Blog
Stay ahead with news, opinion and research from the Swarm.
The Tiber EU Framework: What is it and why is it important?
At CovertSwarm, we’re a proud part of the cyber security sector and nothing slips under our radar. In fact, from the latest technology to best-practice testing methods, our Swarm rallies to keep our knowledge base growing, our clients better protected…
Zero-day vulnerability in Atlassian Confluence
We would like to bring to your attention the recently discovered unauthenticated remote code execution vulnerability in Atlassian Confluence (CVE-2022-26134). Description Confluence Server and Data Center editions are affected by the unauthenticated remote code execution flaw and are currently under…
The Internet of Things: Securing the Hidden Attack Surface of Your Home
Almost a quarter (23%) of Britons have at least one smart home device (YouGov), and global revenue for the sector is predicted to hit $9bn this year (Statista). It’s tempting to think that a password or two might be all…
Zero-day vulnerability in Microsoft Office – Follina
We would like to bring your attention to the following 0-day exploit we have recently become aware of. Follina – A zero-day Microsoft Office code execution vulnerability that bypasses Microsoft Defender for Endpoint. This vulnerability has been seen to be…
Diary of a Cyber Attacker
When you think of an attacker, it’s tempting to imagine a Matrix-style hacker in a hoodie. In reality, these bad actors are highly intelligent experts in the cyber landscape — and they’re at the top of their game.
CovertSwarm Inc. launched in North America
CovertSwarm has modernized the cyber security industry through its Constant Cyber Attack™ subscription service and Offensive Operations Center attack platform. Today, they announce the brand’s expansion into the North American market as delivery of a major strategic milestone in their mission to outpace their client's genuine cyber threats.
CovertSwarm supports BBC to advise social media account hijack victims
CovertSwarm has modernised the cyber security industry with its challenger ‘Constant Cyber Attack’ subscription service. Today, they announce their latest collaboration with the BBC to provide insights and guidance to combat the hijacking of user accounts upon popular social media platforms such as Twitter and Instagram.
Video: Zero-Day Exploitation From A Bad Actors Perspective
On the 11th April members of the CovertSwarm team took part in an online discussion, hosted by the London CTOs group. In this session we discuss zero-day vulnerability exploitation and the tactics and techniques used by bad actors, in the…
Multiple Windows Zero-Days Identified (CVE-2022-24521, CVE-2022-26904 and CVE-2022-26809)
We would like to bring to your attention, that Windows recently has addressed a total of 128 security vulnerabilities. 10 of these 128 vulnerabilities are rated with the severity Critical. Security patches for these vulnerabilities were made available by Microsoft.…
Zero Day Vulnerability Identified In Java Spring Framework – CVE-2022-22965 (Spring4Shell)
A zero-day remote code execution (RCE) vulnerability has been identified in the Spring framework. VMware Spring is a open-source Java toolkit for building powerful Java apps, including cloud-based apps. Part of the Spring ecosystem is a set of components called…
Remote Code Execution Vulnerability In Veeam Backup & Replication – CVE-2022-26500 & CVE-2022-26501
We would like to bring your attention to the following unauthenticated remote code execution vulnerability within Veeam Backup & Replication. This issue is being tracked as CVE-2022-26500 & CVE-2022-26501 and has been given the CVSS v3 score of 9.8. At…
Video: Your Best Defence is Your Worst Enemy – Rethinking Your Cyber Security Strategy.
Last week, CovertSwarm’s COO, Luke Potter, was invited to speak at an online panel discussion, sponsored by VMware, and in collaboration with our partners at Ekco, to discuss emerging cyber threats, the rapidly growing threat landscape and exactly why point…
Critical Root Privilege Escalation Vulnerability Alert In Linux – CVE-2022-0847
We would like to bring your attention to the following critical root privilege escalation vulnerability that we have recently become aware of. This vulnerability affects all major Linux distributions and is considered to be easy to exploit. Proof of concept…
Who are CovertSwarm?
We’re glad you asked…
CovertSwarm – Dundee and Angus College Curriculum Partner
It is with great pride we announce our ongoing relationship as a Curriculum Partner for the Computing and Creative Media Department at Dundee and Angus College. Over the coming months we will be working closely with the college to help…
Introducing CovertSwarm – The Podcast
We are very excited to share with you today, the first official CovertSwarm podcast. Join CovertSwarm’s CEO, Anders Reeves and COO, Luke Potter, in the first episode of an ongoing series as they discuss why the cyber industry must change,…
Zero Day Vulnerability Identified In Magento 2 And Adobe Commerce (CVE-2022-24086)
We would like to bring your attention to the following 0-day exploit we have recently become aware of. A zero day remote code-execution (RCE) bug in the Magento 2 and Adobe Commerce platforms has been discovered. This vulnerability has been…
The emerging crisis in Ukraine
In light of this morning’s devastating news on the ongoing crisis in Ukraine, our thoughts and prayers are with anyone affected.
0-day Vulnerability In Horde Webmail Email System
We would like to bring your attention to the following 0-day exploit we have recently become aware of. The Horde Webmail Software has been found to contain a nine year old unpatched security vulnerability. Exploitation of this vulnerability could be…
Authentication Bypass/Instance Takeover Vulnerability via Zabbix Frontend – CVE-2022-23131
A vulnerability has been discovered within Zabbix front end which if configured with SAML could allow a remote unauthenticated attacker to exploit this issue in order to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack,…
Critical RCE Vulnerabilities in WordPress Plugin PHP Everywhere
We would like to bring your attention to the following set of critical vulnerabilities that we have recently become aware of within the WordPress plugin ‘PHP Everywhere’. Description Three remote code execution vulnerabilities have been identified within the WordPress ‘PHP…
Critical Vulnerability Alert in Samba – CVE-2021-44142
We would like to bring your attention to the following Critical vulnerability we have recently become aware of. All versions of Samba prior to 4.13.17 are vulnerable to an out-of-bounds heap read write vulnerability that allows remote attackers to execute…
Remote Root Exploit via Log4Shell & PwnKit Vulnerabilities
CovertSwarm demonstrating a full remote ‘root’ attack chain – enabled by Log4Shell (CVE-2021-44228) + PwnKit (CVE-2021-4034) Over the past months there were several releases of new CVE’s, two of which especially have a major impact on modern systems. Today we…
Critical 0-day vulnerability in Polkit pkexec component
Description A vulnerability in Polkit’s (PolicyKit) pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system. The issue exists within PolicyKit…