The tech world has been buzzing about Microsoft Copilot over the past 12 months – and for good reason. The technology has the potential to enhance the way you work, […]
CyberOne Security Team
This article was written by members of the CyberOne Security Team, drawing on decades of combined experience in cloud and network security, penetration testing, threat intelligence, and advisory services.
The Security and Exchange Commission Continues to Enforce Cybersecurity Controls for Publicly Traded Companies
Background The Security and Exchange Commission (SEC) continues to convey the importance of Cybersecurity for publicly traded companies by finalizing additional rules requiring disclosure of material cybersecurity incidents on Form […]
How IT Teams Can Better Protect Remote and Hybrid Workers
What can concerned IT teams do to mitigate the increased amount of possible threats in the age of remote and hybrid workers? Here are some best practices.
Cybersecurity Awareness Month
It’s October bringing fall weather, pumpkin spiced lattes and a month dedicated to cybersecurity awareness.
Exploiting Kaseya Unitrends Backup Appliance – Part 2
This is the second installment of the Exploiting Unitrends series and will focus on several critical unauthenticated SQL Injection vulnerabilities leading to remote code execution.
Exploiting Kaseya Unitrends Backup Appliance – Part 1
Multiple vulnerabilities were discovered in the Unitrends Backup appliance and client software. An attacker with network access to the management interface or backup ports on the client or server could be exploited to compromise the machine. Both suffer from critical remote code execution vulnerabilities.
CyberOne Announces Strategic Plans for National Expansion
Plano, TX – November 16, 2021 — CyberOne, a trusted cybersecurity advisory and solutions leader, announced today its plans to spin off from the CRITICALSTART brand as an independent company.
How To Reverse Engineer the SolarWinds Hack
When it comes to security incidents involving malware, most of us rely on the information provided by the investigating firm to understand what the malware does, why it does it, […]
Death to Vulnerability Management As We Know It
Vulnerability Management concepts are changing. The idea that vulnerability management is limited to scanning alone is being replaced with a wider and more comprehensive view. It’s now transforming to a […]
Multiple Vulnerabilities Discovered in Aviatrix
Versions Tested: Aviatrix Cloud Controller UserConnect-5.3.1516 Aviatrix VPN Client 2.8.2 Product: https://aviatrix.com/cloud-network-platform/ Security Advisories: https://docs.aviatrix.com/HowTos/security_bulletin_article.html Summary: CyberOne discovered multiple vulnerabilities in the Aviatrix Cloud Controller appliance v5.3.1516 and Aviatrix VPN client v2.8.2 […]