Horizon3.ai

Critical SimpleHelp vulnerabilities fixed, update your server instances!

January 16, 2025

If you’re an organization using SimpleHelp for your remote IT support/access needs, you should update or patch your server installation without delay, to fix security …

Infosec products of the month: December 2024

December 27, 2024

Here’s a look at the most interesting products from the past month, featuring releases from: Appdome, Cato Networks, Datadog, Fortinet, GitGuardian, Horizon3.ai, Netwrix, …

New infosec products of the week: December 13, 2024

December 13, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Cato Networks, Horizon3.ai, SecureAuth, Stamus Networks, Trellix, and Versa …

Horizon3.ai NodeZero Insights enables executives to visualize changes in their security posture

December 10, 2024

Horizon3.ai launched NodeZero Insights, a platform designed for security leaders, CIOs, CISOs and practitioners. This new solution delivers real-time dashboards to measure, …

Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)

November 15, 2024

Attackers have been spotted exploiting two additional vulnerabilities (CVE-2024-9463, CVE-2024-9465) in Palo Alto Networks’ Expedition firewall configuration migration …

Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)

November 8, 2024

A vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition, a firewall configuration migration tool, is being exploited by attackers in the wild, the Cybersecurity and …

PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987)

September 25, 2024

Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk (WHD) vulnerability that could be exploited by …

PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190)

September 17, 2024

CVE-2024-8190, an OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) v4.6, is under active exploitation. Details about the attacks are still unknown, …

PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992)

May 29, 2024

Horizon3.ai researches have released proof-of-concept (PoC) exploits for CVE-2024-23108 and CVE-2023-34992, vulnerabilities that allow remote, unauthenticated command …

HHS pledges $50M for autonomous vulnerability management solution for hospitals

May 23, 2024

As organizations in the healthcare sector continue to be a prime target for ransomware gangs and CISA warns about a vulnerability (CVE-2023-43208) in a healthcare-specific …

Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788)

March 14, 2024

A recently fixed SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient Endpoint Management Server (EMS) solution has apparently piqued the interest of …

White House: Use memory-safe programming languages to protect the nation

February 27, 2024

The White House is asking the technical community to switch to using memory-safe programming languages – such as Rust, Python, Swift, C#, Java, and Go – to prevent …