Ofri Ouzan

May 3, 2024 | securityboulevard.com | Mike Vizard |Ofri Ouzan |Erik Hjelmvik |David Harley

There may be persuasive reasons why providers are reluctant to engage directly with their customers, but the consequences may be grim for both provider and customer. (Plus links to stories about Nigerian ...

Nov 17, 2023 | medium.com | Ofri Ouzan

HardeningMeter is a Python-based open-source tool developed as a pivotal part of my extensive research into security mechanisms within ELF files and the Linux kernel. While many turn to the widely used checksec tool for such assessments, my experience revealed its limitations - lack of accuracy, insufficient documentation, and an absence of coverage for specific ELF types and linking processes.

Oct 11, 2023 | securityboulevard.com | Ofri Ouzan

On October 5, 2023, we a blog post discussing the Curl Vulnerability, the critical security issue in Curl and libcurl version 8.4.0, known as CVE-2023-38545. In addition, there was another low-severity vulnerability, CVE-2023-38546. These vulnerabilities were scheduled to be disclosed on October 11, creating significant anticipation. Now, that long-awaited date has arrived, bringing with it detailed information about the vulnerabilities, along with the release of the necessary patches.

Sep 14, 2023 | securityboulevard.com | Ofri Ouzan

On September 12th, 2023, Microsoft released their September Patch Tuesday and revealed 59 Microsoft CVEs; 47 of them are HIGH severity and 12 of them are MEDIUM severity, along with 7 other non-Microsoft CVEs. CVE-2023-36802 and CVE-2023-36761 are known to be exploited in the wild according to the CISA KEV Catalog . The vulnerabilities affect popular platforms such as 3D Viewer, Microsoft Office, .NET, Visual Studio, and more.

Sep 14, 2023 | securityboulevard.com | Ofri Ouzan

By Ofri Ouzan On September 12th, 2023, Microsoft released their September Patch Tuesday and revealed 59 Microsoft CVEs; 47 of them are HIGH severity and 12 of them are MEDIUM severity, along with 7 other ...