Tag: Penetration Testing
-
Sitting on Undisclosed Vulnerabilities (e.g. SolarWinds Stragglers)
The company SolarWinds is in the news, victims of an attack that compromised their Orion Platform software by inserting a backdoor into it, allowing for remote code execution. Like most big breaches, we hear the term “sophisticated” used for the attack. And like many breaches, we quickly learn that it might not have been so…
-
Scanning Large Networks with Nessus
[This was originally published on the Tenable Blog.] The first time I was asked to scan a Class B network, my initial reaction was “Are you kidding me?” I actually thought it was a trick question to see how I reacted to unexpected situations. I had just two weeks to develop a strategy and perform…