Sedara arms you with everything you need to protect your cybersecurity infrastructure. From articles to white papers and video content to news updates, we ensure your organization is prepared to detect and eliminate threats to your network.
Cybersecurity terminology can be complicated. Not sure what something means? Look it up on our Cybersecurity Glossary of Terms >
Get our actionable content delivered to your inbox monthly (videos, blogs, papers, and more), and get timely updates on new and evolving threats–and what to do about them–just like our clients do.
Filter By:
Security Bulletin
Sedara Security Bulletin: Out-of-Bounds Write Vulnerability in FortiOS
Vulnerability: CVE-2024-21762 and CVE-2024-24113 Description of the vulnerability: Fortinet reports that there is an out-of-bounds write vulnerability in SSL-VPN, CVE-2024-21762 (CVSSv3 score 9.6). An out-of-bounds write vulnerability is similar to a buffer overflow, writing data beyond the boundaries of allocated memory. This vulnerability may allow a remote unauthenticated attacker to…
February 15, 2024
Security Bulletin
Sedara Security Bulletin: Microsoft Monthly Security Update
Summary Microsoft released their monthly security update on Tuesday, which included fixes for three zero-day vulnerabilities. These vulnerabilities are rated “important”. They affect services that are commonly enabled on core…
November 16, 2023
Security Bulletin
Sedara Security Bulletin: Akira Ransomware
Summary The Akira Ransomware Group is a new cybercriminal organization mainly targeting small and medium-sized organizations in the United States. Akria uses ransomware and data exfiltration to extort victims for…
August 17, 2023
Security Bulletin
Sedara Security Bulletin: Zimbra
Summary: Zimbra Collaboration Suite version 8.8.15 is vulnerable to a reflected cross-site scripting (XSS) flaw, due to inadequate input sanitization. Zimbra is a popular open-source email software package. The flaw…
July 20, 2023
Security Bulletin
Sedara Security Bulletin: Cisco SD-WAN vManage
Summary: A security flaw has been found in Cisco SD-WAN vManage, potentially allowing an unauthenticated attacker to bypass security measures for read and limited write access to the device. Cisco…
July 19, 2023
Security Bulletin
Sedara Security Bulletin: MOVEit Transfer
Summary: On May 31 2023, the vendor Progress Software released a security advisory about its product, MOVEit Transfer managed file transfer (MFT) software. MOVEit has been used by thousands of…
June 4, 2023
Security Bulletin
Sedara Security Bulletin: PaperCut Software Vulnerabilities
Summary: PaperCut is enterprise software used for print and file management. They recently published two vulnerability reports for high-severity security issues in their PaperCut MF/NG products. The most severe vulnerability…
May 1, 2023
Security Bulletin
Sedara Security Bulletin: Microsoft Outlook Elevation of Privilege Vulnerability
Summary: Recently, Microsoft discovered a vulnerability in Microsoft Outlook for Windows. The vulnerability lets a remote, unauthenticated attacker to steal a victim’s NTLMv2 hash by sending a specially crafted email…
March 16, 2023
Security Bulletin
Sedara Security Bulletin: GoTo and LastPass Security Incidents
Summary: GoTo, formerly known as LogMeIn and the parent company of LastPass, released a security advisory about a malicious actor stealing encrypted backups for several GoTo products: Central Pro Join.me…
January 31, 2023
Security Bulletin
Sedara Security Bulletin: Malicious Use of RMM Software
Summary: CISA, the NSA, and the MS-ISAC have released a joint Cybersecurity Advisory (CSA) of the malicious use of legitimate Remote Monitoring and Management (RMM) software, including ScreenConnect and AnyDesk.…
January 27, 2023
Security Bulletin
Sedara Security Bulletin: NYSIC CAU Ransomware Variant
Summary (provided by NYSIC): The New York State Intelligence Center (NYSIC) Cyber Analysis Unit (CAU) received updated current IOCs by a trusted 3rd party regarding a ransomware incident that is…
January 20, 2023