Horizon3.ai
Horizon3.ai

News

Filters

Tags
Reset

Showing 217–222 of 222 results

FBI and CISA Warn About APTs Targeting FortiOS VPN Vulnerabilities

April 3, 2021 |

Tech Nadu: 04/03/2021 Zach Hanley, Senior Red team engineer at Horizon3.AI told us: “Attackers are increasingly targeting critical external applications – VPNs have been targeted even more this last year. These three vulnerabilities targeting the Fortinet VPN allow an attacker to obtain valid credentials, bypass multi-factor authentication (MFA), and man-in-the-middle (MITM) authentication traffic to intercept credentials. The common theme here...
Read More

FBI and CISA: APT Groups Targeting Government Agencies

April 3, 2021 |

Gov Info Security: 04/03/2021 Zach Hanley, senior red team engineer at security firm Horizon3.ai, adds that the attackers can use the vulnerabilities to obtain valid credentials to perform man-in-the middle attacks, which will then help them to intercept authentication traffic. “The common theme here is: Once they are successful, they will look just like your normal users.” Read entire article...
Read More

CISA Releases Supplemental Direction On Emergency Directive for Microsoft Exchange Server

April 2, 2021 |

Security Magazine: 04/02/2021 According to Anthony Pillitiere, Co-Founder and CTO at Horizon3.AI, “We will continue to see a significant increase in serious cyber attacks throughout 2021 using ubiquitous software like Exchange and SolarWinds as the attack vector. Organizations that lack a strong cyber security foundation will suffer, but organizations that have invested in the right talent, tools, processes, and partners...
Read More

CISA Orders Action Against Exchange Vulnerabilities

April 2, 2021 |

Security Boulevard: 04/02/2021 There will be “a significant increase in serious cyberattacks throughout 2021 using ubiquitous software like Exchange and SolarWinds as the attack vector,” warned Anthony Pillitiere, co-founder and CTO at Horizon3. Pillitiere stressed that “organizations that lack a strong cybersecurity foundation will suffer, but organizations that have invested in the right talent, tools, processes and partners will weather...
Read More

Agency Issues 2nd Alert for Instant Quote Website Schemes

April 2, 2021 |

Data Breach Today: 04/02/2021 Anthony Pillitiere, co-founder and CTO of security firm Horizon3.AI, notes that instant quote websites for financial services companies and auto insurers fail to offer basic security for information that can easily be gleaned by fraudsters with rudimentary skills. “People already give up enough information on their own through social media and the rest of their digital...
Read More

FBI: APTs Actively Exploiting Fortinet VPN Security Holes

April 2, 2021 |

Threat Post: 04/02/2021 “Attackers are increasingly targeting critical external applications – VPNs have been targeted even more this last year,” said Zach Hanley, senior red team engineer at Horizon3.AI, via email. “These three vulnerabilities targeting the Fortinet VPN allow an attacker to obtain valid credentials, bypass multifactor authentication (MFA), and man-in-the-middle (MITM) authentication traffic to intercept credentials.” Hanley added, “The...
Read More

How can NodeZero help you?

Let our experts walk you through a demonstration of NodeZero, so you can see how to put it to work for your company.

Schedule a Demo