Pages
Posts by category
- Category: Awards
- Category: Deepwatch Team
- Category: In The News
- Category: News
- Category: Press Release
Team Members
Resources
Blog
Events
Education Center
Labs
- Cyber Intel Brief: Sept 14 - 21, 2022
- Gootloader Poisoned Blogs Uncovered by Deepwatch’s ATI Team
- Cyber Intel Brief: Sept 8 - 14, 2022
- How Deepwatch Approaches Cyber Threat Intelligence
- Cyber Intel Brief: Sept 1 - 7, 2022
- Cyber Intel Brief: Aug 25 - 31, 2022
- Cyber Intel Brief: Aug 18 - 24, 2022
- Cyber Intel Brief: Aug 11 - 18, 2022
- Customer Advisory | Exploit Code Released for Critical Vulnerability, CVE-2022-27255, Affecting Thousands of Routers
- Cyber Intel Brief: Aug 4 - 10, 2022
- Customer Advisory | Microsoft’s Support Diagnostic Tool Vulnerability, AKA DogWalk, Actively Exploited
- Cyber Intel Brief: July 28 - Aug 03, 2022
- Deepwatch ATI detects and responds to never before discovered backdoor deployed using Confluence vulnerability for suspected Espionage
- Cyber Intel Brief: July 21 - 27, 2022
- Customer Advisory | Brace for Exploitation; Hardcoded Password for Questions for Confluence App Leaked
- Cyber Intel Brief: July 14 - 20, 2022
- Cyber Intel Brief: June 30 - July 6, 2022
- Cyber Intel Brief: June 23 - 29, 2022
- Cyber Intel Brief: June 16 - 22, 2022
- Customer Advisory | Splunk Critical Vulnerability
- Cyber Intel Brief: June 9 - 15, 2022
- Cyber Intel Brief: June 2 - 8, 2022
- Customer Advisory | Critical RCE Vulnerability in Atlassian’s Confluence Server and Data Center Actively Exploited
- Cyber Intel Brief: May 26 - June 1, 2022
- Customer Advisory | Microsoft Office Used to Exploit "Follina" (CVE-2022-30190) an RCE Vulnerability in Microsoft’s Support Diagnostic Tool
- Cyber Intel Brief: May 19 - 25, 2022
- Cyber Intel Brief: May 12 - 18, 2022
- Customer Advisory | Critical Vulnerability in Zyxel Firewalls and VPNs Actively Exploited
- Cyber Intel Brief: May 05 - 11, 2022
- Customer Advisory | Exploit Code Released for Critical RCE Vulnerability in F5s BIG-IP
- Cyber Intel Brief: April 28- May 4, 2022
- Cyber Intel Brief: April 21-27, 2022
- Customer Advisory | Threat Actors Exploiting Critical WSO2 Vulnerability
- Cyber Intel Brief: April 14-20, 2022
- Cyber Intel Brief: April 7-13, 2022
- Customer Advisory | Threat Actors Exploiting Critical VMWare Vulnerability
- Cyber Intel Brief: March-31-April 6, 2022
- Cyber Intel Brief: March-24-30, 2022
- Customer Advisory | Spring4Shell: What You Need to Know
- Cyber Intel Brief: March-17-23, 2022
- Customer Advisory | President Warns of Russian Government Exploring Options for Cyber Attacks
- Customer Advisory | Linux Vulnerability: Dirty Pipe Has Exploit Code Released
- Customer Advisory | NVIDIA Confirms Data Was Stolen as Lapsus$ Takes Credit
- Customer Advisory | Cyber Attacks in Ukraine: What You Need to Know
- Customer Advisory | Exploit Code Released for Critical Cisco Vulnerability: CVE-2022-20699
- Customer Advisory | Critical 0-Day Vulnerability in Adobe Commerce and Magento Open Source Platforms Under Active Exploitation
- Customer Advisory | Exploit Code Released for Windows 10 Vulnerability: CVE-2022-21882
- Customer Advisory | PwnKit: Exploit Released for Polkit's pkexec Component
- Customer Advisory | Exploit Code Released for CVE-2022-21907: Critical Windows HTTP Vulnerability
- Significant Cyber Event | Log4j Zero-day With Proof-of-Concept Code and Active Scanning Gets Security Fix
- Customer Advisory for Awareness | Grafana Issues a Security Patch After an Exploit for CVE-2021-43798 is Made Public
- Customer Advisory for Awareness | With an Active Campaign Against ServiceDesk Plus, APT Expands Attack on ManageEngine
- Customer Advisory for Awareness | Zero-Day Disclosed in Palo Alto Networks GlobalProtect VPN (CVE-2021-3064)
- Customer Advisory for Awareness | Apache HTTP Server Actively Exploited, Patch is Available, Patch Now!
