black arrow threat intel — Black Arrow Cyber Consulting

Black Arrow Cyber Advisory 30/06/2022 – Patchable vulnerabilities lead cause of Q1 incidents

Black Arrow AdminJune 30, 2022black arrow cyber, black arrow threat intel, black arrow advisory, vulnerability management, unpatched vulnerabilities, vulnerabilities

Black Arrow Cyber Advisory 30/06/2022 – Switch to Exchange Online Modern Auth

Black Arrow AdminJune 30, 2022exchange online, black arrow advisory, black arrow cyber, black arrow threat intel, threat advisory, exchange, basic authentication

Black Arrow Cyber Advisory 30/06/2022 – USB drive spread Raspberry Robin worm actively seen in the wild

Black Arrow AdminJune 30, 2022black arrow cyber, black arrow threat intel, black arrow advisory, raspberry robin, USB devices

Black Arrow Cyber Advisory 17/06/2022 – Citrix ADM

Black Arrow Cyber Advisory 17/06/2022 – Citrix ADM

Executive Summary

Citrix Application Delivery and Management (Citrix ADM), is a web-based software application used for managing Citrix deployments for an organisation. Two vulnerabilities have been disclosed by Citrix, one of which could allow for a remote, unauthenticated user to reset the administrator password on the server, granting administrator access after a reboot.

Black Arrow AdminJune 17, 2022black arrow cyber, black arrow threat intel, black arrow advisory, citrix, citrix adm, citrix application delivery and management, vulnerability

Black Arrow Cyber Advisory 15/06/2022 – Microsoft Patch Tuesday – ‘Follina’ vulnerability addressed with other security updates

Black Arrow Cyber Advisory 15/06/2022 – Microsoft Patch Tuesday – ‘Follina’ vulnerability addressed with other security updates.

Antony ClealJune 15, 2022black arrow cyber, black arrow threat intel, black arrow advisory, microsoft, patch management, vulnerability management

Black Arrow Cyber Advisory 27/05/2022 – Multiple Zyxel Vulnerabilities identified for Firewalls and Access Points

Black Arrow Cyber Advisory – Multiple Zyxel Vulnerabilities identified for Firewalls and Access Points

Executive Summary

Several vulnerabilities have been disclosed within Zyxel products, affecting firewalls, access point controllers and access points produced by the company. Most of these vulnerabilities require a locally authenticated user, and therefore could be used for further attacks if a local user account is compromised.

Black Arrow AdminMay 27, 2022black arrow, black arrow cyber, black arrow threat intel, black arrow advisory, zyxel, firewalls, ap, access point, vulnerability

Black Arrow Cyber Advisory 27/05/2022 – Trend Micro identified a new Ransomware strain specifically targeting VMware servers

Black Arrow Cyber Advisory 27/05/2022 – Trend Micro identified a new Ransomware strain specifically targeting VMware servers

Executive Summary

Ransomware specifically designed to target VMware systems has been found to be in use by malicious attackers. VMware systems have been a prime target for attackers, as many different services which organisations rely on run on these systems. By compromising these systems, all of the hosted services can also be impacted.

Black Arrow AdminMay 27, 2022black arrow, black arrow threat intel, black arrow advisory, vmware, ransomware, trend micro, cheerscript, ssh, esxi

Black Arrow Cyber Advisory 26/05/2022 – Check the security of IoT Devices, Increase in Linux Botnet Malware

Black Arrow Cyber Advisory 26/05/2022 – Check the security of IoT Devices, Increase in Linux Botnet Malware.

Executive Summary

Microsoft has detected a significant increase in malware targeted at Linux systems to create botnets which can be used for distributed denial-of-service (DDOS) and other types of attack. Internet-of-Things (IoT) or Smart Devices often use a Linux operating system to run their service. These are often not patched regularly, if at all, making them a target for this type of attack. Cloud service providers also often use Linux based operating systems.

Black Arrow AdminMay 26, 2022black arrow cyber, black arrow threat intel, black arrow advisory, microsoft, ddos, iot, smart devices, linux, botnet

Black Arrow Cyber Advisory 19/05/2022 – VMware provides patches for critical vulnerabilities in multiple product lines. CISA advise to disconnect systems if they cannot be patched

Black Arrow Cyber Advisory 19/05/2022 – VMware provides patches for critical vulnerabilities in multiple product lines. CISA advise to disconnect systems if they cannot be patched.