Blue Team Alpha Insights

Part 3: A Proactive Approach to Building Cyber Resilience In the complex landscape of cybersecurity, where the battle between defenders and attackers unfolds, one thing remains clear: understanding vulnerability management is paramount to safeguarding your organization against the persistent threat of data breaches and cyberattacks. This is Part 3, the final act of our comprehensive blog series, where we delve deep into the realm of vulnerability management. In Parts 1 and 2, we’ve journeyed through the heart of vulnerabilities, uncovering their significance and the essential steps in managing them. In this last installment, we conclude our exploration, arming you with

Executive summary On September 30th, 2022, GTSC, a Vietnamese cybersecurity company, released a warning stating, “while providing SOC service to a customer, GTSC Blueteam detected exploit requests in IIS logs with the same format as ProxyShell vulnerability.” This vulnerability would allow attackers to formulate a specially crafted HTTP request to the on-prem exchange server over port 443, enabling the attacker to execute malicious remote code on the system as the “SYSTEM” user. Microsoft confirmed both zero-day vulnerabilities late the evening of September 29, 2022 and said they were aware of “limited, targeted attacks using the two vulnerabilities to get into