- Customer Advisory for Awareness | CISA, FBI, and NSA Issue Joint Advisory Regarding Increased Conti Ransomware Attacks
- Customer Advisory for Awareness | Microsoft Warns of New RCE Zero-Day Exploited in Targeted Office Attacks
- Significant Cyber Event | Exchange Exploitation and Labor Day Weekend
- Customer Advisory for Awareness | Confluence Enterprise Server & Data Center are Being Actively Exploited
- Customer Advisory for Awareness | Azure Cosmos DB Flaw Could Allow for Complete Database Compromise
- Customer Awareness: Windows Print Spooler RCE Vulnerability CVE-2021-36958
- Significant Cyber Event | Microsoft Exchange Servers are being Actively Scanned for ProxyShell
- PetitPotam NTLM Relay Attack
- Significant Cyber Event | CVE-2021-36934 - SeriousSAM Microsoft Windows 10 Vulnerability
- CVE-2021-33909 & CVE-2021-33910 - Long Path Name in Mountpoint Flaws in the Kernel and Systemd
- U.S. Federal Cybersecurity Advisory: TTPs of Chinese State-Sponsored Cyber Operations
- Kaseya VSA Compromise - REvil Ransomware Attack
- CVE-2021-1675 - PrintNightmare Vulnerability
- CVE-2021-3044 Vulnerability: Cortex XSOAR
- Significant Cyber Event | Intelligence Report - Nobelium
- CVE-2021-21985 - Vulnerability Found in VMware vCenter Servers and Cloud Foundation
- CVE-2021-22893 - Pulse Secure VPN Zero-Day & Active Exploits
- Microsoft Exchange Server Zero-Days
- Chasing Silver Sparrow: Keeping an Eye on the Mysterious macOS Malware
- CVE-2021-21972 - Vulnerability Found in VMware vCenter Servers and Cloud Foundation
- Windows Event 4688 - Part I - Eh to Excellent
- SolarWinds Attack - Part II - Is MITRE ATT&CK Falken's Maze?
- Sudo Vulnerability
- SolarWinds Attack - Part I - From Infrastructure to Endpoint
- Summary of Deepwatch's Actions in Response to Sunburst IOC
- Oracle WebLogic Vulnerability
- ZeroLogon Threat Review
- Bad Neighbor Vulnerability
- Zerologon Vulnerability
- BootHole Vulnerability SPOT Report
- SAP RECON Vulnerability
- F5 Networks BIG-IP Vulnerabilities
- SPOT Report - Palo Alto Networks Authentication Bypass
- Palo Alto Networks & Cisco Kerberos Authentication Bypass
- Meet the Threat: The Inside Workings of Magecart Breaches
- SPOT Report - Zoom Zero-Day
- SPOT Report - Apache Tomcat - GhostCat
- SPOT Report - Cisco - CDPwn Vulnerabilities
- SPOT Report - Microsoft Crypt32 Certificate Validation flaw
- SPOT Report - Citrix ADC & Gateway Vulnerability
- SPOT Report - Imperva Security Breach
- Seven Monkeys Vulnerability - SPOT Report - August 2019 Patch Tuesday
- SPOT Report - WebLogic Remote Code Execution
- SPOT Report - SACK Vulnerabilities
- SPOT Report - ZombieLoad
- SPOT Report - Patch Tuesday Vulnerabilities
- SPOT Report - Cisco - Thrangrycat
- Profile of an Adversary - FIN7
- SPOT Report - Oracle WebLogic Remote Code Execution CVE-2019-2725
- 1-day Vulnerabilities: The Limits of Following the Patch Tuesday Cycle
- Google Chrome FileReader Vulnerability
- Runc Docker Vulnerability
- MS Exchange Privilege Escalation Attack
- DNS Infrastructure Hijacking Campaign
- IE - Scripting Engine Memory Corruption Vulnerability CVE-2018-8653
- Zoom Desktop Conferencing CVE-2018-15715