Mitigating the First Major Kubernetes Vulnerability

Recent news on the discovery of the first Kubernetes vulnerability, the popular cloud container orchestrations system, highlights two things critical to security, the need to: Audit and harden systems on the periphery and inside an infrastructure, and    Continually review these…

Read More

Vulnerability: CVE-2017-6074 Linux Kernel DCCP double free

On Friday February 17th, 2017 the Linux Kernel team released a patch for a double-free vulnerability in the Linux kernel. On Wednesday February 22nd, 2017 the bug was revealed to the oss-sec mailing list. This Privilege Escalation vulnerability is a…

Read More

How Halo can help combat the BadTunnel vulnerability

Last week, Microsoft released several patches to address a vulnerability nicknamed “BadTunnel” that reportedly affects all versions (Desktop and Server) of Windows OS. At a glance, BadTunnel is a vulnerability that, if exploited, could allow an attacker to hijack a victim’s…

Read More