Orani Amroussi, Author at Vulcan Cyber

GET A DEMO

The BIGGEST CVEs of Q1 2024: Get the quarterly report

Attack surface management: A practitioner’s guide

Vulcan Cyber helped an enterprise payment platform reduce critical risk by 50% | Learn how >>

Vulcan Cyber named a RBVM Leader by The OMDIA Universe >>

GET A DEMO

How to fix CVE-2023-32243 in Elementor Essential Addons

A vulnerability has been discovered in Essential Addons for Elementor, a popular WordPress plugin with over one million active installations. The vulnerability, tracked as CVE-2023-32243, allows an unauthenticated attacker to reset the password of any user on the affected site, effectively granting them administrator privileges. Here’s what we know so far: What is CVE-2023-32243? CVE-2023-32243… Continue reading How to fix CVE-2023-32243 in Elementor Essential Addons

CISA’s KEV additions: Linux under threat?

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently expanded its Known Exploited Vulnerabilities catalog by adding seven more Linux-related vulnerabilities. Interestingly, some of these vulnerabilities aren’t fresh threats; one even traces back to 2010. Despite their age, these vulnerabilities are still being actively exploited, causing significant concerns for federal enterprises. Among the new entries… Continue reading CISA’s KEV additions: Linux under threat?

“Ideal for an overwhelmed security team” – how Vulcan Cyber mitigates vulnerability risk

This case study was adapted from a TrustRadius review of Vulcan Cyber. You can read it here. A rapidly-growing insurance company needed a solution to help them get a clear picture of vulnerabilities across all cyber attack surfaces to prioritize and mitigate risk. They chose Vulcan Cyber to get the most out of their security… Continue reading “Ideal for an overwhelmed security team” – how Vulcan Cyber mitigates vulnerability risk

How to fix CVE-2023-2033 in Google Chrome

Google has released an urgent update to address a zero-day vulnerability actively exploited in its Chrome web browser, identified as CVE-2023-2033. This vulnerability, considered highly severe, has been classified as a type confusion issue in the V8 JavaScript engine. Here’s what you need to know: Does CVE-2023-2033 affect me? The vulnerability affects users of Google… Continue reading How to fix CVE-2023-2033 in Google Chrome

How to fix CVE-2023-25610 in FortiOS

Fortinet issued an advisory on March 7th regarding CVE-2023-25610, a severe remote code execution (RCE) vulnerability found in its operating system, FortiOS. The flaw, which stems from a buffer underwrite bug in the administrative interface, may enable a malicious remote unauthenticated attacker to execute code through carefully crafted requests. Here’s everything you need to know:… Continue reading How to fix CVE-2023-25610 in FortiOS

What Is spaghetti code and why is it a problem?

More than sloppy programming: how “spaghetti code” increases cyber risk When writing source code, one habit programmers should avoid is spaghetti coding. Left unchecked, it could cause multiple problems for your organization’s infrastructure later on. Here we discuss what spaghetti code is and why getting rid of it is a major factor in your cyber… Continue reading What Is spaghetti code and why is it a problem?

How to fix CVE-2023-22501 in Jira

On February 1, 2023, Atlassian issued an advisory for CVE-2023-22501, a critical broken authentication vulnerability affecting its Jira Service Management Server and Data Center offerings. Jira Service Management Server and Jira Service Management Data Center are additional features that run on top of Jira Core. Here’s everything you need to know about CVE-2023-22501: What is… Continue reading How to fix CVE-2023-22501 in Jira

LearnPress vulnerabilities: the importance of updating your plugins

In all likelihood, your site is powered by WordPress, the world’s most popular website content management system. With over 40% of websites relying on this platform, it’s no wonder that it’s the go-to choice for many. One of the biggest draws of WordPress is its ability to extend its functionality through plugins. There are tens… Continue reading LearnPress vulnerabilities: the importance of updating your plugins

8 cyber risk trends you should know about in 2022

This blog is an excerpt highlighting just some of the cyber risk trends from the latest report, Cyber risk in 2022: a 360° view, produced together with the Voyager18 team. You can read it here. The cyber threat landscape evolves rapidly. Over the past year, it is safe to say that security breaches, data leaks,… Continue reading 8 cyber risk trends you should know about in 2022

The one platform to own your risk

OVERVIEW

CAPABILITIES

USE CASES

SOLUTIONS

LIBRARY

CVE LAB

GET TO KNOW US

GET IN TOUCH

Author: Orani Amroussi