Displaying items by tag: Volexity

Security firm Volexity says it has discovered active exploitation of two zero-day vulnerabilities in Ivanti Connect Secure VPN, with the two flaws being chained to allow an unauthenticated remote control exploit.

New York-based cloud security firm Wiz has warned companies and organisations affected by the recent Microsoft Azure breach that the impact of the intrusion may be much wider than reported, and could affect applications beyond those claimed by Microsoft to be impacted.

Apparently stung by the criticism of both vendors and security practitioners over the lack of logs to analyse a recent breach of its cloud service, Microsoft has backed down to some extent on charging customers for providing access to logging services.

Well-known American security expert Jake Williams has weighed in on the recent breach of Microsoft's cloud at a number of government agencies, saying that it was not acceptable that any security provider should charge a logging tax.

Microsoft has issued an advisory stating that four zero-day exploits are being used to attack versions of Microsoft Exchange Server on-premise.