zero-days
Exploited React2Shell Flaw By LLM-generated Malware Foreshadows Shift in Threat Landscape
Attackers recently leveraged LLMs to exploit a React2Shell vulnerability and opened the door to low-skill operators and calling traditional indicators into question. ...
Understanding Application Detection and Response (ADR) | Contrast Security
The Application Security (AppSec) landscape is changing fast. With recent high-profile breaches and a wave of new Application Detection and Response (ADR) solutions hitting the market, it's crucial to understand why legacy ...
ADR Provides Application Visibility for CISOs | Closing Application Layer Gap | Contrast Security
Good cyber defense involves more than blocking and tackling. Without visibility into what’s happening, where and by whom, enterprises are hard-pressed to maintain solid protection of systems, networks and data. One area ...
Cisco Zero-Day: As Bad as it Gets — and No Fix 4 Weeks in
Keeping us in suspense—It doesn’t get worse than this: CVE-2023-20198 is CVSS=10 ...
iPhone/iPad Warning: Update Now to Avoid Zero-Day Pain
Apple’s embarrassing regression: iOS 17.0.3 fixes yet more nasty zero-days (and the overheating bug) ...
Threat-Informed Defense 101: Understanding the Basics
Over the last decade, the MITRE ATT&CK knowledge base has been widely adopted by thousands of security defenders, ultimately forming a strong community for ATT&CK users. Security teams have leveraged ATT&CK to ...
Attackers Weaponizing Zero-Days at Record Pace
Cybercriminals exploited a new remote code execution (RCE) zero-day, CVE-2021-40444, a week before a patch was released in September—that’s just one of the recent findings in a report by HP Wolf Security ...
Chrome Gets Patched Again—But 83% of Users Aren’t Running the Latest Version
Isolation Provides Malware-Free Browsing Regardless of Patch Status Imagine your life today without being able to freely browse the web. Browsers have put the entire world on our devices and in the ...
Update on DoD’s Cloud-Based Internet Isolation
I’m very proud of what we do at Menlo Security. We work very hard to make sure organizations and users around the world can safely access the tools and information they need ...
