Pay Attention to New SLP Vulnerability That May Lead to Massive DDoS Amplification Attacks
![](https://nsfocusglobal.com/wp-content/uploads/2020/06/ddos.jpg)
May 23, 2023
A new reflective Distributed-Denial-of-Service (DDoS) amplification vulnerability was recently discovered in the Service Location Protocol (SLP), which allows attackers to achieve a high amplification factor of over 2,200 times. This vulnerability has been identified as CVE-2023-29552, potentially making it one of the largest amplification attacks ever recorded. SLP is a protocol that provides a dynamic […]
How to Power Off ADS M Portal Properly
May 22, 2023
To ensure proper shutdown of the ADS M Portal, it is recommended to synchronize memory data with the hard disk before initiating a shutdown. The command for this is sync. Failure to do so may result in data loss. After synchronization, you may proceed with the shutdown command for power off, instead of power off […]
Linux Kernel Privilege Escalation Vulnerability (CVS 2023-32233) Notice
![](https://nsfocusglobal.com/wp-content/uploads/2019/06/linux.jpg)
May 18, 2023
Overview Recently, NSFOCUS CERT found that the PoC of Linux Kernel privilege escalation vulnerability (CVE-2023-32233) was publicly disclosed online. There is a use-after-free vulnerability in Linux kernel’s subsystem Netfilter nf_tables, which can be exploited by authenticated local attackers to perform arbitrary read and write operations in kernel memory, ultimately elevating permissions to ROOT. The CVSS […]
Retrospective of Insights at RSAC 2023: The Secret Life of Enterprise Botnets
![IoT botnets](https://nsfocusglobal.com/wp-content/uploads/2020/10/IoT-report1-e1684397874265.jpg)
May 18, 2023
Secret Life of Enterprise Botnets The Secret Life of Enterprise Botnets is a speech in a session of RSA Conference 2023 by Dr. Craig Labovitz, Head of Technology for the Deepfield business unit at Nokia. In collaboration with global Internet providers, researchers tracked more than 500,000 compromised enterprise servers, security cameras and IoT (HVAC, PoS, […]
Configuring TCP Flood Protection on NSFOCUS WAF
May 16, 2023
According to the working principle of TCP/IP, only a certain amount of TCP/IP connections are allowed. Attackers exploit this to launch TCP flood attacks, which are divided into two types: An attacker sends too many SYN packets to a target server for processing, exhausting the server’s resources and making the server unresponsive to legitimate traffic. […]
Key Technologies for Software Supply Chain Security – Data Security Technology
![](https://nsfocusglobal.com/wp-content/uploads/2022/10/Chain-scaled-e1666342354234.jpg)
May 15, 2023
According to Gartner’s supply chain security risk report in 2021[1], breaches of confidential or sensitive information constitute another major factor contributing to software supply chain risks. Hackers steal hard-coded credentials in source code, building logs, and infrastructure, such as API keys, encryption keys, tokens, and passwords, or locate vulnerabilities in a leaked software bill of […]
Microsoft’s May security update for multiple high-risk product vulnerabilities
![](https://nsfocusglobal.com/wp-content/uploads/2020/11/microsoft.jpg)
May 11, 2023
Overview On May 10, NSFOCUS CERT monitored that Microsoft had released a security update patch for May, which fixed 38 security issues, involving Win32k, Windows OLE, Microsoft SharePoint Server, Windows Pragmatic General Multicast (PGM) and other widely used products, including high-risk vulnerability types such as privilege enhancement and remote code execution. Among the vulnerabilities fixed […]
A Recap of NSFOCUS Seminar on “Are You Ready for the Evolving DDoS Threat Landscape? “
![](https://nsfocusglobal.com/wp-content/uploads/2019/07/AdobeStock_105957285.jpg)
May 11, 2023
In the middle of April, NSFOCUS held a seminar on “Are You Ready for the Evolving DDoS Landscape?”. In the seminar, David Gao, Principal Security Solution Architect of NSFOCUS summarized the findings of the Global DDoS Attack Landscape in 2022 and gave his insights on the trends to help customers protect against the evolving DDoS attacks. Some topics […]
NSFOCUS 2022 Cybersecurity Insights: A Summary
![](https://nsfocusglobal.com/wp-content/uploads/2023/05/Image.png)
May 10, 2023
NSFOCUS is a leading provider of enterprise-level network security solutions and services. NSFOCUS has released the annual cybersecurity insights report in April, which analyzed the overall trends, threats, and challenges in the cyber landscape. The full NSFOCUS Cybersecurity Insights for 2022 report is available here. Here are some of the key findings from the report: […]
GitLab Code Execution Vulnerability (CVS 2023-2478)
![](https://nsfocusglobal.com/wp-content/uploads/2020/01/0124-2.jpg)
May 9, 2023
Overview Recently, NSFOCUS CERT monitored that GitLab officially issued a security notice, and fixed a code execution vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE) (CVE-2023-2478). Remote attackers with low privileges can add malicious Runners to any project of the instance through GraphQL endpoints, further exploiting the ability to execute arbitrary code or […]