March 2021 – CYNET-CSIRT

CISA Releases Supplemental Direction on Emergency Directive for Microsoft Exchange Server Vulnerabilities

Original release date: March 31, 2021CISA has issued supplemental direction to Emergency Directive (ED) 21-02: Mitigate Microsoft Exchange On-Premises Product Vulnerabilities providing additional forensic triage and server hardening, requirements for…

Comments Off

March 31, 2021

Bulletins

Vulnerability Summary for the Week of March 22, 2021

Original release date: March 29, 2021 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info apache -- ofbiz Apache OFBiz has unsafe deserialization prior to…

Comments Off

March 30, 2021

Events

Save the Date! Security Operations and Awereness: APT, Web Apps and Indicators of Compromise

It's with great pleasure that we'd like to announce to you that CYNET-CSIRT is organizing a Cyber Drill, with collaboration with silensec, on Friday 9th and Monday 12th of April…

0 Comments

March 25, 2021

Analysis Reports

MAR-10329499-1.v1: China Chopper Webshell

AR21-084B

Comments Off

March 25, 2021

Analysis Reports

MAR-10329496-1.v1: China Chopper Webshell

AR21-084A

Comments Off

March 25, 2021

Current Activity

Adobe Releases Security Updates for ColdFusion

Original release date: March 23, 2021Adobe has released security updates to address a vulnerability affecting ColdFusion. An attacker could exploit this vulnerability to take control of an affected system. CISA…

Comments Off

March 23, 2021

Bulletins

Vulnerability Summary for the Week of March 15, 2021

Original release date: March 22, 2021 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- creative_cloud_desktop_application Adobe Creative Cloud Desktop Application version 5.3…

Comments Off

March 23, 2021

Alerts

AA21-077A: Detecting Post-Compromise Threat Activity Using the CHIRP IOC Detection Tool

Original release date: March 18, 2021SummaryThis Alert announces the CISA Hunt and Incident Response Program (CHIRP) tool. CHIRP is a forensics collection tool that CISA developed to help network defenders…

Comments Off

March 18, 2021

Current Activity

TTP Table for Detecting APT Activity Related to SolarWinds and Active Directory/M365 Compromise

Original release date: March 17, 2021CISA has released a table of tactics, techniques, and procedures (TTPs) used by the advanced persistent threat (APT) actor involved with the recent SolarWinds and…

Comments Off

March 17, 2021

Alerts

AA21-076A: TrickBot Malware

Original release date: March 17, 2021SummaryThis Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and…

Comments Off

March 17, 2021