Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP 01/19/2022 11:51 AM EST Original release date: January 19, 2022 Zoho has released a security advisory to address an authentication bypass vulnerability (CVE-2021-44757) in ManageEngine Desktop Central and Desktop Central MSP. An attacker could exploit this vulnerability to take control of an affected… Continue reading Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP 12/06/2021 04:20 PM EST Original release date: December 6, 2021 Zoho has released a security advisory to address an authentication bypass vulnerability in ManageEngine Desktop Central and Desktop Central MSP. An attacker could exploit this vulnerability to take control of an affected system.… Continue reading Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA Adds Five Known Exploited Vulnerabilities to Catalog 12/01/2021 10:47 AM EST Original release date: December 1, 2021 CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for… Continue reading CISA Adds Five Known Exploited Vulnerabilities to Catalog

Security Researchers Reveal Activity Targeting ManageEngine ADSelfService Plus

Security Researchers Reveal Activity Targeting ManageEngine ADSelfService Plus 11/09/2021 09:48 AM EST Original release date: November 9, 2021 On September 16, CISA released a joint alert on exploitation of a vulnerability (CVE-2021-40539) in ManageEngine ADSelfService Plus. On November 8, security researchers from Palo Alto Networks and Microsoft Threat Intelligence Center (MSTIC) released separate reports on… Continue reading Security Researchers Reveal Activity Targeting ManageEngine ADSelfService Plus

FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability 09/16/2021 12:14 PM EDT Original release date: September 16, 2021 The Federal Bureau of Investigation (FBI), CISA, and Coast Guard Cyber Command (CGCYBER) have released a Joint Cybersecurity Advisory (CSA) detailing the active exploitation of an authentication bypass vulnerability (CVE-2021-40539) in Zoho ManageEngine ADSelfService Plus—a… Continue reading FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

Zoho Releases Security Update for ADSelfService Plus

Zoho Releases Security Update for ADSelfService Plus 09/07/2021 06:24 PM EDT Original release date: September 7, 2021 | Last revised: September 8, 2021 Zoho has released a security update on a vulnerability (CVE-2021-40539) affecting ManageEngine ADSelfService Plus builds 6113 and below. CVE-2021-40539 has been detected in exploits in the wild. A remote attacker could exploit… Continue reading Zoho Releases Security Update for ADSelfService Plus