Cyber risk and advisory programs that identify security gaps and build strategies to address them.
MDR that provides improved detection, 24/7 threat hunting, end-to-end coverage and most of all, complete Response.
Our team delivers the fastest response time in the industry. Threat suppression within just 4 hours of being engaged.
Be protected by the best from Day 1.
24/7 Threat Investigation and Response.
Expert hunting, research and content.
Defend brute force attacks, active intrusions and unauthorized scans.
Safeguard endpoints 24/7 by isolating and remediating threats to prevent lateral spread.
Investigation and enhanced threat detection across multi-cloud or hybrid environments.
Configuration escalations, policy and posture management.
Detects malicious insider behavior leveraging Machine Learning models.
Customer testimonials and case studies.
Stories on cyberattacks, customers, employees, and more.
Cyber incident, analyst, and thought leadership reports.
Demonstrations, seminars and presentations on cybersecurity topics.
Information and solution briefs for our services.
MITRE ATT&CK Framework, Cybersecurity Assessment, SOC Calculator & more
On September 21st, VMware announced a critical vulnerability impacting VMware vCenter servers. The vulnerability is a file upload vulnerability tracked as CVE-2021-22005 (CVSS: 9.8). Exploitation would allow a threat actor to execute remote code on vulnerable systems by uploading a specially crafted malicious file. Previous authentication is not required for exploitation.
Organizations are strongly recommended to apply the relevant security patch as soon as possible. Exploitation has not been identified in the wild at this time but is expected in the near future.
CVE-2021-22005 impacts vCenter Server 6.7 and 7.0. Exploitation requires that a vulnerable version of vCenter be accessible over port 443. While exploitation has not been publicly identified at this time, it is expected in the near future. CVE-2021-22005 is considered trivial to exploit and would provide significant access to threat actors; these factors increase the likelihood that threat actors will focus on this vulnerability, and attempt to exploit it before organizations have widely deployed patches.
In addition to CVE-2021-22005, VMware addressed 18 other vulnerabilities. These vulnerabilities are not considered critical but should be addressed with the available security patches.
References:
[1] https://blogs.vmware.com/vsphere/2021/09/vmsa-2021-0020-what-you-need-to-know.html
[2] https://kb.vmware.com/s/article/85717
[3] https://www.vmware.com/security/advisories/VMSA-2021-0020.html