Search Results

The default setting for search results displays All Content. If you prefer to see recent content only, please adjust the date filter.

33733 Results Found

HC3 Sector Alert
Member

HC3 Sector Note TLP Green: Unpatched USB Redirection Software Poses Risk to Users June 23, 2020

On June 17, 2020, researchers reported on a bus driver installed by FabulaTech for their “USB for Remote Desktop” software that has a vulnerability (tracked as CVE-2020-9332). The vulnerability allows a non-privileged user to potentially take over a targeted device on the network.
HC3 Sector Alert
Public

HC3 Sector Alert TLP White: CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication, June 30, 2020

On June 29, 2020, Palo Alto Networks announced a vulnerability (CVE-2020-2021) affecting their PAN-OS firewall software.
HC3 Analyst Note
Public

HC3 Analyst Note TLP White: Critical Vulnerability in F5 Network Management/Security (BIG-IP) Tools

The information technology vendor, F5, disclosed a significant vulnerability in their BIG-IP suite of tools which, when exploited, allows for remote code execution ultimately leading to complete compromise of the host and the potential for further compromise of the network which it sits on.
HC3 Sector Alert
Public

HC3 Sector Alert TLP White - CISA Top 3 Malware Detections for May 2020, July 10, 2020

Top malware detections for the month of May 2020 by the EINSTEIN national IDS included NetSupport Manager RAT, Kovter, and XMRig.
HC3 Sector Alert
Member

HC3 Sector Alert TLP Green - China Targets HPH, July 13, 2020

     
HC3 Sector Alert
Public

HC3 Sector Alert TLP White Cybersecurity Vulnerabilities of Interest to The Health Sector July 20, 2020

In recent days, a significant number of vulnerabilities in common information systems relevant to the healthcare sector have been disclosed to the public. These vulnerabilities are from Microsoft, Adobe, Oracle, Cisco and Google, as well as others.
HC3 Analyst Note
Member

HC3 Analyst Note TLP Green: Thanos Ransomware Now Using RIPlace Anti-Ransomware Evasion Technique July 21, 2020

Thanos ransomware, first noted in January 2020, is unremarkable apart from the RIPlace anti-ransomware evasion technique that is available as one of its paid-for features.
HC3 Analyst Note
Member

HC3 Analyst Note TLP Green: Re-Emergence of Emotet Botnet Poses Threat to HPH Sector, July 27, 2020

The Emotet botnet, administered by the cybercrime group TA542, emerged from a five-month hiatus on July 13, 2020.
HC3 Sector Alert
Public

HC3 Sector Alert: CVE-2020-1147: .NET Framework, SharePoint Server

On July 14, 2020, Microsoft released a patch for CVE-2020-1147. If left unpatched the vulnerability, which affects Microsoft SharePoint, .NET Framework, and Visual Studio, could allow an attacker to run arbitrary code.
H-ISAC: White Reports
Public

H-ISAC Report: Hacking Healthcare - TLP White, July 28, 2020

In this edition Hacking Healthcare explores 2020 ransomware trends, including the concerning growth of ransomware that incorporates data exfiltration and what that means for healthcare organization