Dirty COW Vulnerability Advisory This is a security advisory on the Dirty COW Vulnerability. What is Dirty COW Vulnerability? Dirty COW is a privilege escalation vulnerability in the Linux Kernel. The Dirty COW vulnerability allows attackers to gain root access to servers and take control
ControlCase to present at PCI Community Meetings
ControlCase Newsletter September 2016 ControlCase to present at PCI Community Meetings ControlCase will present on "Balancing Security and Compliance" at the North America and Europe PCI Community Meetings this fall. The ControlCase presentations will provide insight into the current state and
Advisory on Badlock Vulnerability
Advisory on Badlock Vulnerability This is a security advisory on the Badlock Bug. What is Badlock? Samba is an important component to seamlessly integrate Linux/Unix Servers and Desktops into Active Directory environments. It can function both as a domain controller and as a regular domain
Cross-protocol attack on TLS using SSLv2 (DROWN Vulnerability)
Cross-protocol attack on TLS using SSLv2 (DROWN Vulnerability) (CVE-2016-0800) This is a security advisory on the DROWN Attack (CVE-2016-0800). What is DROWN Attack (CVE-2016-0800). DROWN, stands for "Decrypting RSA with Obsolete and Weakened eNcryption", is a serious vulnerability that
Logjam Vulnerability Advisory
Logjam Vulnerability Advisory This is a security advisory on the "Logjam Vulnerability." What is Logjam Attack The Logjam vulnerability is a weakness that left secure sites open to attack. A weakness in encryption protocol called Diffie-Hellman is letting attackers downgrade certain
Simplify Compliance with Multiple Regulations using “One Audit”
ControlCase Newsletter April 2015 ControlCase Announces "One Audit" to Simplify Compliance with Multiple Regulations The ControlCase One Audit service provides the ability for organizations to perform a single audit and certify/comply to multiple regulations including but not limited to PCI
GHOST Vulnerability Advisory
GHOST Vulnerability Advisory This is a security advisory on the "GHOST Vulnerability (CVE-2015-0235)." About the Vulnerability The GHOST vulnerability is a serious weakness in the Linux "glibc library". It allows attackers to remotely take complete control of the victim system. GHOST is a
Windows OLE RCE – The Sandworm Exploit
Windows OLE RCE - The Sandworm Exploit This is a security advisory on the "Windows OLE Remote Code Execution Vulnerability" widely known as "The Sandworm" exploit. About the Vulnerability On October 14th, Microsoft released several Patches on the Patch Tuesday. The patches mainly address a