas Instruments

16 10, 2018

Permalink
Gallery
Foreshadow Vulnerabilities Impact Siemens Products

Vulnerability & Threat Management

Foreshadow Vulnerabilities Impact Siemens Products

By Skybox Blog Team| 2018-10-23T14:26:14+00:00 October 16th, 2018|Vulnerability & Threat Management|Comments Off on Foreshadow Vulnerabilities Impact Siemens Products on Foreshadow Vulnerabilities Impact Siemens Products

Foreshadow, or L1 terminal fault vulnerabilities, in various Siemens industrial products could put the most isolated and secure microprocessor memory at risk

Tags: Foreshadow, Foreshadow CVE, L1 Terminal Fault, RUGGEDCOM, Siemens products affected by Foreshadow, SIMATIC, SIMOTION, SINUMERIK

8 10, 2018

Permalink
Gallery
TSMC WannaCry Hits OT Plants with a Hefty Price Tag

Vulnerability & Threat Management

TSMC WannaCry Hits OT Plants with a Hefty Price Tag

By Skybox Blog Team| 2019-01-24T13:24:29+00:00 October 8th, 2018|Vulnerability & Threat Management|Comments Off on TSMC WannaCry Hits OT Plants with a Hefty Price Tag on TSMC WannaCry Hits OT Plants with a Hefty Price Tag

The TSMC WannaCry attack is yet another reminder in the constant vigilance of vulnerability management — and the effect it can have on your bottom line

Tags: air gap, fab tools, MS17-010, operational technology, ransomware, Taiwan Semiconductor, TSMC WannaCry, WannaCrypt

Threadkit, Formbook Exploit Old Microsoft Vulnerability

New FaceTime Bug Allows Audio, Video Eavesdropping

Kuwait Oil Company Spreadsheet Delivering OmniRAT to OT Networks

Attacks on Cloud Networks Likely to Increase in 2019

Juniper Vulnerabilities Missed by a Number of Popular Scanners

OT Threat Shamoon Returns with its Biggest Attack Yet

Zero-Day Attack on Russia Prompts OOB Patches

Bleedingbit Vulnerabilities Could Affect Enterprises Worldwide

Foreshadow Vulnerabilities Impact Siemens Products

TSMC WannaCry Hits OT Plants with a Hefty Price Tag

Categories

Recent Tweets