22 DDoS Attacks to See Trends in 2023
March 23, 2023
2022 was a turbulent year full of regional conflicts. NSFOCUS Global Threat Hunting System detected a large number of DDoS worldwide in 2022, with some governments or banks suffering from the largest attacks in their history. Launching a DDoS attack is not expensive but can paralyze critical infrastructure and network systems, bringing huge economic losses […]
NSFOCUS Joins CNCF Cloud Native Landscape
March 21, 2023
Santa Clara, Calif. March 21, 2023 – NSFOCUS, a global provider of intelligent hybrid security solutions, today announced that its Metarget project has been included in CNCF Cloud Native Landscape in the field Security & Compliance of the Provisioning Category. CNCF Introduction The Cloud Native Computing Foundation (CNCF) was founded in 2015 by Google and […]
Adobe ColdFusion Multiple Security Vulnerabilities Notification
March 20, 2023
Vulnerability Overview Recently, NSFOCUS CERT monitored that Adobe has officially released security notices and fixed multiple Adobe ColdFusion vulnerabilities. Please take protective measures as soon as possible. Key vulnerabilities are as follows: Adobe ColdFusion deserialization vulnerability (CVE-2023-26359): Due to a flaw in Adobe ColdFusion’s deserialization security check, unauthenticated remote attackers can conduct deserialization attacks by […]
New Feature – Upgrade of Detection Rules via the Cloud in NTA V4.5R90F04
March 20, 2023
Function Description This function will be available in NTA V4.5R90F04 in Q2 2023. NTA allows online upgrades of the DDoS detection rule library for automatic protection. This function can meet most of the current customization requirements by providing the latest detection rules against new types of DDoS attacks. Configuration Procedure Obtain the upgrade package of […]
Microsoft Outlook Privilege Escalation Vulnerability (CVE-2023-23397) Notification
March 18, 2023
Overview Recently, NSFOCUS CERT has monitored that Microsoft has officially released a patch update, which fixes a Microsoft Outlook privilege escalation vulnerability. An unauthenticated attacker sends a specially crafted email, causing the victim to connect to an external UNC location controlled by the attacker, causing the victim’s Net-NTLMv2 hash to be disclosed to the attacker. […]
GISEC Global 2023
March 17, 2023
GISEC Global, March 14-16, 2023, Dubai World Trade Centre, Dubai NSFOCUS participated in GISEC Global 2023 in Dubai, a great opportunity to connect with local partners, industry-leading experts and technology innovators. NSFOCUS team presented our solutions and services to booth visitors with hands-on demonstrations.
NSFOCUS Releases 2022 Global DDoS Attack Landscape Report
March 16, 2023
Santa Clara, Calif. March 16, 2023 – NSFOCUS, a global provider of intelligent hybrid security solutions, today released its “2022 Global DDoS Attack Landscape Report” which includes many findings to help organizations and users defend against DDoS attacks. According to the report, The DDoS attack landscape remains challenging. The increasing number of DDoS attacks in 2022 […]
NSFOCUS DDoS Attack Landscape Report 2022
March 16, 2023
The DDoS attack landscape remains challenging. While organizations continue to explore new defense methods to protect against DDoS attacks proactively, attackers never stop creating sly and novel tactics to take down the target services. Download a copy of the full report to learn more.
Microsoft’s March security update for multiple high-risk product vulnerabilities
March 15, 2023
Overview On March 15, NSFOCUS CERT monitored that Microsoft had released a security update patch for March, which fixed 82 security issues, involving widely used products such as Windows Hyper-V, Microsoft Outlook, Windows HTTP Protocol Stack, Microsoft Graphics, Microsoft Excel, etc., including high-risk vulnerability types such as privilege enhancement, remote code execution, etc. Among the […]
Apache Dubbo Deserialization Vulnerability Notice (CVE-2023-23638)
March 14, 2023
Overview Recently, NSFOCUS CERT detected that Apache officially issued a security notice, fixing an Apache Dubbo deserialization vulnerability (CVE-2023-23638). Due to the flaws in Apache Dubbo’s deserialization security check, remote attackers can construct malicious data packets to conduct deserialization attacks, and finally execute arbitrary code on the target system. Affected users are requested to take […]
