Insights

We continue our lookback at the biggest cyber attacks of 2024… so far. Read Part one HERE

As 2024 draws to a close, numerous high-profile cyber incidents have dominated the headlines. With only two and a half months remaining and the Christmas season approaching, it's likely we'll see even more before year’s end. In this blog, the Integrity360 Incident Response team explores some of the most significant cyber attacks of the year... so far.

Overview: Ivanti has released updates for Ivanti CSA (Cloud Services Application) which addresses a medium severity and two high severity vulnerabilities. Exploiting these vulnerabilities effectively enables remote attackers to execute SQL statements through SQL injection, run arbitrary code via command injection, and bypass security restrictions by taking advantage of a path traversal weakness in vulnerable CSA gateways, which provide secure access to internal network resources for enterprise users.

In the spirit of Cyber Security Awareness Month, Integrity360 is calling for businesses to look beyond basic cyber security measures. As cyber threats evolve, traditional techniques like strong passwords and periodic software updates leave organisations vulnerable to more sophisticated attacks. 

Overview: A newly reported vulnerability in the Common Unix Printing System (CUPS) poses a significant security threat to UNIX-based systems, including Linux and macOS. Security researcher Simone Margaritelli has published the first of a series of blog posts detailing the issue, which can be exploited by sending a specially crafted HTTP request to the CUPS service. This vulnerability allows remote attackers to gain access to affected systems and execute arbitrary code, potentially escalating privileges and compromising critical assets.

CVE-2024-24919 is a critical information disclosure vulnerability in Check Point Security Gateways which have remote access VPN or mobile access software enabled.

Palo Alto Networks has disclosed a critical (CVSS10) command injection vulnerability in Global Protect Gateway, which is the VPN component of PAN-OS powered networking appliances.

An effective incident response plan is a crucial component of an organisation's cyber security strategy. Where data breaches, cyber-attacks, and other security incidents are increasingly common, having a robust plan in place is essential for minimising damage and recovering swiftly. This blog explores the key elements that constitute a good incident response plan, emphasising the importance of preparedness, swift action, and continual improvement in the face of evolving cyber threats. 

It’s not a matter of whether your organisation will face a security incident but when. That's why a robust incident response plan is crucial. So what elements should your incident response plan include to be truly effective?

Continuing our series on the most significant cyber-attacks this year, Integrity360's incident response team has turned its attention to the cyber security trends that we expect to surface in the latter half of the year.  

Businesses face a constant barrage of potential cyber-attacks, aiming to compromise data, applications, and other crucial assets. The backbone of an effective, modern-day cyber security strategy? The Security Operation Centre (SOC).

A Cyber Incident Response Team (CIRT) is a dedicated group of highly skilled and qualified IT professionals who are trained to respond to cyber security threats and incidents quickly. These teams are equipped with specific skills to identify, manage, and neutralise cyber threats effectively.