Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Jithin Nair

Jithin Nair

Sr Manager, Security Research
Job scams impersonate companies still hiring following tech layoffs
Security Insights
5 Min read

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information a...
FreeBSD Ping Stack-Based Overflow Security Advisory
Security Insights
4 Min read

Security Advisory for FreeBSD Ping Stack-Based Overflow CVE-2022-23093

Background On Dec 01, 2022, a stack overflow vulnerability CVE-2022-23093 was found in the FreeBSD operating system (all supported versions) ping utility. The issue is a buffer overflow vulnerability affecting the “p...
OpenSSL Vulnerabilities CVE-2022-3602 & CVE-2022-3786
Security Insights
5 Min read

Security Advisory for OpenSSL Vulnerabilities CVE-2022-3602 & CVE-2022-3786

Background On 01-Nov-2022, OpenSSL published an advisory about two high-severity security flaws - CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Bu...
Coverage Advisory for CVE-2022-30190
Security Insights
3 Min read

Coverage Advisory for CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Background On May 27, 2022, nao_sec found a malicious Word document submitted to Virustotal from a Belarus IP address. The document was abusing MS-MSDT URI scheme to execute PowerShell within the context of Word bypas...
Spring Cloud Framework Vulnerabilities
Security Insights
5 Min read

Analysis of Spring Cloud Framework Vulnerabilities

Background: Over the past few days, the Zscaler ThreatLabz team has been closely monitoring the reports of potential RCEs in Spring Cloud Framework and Spring Cloud Function. Spring is an open-source lightweight Ja...
ThreatLabz security advisory
Security Insights
6 Min read

ThreatLabz Security Advisory: Cyberattacks Stemming from the Russia-Ukraine Conflict [Updated: March 21, 2022]

Updated Security Advisory - March 21, 2022 Earlier today, US President Joe Biden issued a statement warning of the potential for malicious cyber conduct against the United States as a response to economic sanctions ag...
CVE-2021-44228 Log4j2 Remote Code Execution (RCE) Vulnerability
Security Insights
3 Min read

Security Advisory: Log4j 0-Day Remote Code Execution Vulnerability (CVE-2021-44228)

Background The Apache Software Foundation has released a security advisory with patch and mitigation details to address a remote code execution vulnerability (CVE-2021-44228) affecting Log4j versions 2.0-beta9 to 2.14.1...
Zero-day Exploits Related to Microsoft Exchange Servers
Security Insights
3 Min read

Coverage Advisory for Exploits Related to Microsoft Exchange Servers

Update [19-Mar-2021] Microsoft has released to GitHub the new Microsoft Exchange On-Premises Mitigation Tool and posted a blog with step-by-step instructions on how to use the tool. This is a free, one-click tool desi...
Ransomware
Ransomware
2 Min read

Coverage Advisory for Ransomware Activity Targeting Healthcare and Public Health Sector

Background A joint cybersecurity advisory was released by the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS) r...
Targeted attacks on Australian Networks (ACSC Advisory) - Zscaler Coverage
Security Insights
4 Min read

Targeted attacks on Australian Networks (ACSC Advisory) - Zscaler Coverage

Background Earlier today Australian Cyber Security Centre (ACSC) released an advisory regarding a cyber campaign targeting Australian networks. The campaign is dubbed ‘Copy-paste compromises’ due to the threat actor’s...
Zscaler Coverage for the Maze Ransomware
Ransomware
2 Min read

Zscaler Coverage for the Maze Ransomware

In this blog, the Zscaler ThreatLabZ team provides details on the Maze ransomware. Background On April 18, 2020, Cognizant confirmed a security incident causing service disruptions for some of its clients due to a ...
A look at recent Emotet Campaigns - August 2017
Security Insights
3 Min read

A look at recent Emotet Campaigns - August 2017

Introduction Emotet, the credential stealing banking Trojan, was first reported in 2014 when it wreaked havoc in Europe and the United States. The Zscaler Threat Research team has been monitoring the new variant...

Related Articles

Explore More Topics