In The News

A newly discovered, high-severity flaw in a legacy Internet protocol used by various enterprise products can allow for attackers to amplify distributed denial-of-service (DDoS) attacks up to 2,200 times — one of the largest amplification attacks ever recorded, researchers from Bitsight and Curesec have found.

Attackers have been leveraging the vulnerability to increase the UDP response size of targeted servers to a maximum amplification factor of 2,200X, according to a report from BitSight, which jointly discovered the bug with Curesec.

A high-severity vulnerability in a legacy internet protocol could lead to massive denial-of-service amplification attacks around the world at more than 2,000 organizations, researchers from BitSight and Curesec said Tuesday.

Internet protocol vulnerability opens door to ‘massive’ DoS amplification attacks Researchers have discovered a high-severity vulnerability in a legacy internet protocol which they warned could be used to launch “massive” denial-of-service (DoS) attacks capable of knocking services offline.

Researchers from security firms Bitsight and Curesec found a vulnerability that allows attackers to exploit SLP endpoints in a specific way that will generate big responses and then reflect those responses toward victims.

Details have emerged about a high-severity security vulnerability impacting Service Location Protocol (SLP) that could be weaponized to launch volumetric denial-of-service attacks against targets.

CVE-2023-29552 was discovered by researchers at Bitsight and Curesec, who say that over 2,000 organizations are using devices that expose roughly 54,000 exploitable SLP instances for use in DDoS amplification attacks.

Steve Harvey, CEO of Bitsight, and other leaders discuss how cybersecurity risk is now a mainstay of corporate risk management and director responsibilities. As boards confront the risks and increased focus on cybersecurity, there are specific actions directors can take to protect themselves.

Stephen Harvey, president and chief executive of Bitsight, comments on SEC rule 10 and the its implications for organizations and their cybersecurity practices.

By exploiting webcams and other IoT devices, hackers can spy on private and professional conversations, potentially giving them access to sensitive information, says Bitsight.

Bitsight, a leader in detecting and managing cyber risk, unveiled new research which found one in 12 Bitsight-tracked organizations with Internet-facing webcams or similar IoT devices are susceptible to video and/or audio compromise.

Bitsight, a leader in detecting and managing cyber risk, today unveiled new research which found one in 12 Bitsight-tracked organizations with Internet-facing webcams or similar IoT devices are susceptible to video and/or audio compromise.

Bitsight has published research finding that “one in 12 Bitsight-tracked organizations with Internet-facing webcams or similar IoT devices are susceptible to video and/or audio compromise.”

Last year, researchers at Minerva Labs spotted the botnet being used to blast out sextortion scams. But according to a new report from Bitsight, the Mylobot botnet’s main functionality has always been about transforming the infected system into a proxy.

SaaSG was created to help CMS understand SaaS risks in an effort to make sound business decisions around responsible SaaS usage. Bitsight is discussed as a critical component as we provide SOC2 audit reports and perimeter scans.