Blog

Home > Resources > Blog

Latest

Basic Authentication Versus CSRF

September 21, 2023

By Joe Sullivan in Application Security Assessment, Security Testing & Analysis

Featured

Okta for Red Teamers

September 18, 2023

By Adam Chester in Red Team Adversarial Attack Simulation

ESXiArgs: What you need to know and how to protect your data

February 7, 2023

By Tyler Hudak, Liz Waddell, Justin Vaicaro, Steven Erwin, Shane Hartman, Olivia Cate and Thomas Millar in Incident Response, Incident Response & Forensics, Threat Hunting

Threat Overview Around February 03, 2023, a ransomware campaign called “ESXiArgs” emerged that targeted Internet-facing VMware ESXi servers running versions older than 7.0. Though not confirmed, it has been reported by the French CERT (CERT-FR), BleepingComputer, and other sources that the campaign leverages CVE-2021-21974, which is a three-year-old vulnerability in the OpenSLP component of the...

Read