New Attack Could Let Remote Hackers Target Devices On Internal Networks
A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research.
Detailed by enterprise IoT security firm Armis, the new attack (CVE-2020-16043 and CVE-2021-23961) builds on the previously disclosed technique to bypass routers and firewalls and reach any unmanaged device within the internal network from the Internet.
First disclosed by security researcher Samy Kamkar in late October 2020, the JavaScript-based attack relied on luring a user into visiting a malicious website to circumvent browser-based port restrictions and allow the attacker to remotely access TCP/UDP services on the victim s device, even those that were protected by a firewall or NAT.
Forrester Now Tech: External Threat Intelligence Services, Q4 2020 Report
With the right intelligence at your fingertips from vulnerability intelligence to uncover weaknesses in your tech stack and brand intelligence to uncover brand attacks on the dark web you can view your threat landscape from a variety of angles to disrupt adversaries and measurably reduce cyber risk.
Download this new Forrester report to explore the threat intelligence evolution, and learn how placing the right intelligence at the core of your teams, workflows, and technologies drives value and risk reduction across the entire organization.
V10 | Issue 15 | 1.25.21
Russia s FSB warns of heightened threat of US cyberattack. Solorigate and ICS. OPC flaws. SonicWall discloses cyberattack.
Gamarue schools remote learners. Lessons from Solorigate. New Zealand central bank delays reporting. RDDoS rising.
Today s issue includes events affecting Australia, the European Union, France, Russia, the United States, and Vietnam.
A note to our readers: our monthly Creating Connections is up, covering news for and about women in cybersecurity. This issue looks at setting your goals for 2021, and features insight into the day-to-day realities of a career in cybersecurity.
The speed of automation and hacker expertise is a security game changer.
Today developers largely outnumber security engineers by 100:1 and there are few people with access to security expertise. Turning to ethical hackers for knowledge to bolster security toolboxes is a growing trend in the community. Detectify CEO Rickard Carlsson discusses how security startups are challenging conventional cybersecurity solutions using the speed of automation and hacker expertise, and how these game changers are involving d