What Is It Reaction GIF by Nebraska Humane Society

Notices where this attachment appears

1. Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 24-Jul-2023 22:56:38 UTC Kevin Beaumont

   in reply to

   The #MobileIron advisory is now public. Cyberbullying vendors into doing the right thing is my community service.

   CVSS 10. “Remote unauthenticated API access”. #threatintel

   This one is completely nuts btw, I set up a honeypot and it’s already being probed via the API - which allows admin access and is completely unauthenticated, apparently nobody ever pentested one of the most widely used MDM solutions.

   https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US