Overview Recently, NSFOCUS CERT detected a vulnerability in Grafana's authentication bypass (CVE-2023-3128). Azure AD can support multiple users with the same email address. When configuring Azure AD to support multiple users, unauthenticated attackers can exploit this vulnerability by creating malicious email account requests. Due to Grafana's failure to uniquely authenticate...
Category: Blog
VMware vCenter Server Multiple High Risk Vulnerabilities Notification
Overview Recently, NSFOCUS CERT found that VMware's official security announcement disclosed multiple vulnerabilities in VMware vCenter Server, which could be used by attackers to cause remote code execution, cross-border write and read, etc. Currently, the official version has been updated and fixed. Affected users should take protective measures as soon...
An Insight into RSA 2023: Using AI to Synthesize De-identified Data
At the 2023 RSA conference, CISO and researchers from Virginia's Department of Behavioral Health and Developmental Services shared a topic entitled " Rise of the Machines: Achieving Data Security and Analytics with AI". They proposed the use of artificial intelligence to rapidly synthesize "de-identified" data, thus avoiding significant resource consumption...
Fortinet FortiNAC Remote Code Execution Vulnerability (CVS 2023-33299) Notification
Overview Recently, NSFOCUS CERT monitored that Fortinet officially fixed a Fortinet FortinaC remote code execution vulnerability (CVE-2023-33299). Unauthenticated remote attackers can exploit this vulnerability by sending a customized request to the service running on TCP port 1050, and an attacker who successfully exploits this vulnerability can execute arbitrary code on...
An Insight into RSA 2023: Capabilities Utilization for Container Escape
At the RSA Conference this year, researchers from Cyberason shared the topic of Container Escape: All You Need Is Cap (Capabilities), detailing three methods of using Cap permissions for container escape, hoping to make users pay attention to the permission allocation of Capabilities when using containers and maintain best practices....
An Insight into RSAC 2023: Build Cloud-Native Security Base Based on Zero Trust
At the 2023 RSA conference, Tracy Walker, Senior Security Engineer from SUSE NeuVector, shared with us a transparent (business- and environment-neutral) approach to blocking 0-Day attacks in K8S environments – Zero Trust Principle and demonstrated it using an open source tool, NeuVector. Based on Tracy's zero-trust viewpoint and the SUSE...
