exploit | Inception Security

Blog

2 min read

Understanding ManageEngine Vulnerability CVE-2022-47966

ManageEngine's CVE-2022-47966 vulnerability is a critical issue that allows an attacker to gain remote code execution on the server...

2 min read

Understanding the Exchange Server Attacks: Exploiting CVE-2022-41040 and CVE-2022-41082

In recent months, we have seen a surge in attacks targeting Exchange Servers. These attacks have been made possible by exploiting the...

3 min read

Citrix CVE-2022-27518

Citrix is a global leader in providing digital workspace solutions, and as such, it is a popular target for cyber attackers. One such...

2 min read

Citrix CVE-2022-27516

CVE-2022-27516 is a severe vulnerability recently discovered in Citrix, a widely-used software program. This vulnerability has the...

2 min read

Fortinet CVE-2022-42475

CVE-2022-42475 is a recently discovered vulnerability in the software that powers Fortinet, a popular cybersecurity company. This...

2 min read

Forensic Friday - Jump Lists

What are Jump Lists? Jump Lists are windows features introduced with Windows 7, and they contain information about recently accessed...

3 min read

Microsoft Office - Arbitrary Code Execution

We have recently observed threat actors evolving their procedures in light of Microsoft disabling macros by default in office documents....

3 min read

Cyber Insurance Benefits

What is Cyber Insurance? A cyber insurance policy is commonly called "cyber risk insurance" or "cyber liability insurance" coverage. It...

3 min read

Forensic Friday - Profile Lists

What are Profile Lists? Windows keeps track of user-profiles and their locations in the registry. The profile location is stored under...

3 min read

CVE-2022-1388 (F5 BIG-IP)

CVE-2022-1388 is a critical CVE (CVSS 9.8) in F5 Networks’ BIG-IP solution management interface. This CVE will allow threat actors to...

4 min read

Business Continuity and Disaster Recovery

Business continuity and disaster recovery (BCDR or BC/DR) is a collection of processes and procedures that assist a company in recovering...

3 min read

Forensic Friday - Prefetch

What is Windows Prefetch? Windows Prefetch creates files when a user opens an application on a Windows host. The Windows Operating system...

3 min read

Emotet Changing Techniques

Phishing attacks remain the number one technique used in cyberattacks. Some of the most common phishing attacks leveraged attachments to...

3 min read

Spring4Shell

A critical vulnerability CVE-2022-22965 (Spring4Shell or SpringShell) was found on March 29, 2022, in an open-source Java framework while...

2 min read

RPC Vulnerability (CVE-2022-26809)

On patch Tuesday, April 12, 2022, Microsoft released patches for CVE-2022-26809. A vulnerability that is a zero-click exploit targeting...

1 min read

Cyberattacks On The Rise

As we look across the landscape, we see that cyberattacks continue to succeed in all business sectors. In the cases we have observed, the...

3 min read

Attack Surface Management

Considering today's attack surface's massive and hyper-dimensional nature, we begin to see how challenging it is to manage this attack...

3 min read

Importance of EDR

Endpoint Detection & Response (EDR) A critical task for most organizations has become setting up advanced threat protection as...

3 min read

What is Qbot / Qakbot

QBot, also known as Qakbot or pinkslipbot, is an information stealer that has been active since 2007. It is malware software that can...

4 min read

An Encounter with Pandora

Pandora ransomware came into the spotlight in March of 2022 after posting some high-profile victims on its leak site. The ransomware...

LATEST PROJECTS

Experiencing a Cyber Incident? +1 (888) 427-2937

INCEPTION

Blog

INCEPTION SECURITY™

NAVIGATION

GET IN TOUCH