Quadrant Information Security

Stay on top of the latest threats and receive expert guidance from our threat analysts -- free to your inbox. Sign up: https://lnkd.in/gtKtTV3U

Happy Holidays, from the Quadrant family to yours!

Threat alert: Critical Apache Struts Remote Code Execution Vulnerability (CVE-2024-53677) *Informational Only* A critical vulnerability has been identified in the popular Apache Struts framework, allowing threat actors to potentially execute arbitrary code remotely. There is evidence that this vulnerability is already being exploited in the wild. The root cause of this flaw is found in the file upload logic, which can be exploited to perform path traversal and malicious file upload. Vulnerable Apache Struts Versions: 2.0.0 to 2.5.33 6.0.0 to 6.3.0. 2 By manipulating the file upload parameters, an attacker can potentially achieve: —Path Traversal: Uploading of files to arbitrary locations within the server, bypassing security mechanisms. —Remote Code Execution (RCE): Execution of malicious code by uploading and triggering executable files, such as .jsp scripts or binary payloads. Recommendations: Apache users should upgrade to Apache Struts 6.4.0 or later. Note that this migration requires code refactoring due to non-backward compatibility. On behalf of our clients, our team of Threat Analysts and Detection Engineers immediately updated our detection rules for this exploit. We will continue monitoring for these threat signatures and respond accordingly. Subscribe to have Threat Alerts sent to your email as they're issued so you can act rapidly. Alerts are informational only. https://lnkd.in/gtKtTV3U

Cyber threats become more and more advanced with every passing week. As your organization looks toward 2025, let Quadrant give you a hand. Our Dark Web Reports provide a proactive solution for identifying and addressing compromised credentials—and for a limited time, Quadrant is extending this service to non-customers, offering free reports to organizations with 5,000 employees or fewer. Proactive risk mitigation can be the difference between a crippling cyberattack and a warded off threat. Get actionable insights with monthly reports that highlight newly discovered or leaked information—at no cost: https://lnkd.in/ePTZbdrS #ManagedResponse #MDR #XDR

A detailed look at Quadrant's free Dark Web reports at TechRadarPro: "Early detection of compromised credentials is one of the most effective ways to prevent a cybersecurity incident. By offering these reports, Quadrant empowers organizations to respond swiftly to any security gaps identified. Moreover, these reports can be especially beneficial for businesses that lack the internal resources to monitor the Dark Web themselves." https://lnkd.in/ecaAta37 #cybersecurity #ManagedResponse #IT

Did you catch this insightful piece on the #cybersecurity considerations private equity firms should make as part of their due diligence process, penned by Quadrant's own Chris Snyder? It's live at Cyber Security Intelligence now: https://lnkd.in/eaMqAAM8 #PrivateEquity #XDR #PE

Threat Alert! Multiple vulnerabilities are being actively exploited in the wild. It’s been a busy week for threat actors, with three new alerts rising to the level of requiring action. If you utilize any of the following software, it is important to take immediate steps to mitigate any potential impact. 1️⃣ Microsoft has released an urgent patch for a critical zero-day vulnerability in the Common Log File System (CLFS) (CVE-2024-49138). 2️⃣ Hackers are weaponizing malicious Visual Studio Code extensions to compromise development environments and execute code or exfiltrate sensitive data, potentially spreading further through supply chains. 3️⃣ The widely used CLEO's file transfer software has been exploited in live attacks, targeting its vulnerabilities to access sensitive enterprise data. See the full Threat Alert on our blog, and subscribe to have them sent to your email as they're issued so you can act sooner. Alerts are informational only. https://lnkd.in/eW6vx4-D

What's next for Telegram as it furthers cooperation with law enforcement? Will criminals shift to a new application or change their tactics? Hear from a roundtable of experts, including Josh Copeland, our director of managed security, at Techopedia: https://lnkd.in/erWGTcNb

This time last year, Adrent Health was trying to recover from a crippling ransomware attack that hampered their ability to provide care across multiple states. MDR solutions can play a pivotal role in ensuring operational continuity, regulatory compliance, patient confidentiality, and keeping threats at bay with a proactive stance. Read more about what healthcare organizations can do to stay a step ahead of cybercriminals. https://lnkd.in/eMihqikN #MDR #XDR #HealthcareSecurity #HISAC

From our partner, Cynomi: “Quadrant Information Security has been an exceptional partner, playing a key role in driving our revenue growth while offering valuable feedback that helps us improve our product. Their trusted collaboration and ongoing insights have been crucial to our company’s progress. Additionally, they are always willing to assist other partners, whether it’s offering recommendations or answering questions.” Thank you to Cynomi for nominating Quadrant for the 2024 Channel Insider VIP List based on the strength of our partnership: https://lnkd.in/ejNDXB_C #channel #cybersecurity #XDR