Resource Center

Resource Center

Expert Insights and Tools for Fortifying Your Cyber Defense

Elevate your cybersecurity expertise and strengthen the security posture of your organization with expert guidance, industry best practices, and research insights from Enterprotect.

Supply Chain Attack Compromises 3CXDesktopApp
Threat Advisory Lee Vaniderstine Threat Advisory Lee Vaniderstine

Supply Chain Attack Compromises 3CXDesktopApp

The compromise of 3CXDesktopApp poses a significant threat to businesses globally, as it has the potential to steal credentials and access sensitive data. Our threat advisory outlines the technical details of the malware, exposure risks, and recommendations to protect your organization from potential breaches. Ensure endpoint protection is installed and active on all endpoints, remove any exclusions related to 3CX, and regularly remind users not to store login credentials in their browsers.

Read More
Strengthening Your First Line of Defense: The Vital Role of DNS Filtering in Protecting Against Today's Threats
Insights Lee Vaniderstine Insights Lee Vaniderstine

Strengthening Your First Line of Defense: The Vital Role of DNS Filtering in Protecting Against Today's Threats

DNS filtering is a powerful cybersecurity measure that can help protect against a range of online threats. By scanning and categorizing web traffic, DNS filtering can identify and block known malicious domains, prevent access to phishing sites, and help stop malware, ransomware, and cryptojacking attacks

Read More
Critical Unauthorized Remote Execution Code Vulnerability Found in Fortinet FortiOS and FortiProxy
Threat Advisory Lee Vaniderstine Threat Advisory Lee Vaniderstine

Critical Unauthorized Remote Execution Code Vulnerability Found in Fortinet FortiOS and FortiProxy

Enterprotect recommends immediate action to address a critical security flaw found in Fortinet's FortiOS and FortiProxy products. The vulnerability allows an unauthenticated attacker to execute commands on the device and perform a denial-of-service (DoS) attack on the graphical user interface (GUI) through specially crafted HTTP requests.

Read More
Malicious Packages Found in Python Package Index (PyPI)
Threat Advisory Lee Vaniderstine Threat Advisory Lee Vaniderstine

Malicious Packages Found in Python Package Index (PyPI)

This threat advisory by Enterprotect highlights the discovery of malicious packages on the Python Package Index that can steal sensitive data from developers. The post provides technical details on the threat, outlines the exposure and risk, and offers recommendations on how to protect yourself and your organization. The advisory includes essential tips for preventing supply chain attacks and staying up to date with package repository updates.

Read More
MortalKombat Ransomware Campaign Targets US Systems
Threat Advisory Lee Vaniderstine Threat Advisory Lee Vaniderstine

MortalKombat Ransomware Campaign Targets US Systems

This threat advisory outlines the risks and exposure of the MortalKombat ransomware campaign, which is targeting systems in the United States. The campaign uses a variant of the Xorist commodity ransomware and Laplas clipper to conduct financial fraud, posing a significant threat to organizations. The post provides recommendations on mitigating the risks and reducing the impact of the campaign.

Read More