Eclypsium | Supply Chain Security for the Modern Enterprise

An unauthenticated attacker can crash any Cisco ASA or FTD with SSL VPN exposed; it’s been confirmed exploited in the wild, and Cisco hasn’t told us who or why.

The post The EU CRA Clock is Ticking:Are You Compliant? appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

A recent ransomware incident at Coca-cola owned dairy company Fairlife provides a potent example of network edge devices being targeted for exploitation, and of the scale of outcomes attackers can achieve by exploiting them.

According to reporting from MSN and others, the ransomware attack caused Fairlife to temporarily suspend production across its U.S. facilities ...

In episode 80 of Below the Surface, Paul Asadoorian is joined by Chase Snyder and Vlad Babkin for a wide-ranging conversation about the infrastructure risks that remain easy to overlook until attackers start using them. The episode begins with a brief reflection on Black Hat USA coverage, then moves quickly into BMC exposure, IPMI weaknesses, AI-assisted vulner...

In this episode of Below the Surface, Paul Asadoorian is joined by Chase Snyder and Vlad Babkin for a conversation about InfraTrust, InfraTrust Pulse, and the hard problem of making infrastructure vulnerability data useful for defenders.

The first half of the episode focuses on why infrastructure advisories are harder to track than ordinary CVE feeds ...