NSFOCUS Launches NSFOCUS T-ONE CLOUD at RSAC 2023
![](https://nsfocusglobal.com/wp-content/uploads/2023/04/Feature-image-5.png)
abril 26, 2023
A Revolutionary Security Architecture Empowers ISPs, MSSPs and Hosting Providers To Deliver SOC-as-a-Service To Customers Santa Clara, Calif. April 26, 2023 – NSFOCUS, a leading provider of network security solutions and services, is proud to announce the launch of NSFOCUS T-ONE CLOUD, a cutting-edge security architecture designed specifically for Internet Service Providers (ISPs), Managed Security Service […]
NSFOCUS Blocked an 8-Day Persistent DDoS Attack with 386.5 Gbps Peak Traffic
![](https://nsfocusglobal.com/wp-content/uploads/2023/04/feature-image-7.png)
abril 25, 2023
What happened In March 2023, NSFOCUS security team blocked the worst DDoS attack of the year. The attack was targeted at an Internet service provider customer located in Brazil, with a peak attack traffic of 386.5 Gbps and astonishing total attack traffic of 1184.4 Tbps. This large-scale DDoS attack lasted for 8 days, posing huge […]
Spring Boot Security Bypass Vulnerability (CVS-2023-20873) Notice
![](https://nsfocusglobal.com/wp-content/uploads/2017/10/spring.png)
abril 25, 2023
Overview Recently, NSFOCUS CERT found that Spring officially issued a security notice, which fixed a Spring Boot authentication bypass vulnerability (CVE-2023-20873). When Spring Boot is deployed to Cloud Foundry and there is code/cloudFoundryapplication/* * that can handle matching requests, and used in conjunction with a catch all request mapping that matches/* *, unauthenticated remote attackers […]
Communication Port Between ADS M & Portal
abril 25, 2023
Scenario Integrate Portal on the External Network with ADS M on the Internal Network. Required Ports The Portal has a dedicated public IP address. ADS M intranet uses a single public egress IP for external connectivity, and any access to the public network must go through this IP. To establish a connection between Portal and […]
Apache Druid Remote Code Execution Vulnerability Notice
![](https://nsfocusglobal.com/wp-content/uploads/2019/11/Apache.jpg)
abril 24, 2023
Overview Recently, NSFOCUS CERT found that an Apache Druid remote code execution vulnerability was publicly disclosed online. Under default configuration, Apache Druid supports loading data from Kafka. Unauthenticated remote attackers can implement JNDI injection attacks by modifying Kafka connection configuration properties, ultimately leading to the execution of arbitrary code on the server. Affected users should […]
Google Chrome Skia Integer Overflow Vulnerability (CVS 2023-2136) Notice
![](https://nsfocusglobal.com/wp-content/uploads/2020/04/0421-1.jpg)
abril 24, 2023
Overview Recently, NSFOCUS CERT found that Google officially fixed an integer overflow vulnerability in Chrome Skia (CVE-2023-2136). Due to a flaw in Skia, when the value exceeds the maximum limit of integer type due to arithmetic operations, an integer overflow will occur. The attacker triggers this vulnerability by inducing users to open a specially crafted […]
Who Will Be the Winner? – Top 10 Finalists at RSAC 2023 Innovation Sandbox at a Glance
![](https://nsfocusglobal.com/wp-content/uploads/2023/04/Feature-image-4.png)
abril 23, 2023
RSAC Innovation Sandbox contest 2023 will be held on April 24th at Moscone South, San Francisco. As the “Oscar of Cybersecurity,” the RSAC Innovation Sandbox contest is highly anticipated every year. Let’s take a look at the top 10 finalists this year. Figure 1 The 2023 Top 10 Finalists The top 10 innovative sandbox […]
Looking Forward to Seeing You at RSAC 2023
abril 23, 2023
Moscone Center, South Hall, Booth # 4301 – San Francisco, CA, United States We are exhibiting at RSA Conference 2023. This is a great opportunity for you to network with cybersecurity’s forward-thinking global community and explore innovative, new technology. Connect with NSFOCUS executives and security experts to discuss how to manage unexpected risks with the best fit security […]
Oracle WebLogic Server Remote Code Execution Vulnerability (CVS 2023-21931) Notice
![](https://nsfocusglobal.com/wp-content/uploads/2019/01/oracle123.jpg)
abril 21, 2023
Overview Recently, NSFOCUS CERT found that Oracle officially issued a security notice to fix a remote code execution vulnerability in Oracle WebLogic Server (CVE-2023-21931). Due to a flaw in the getObject Instance () method of the WLNamingManager class in WebLogic, in the default configuration, unauthenticated remote attackers can pass in specific objects through T3/IIOP, ultimately […]
Apache Solr Remote Code Execution Vulnerability (CNVD-2023-27598) Notice
![](https://nsfocusglobal.com/wp-content/uploads/2019/11/Apache.jpg)
abril 20, 2023
Overview Recently, NSFOCUS CERT found that the analysis article of Apache Solr remote code execution vulnerability was publicly disclosed on the Internet. When Solr is launched in cloud mode and can go offline, an unauthenticated remote attacker can execute arbitrary code on the target system by sending multiple specially crafted packets. Please take measures to […]