-
2 months ago | 
gulfbusiness.com | Neesha Salian |Satnam Narang
For many years, scammers have been exploiting dating apps and messaging platforms to target victims looking for companionship. Romance scams affect people of all ages and backgrounds, but older individuals, former military personnel and those seeking financial arrangements are among the most vulnerable. In November last year, Meta said it had identified and removed more than two million accounts in 2024 connected to romance scams.
-
Jan 16, 2025 | 
technologyforyou.org | Satnam Narang
By Satnam Narang, Sr. Staff Research Engineer, TenableMicrosoft patched a whopping 157 CVEs in its inaugural Patch Tuesday for 2025. Not only is this the largest number of CVEs patched in January, it is the largest number of CVEs patched across any Patch Tuesday release since 2017. Microsoft set a record in April 2024, patching 147 CVEs. Since 2017, the average number of CVEs patched in January was 60.
-
Jan 8, 2025 | 
tenable.com | Satnam Narang
Ivanti disclosed two vulnerabilities in its Connect Secure, Policy Secure and Neurons for ZTA gateway devices, including one flaw that was exploited in the wild as a zero-day.
-
Jan 8, 2025 | 
securityboulevard.com | Satnam Narang
CVE-2025-0282: Ivanti Connect Secure Zero-Day Vulnerability Exploited In The WildIvanti disclosed two vulnerabilities in its Connect Secure, Policy Secure and Neurons for ZTA gateway devices, including one flaw that was exploited in the wild as a zero-day.BackgroundOn January 8, Ivanti published a security advisory for two vulnerabilities affecting multiple products including Ivanti Connect Secure, Ivanti Policy Secure and Ivanti ...
-
Nov 24, 2024 | 
itwire.com | Satnam Narang
GUEST RESEARCH: ASD has just released its Annual Cyber Threat Report and some of the incidents outlined were the result of exploiting public-facing applications and compromised accounts or credentials. Please find further comments below from Satnam Narang, sr. staff research engineer, Tenable. "The Annual Cyber Threat Report from the ASD's ACSC provides insights into the real-life cybersecurity incidents that affect organisations.
-
Nov 18, 2024 | 
tenable.com | Satnam Narang
November 18, 2024 • 3 Min Read by Satnam Narang Blog Home / Cyber Exposure Alerts Palo Alto Networks confirmed two zero-day vulnerabilities were exploited as part of attacks in the wild against PAN-OS devices, with one being attributed to Operation Lunar Peek.
-
Nov 18, 2024 | 
securityboulevard.com | Satnam Narang
Palo Alto Networks confirmed two zero-day vulnerabilities were exploited as part of attacks in the wild against PAN-OS devices, with one being attributed to Operation Lunar Peek. Update November 19: The blog has been updated with a link to new technical analysis that could aid in the creation of a proof-of-concept, as well as guidance for identifying PAN-OS devices using Tenable Attack Surface Management.
-
Nov 13, 2024 | 
globalsecuritymag.fr | Satnam Narang
Tenable commente le Patch Tuesday de Microsoft du mois de novembre 2024Microsoft vient de dévoiler son patch Tuesday et a annoncé avoir corrigé quatre vulnérabilités de type zero-day, dont deux exploitées activement. Les commentaires suivants sont signés par Satnam Narang, Ingénieur de recherche senior chez Tenable. La vulnérabilité CVE-2024-43451 est une faille de falsification affectant toutes les versions de Microsoft Windows prises en charge et ayant été exploitée dans la nature.
-
Oct 30, 2024 | 
shorturl.at | Satnam Narang
OT networks are a complex integration of cyber-physical systems, such as ICS, SCADA, and PLC environments. Historically, attacks on these networks required extensive planning, often taking months or years for threat actors to gather intelligence on the design and architecture of OT deployments. However, attackers are accelerating efforts to target OT systems.
-
Oct 23, 2024 | 
tenable.com | Satnam Narang
Frequently asked questions about a zero-day vulnerability in Fortinet’s FortiManager that has reportedly been exploited in the wild. BackgroundThe Tenable Security Response Team (SRT) has compiled this blog to answer Frequently Asked Questions (FAQ) regarding a zero-day vulnerability in Fortinet’s FortiManager. FAQWhat is FortiJump? FortiJump is a name given to a zero-day vulnerability in the FortiGate-FortiManager (FGFM) protocol in Fortinet’s FortiManager and FortiManager Cloud.
