Posts tagged ‘Security’
Resiliency Is the New SLA: Why AI Demands an Always-On Intelligent Edge
For decades, we’ve measured the network in terms of uptime percentages and bandwidth tiers. In the AI era, those metrics are no longer enough. Resiliency, which is the ability to deliver uninterrupted, any-directional, application-aware connectivity in the face of unpredictable AI workloads, is the new SLA.
CVE-2026-41940: Inside the cPanel/WHM Authentication Bypass
Introduction Hosting control panels operate with near-total authority over a server: websites, databases, DNS, email, and the account lifecycle are all driven from one place. That privilege makes them a high-value target—when a control-plane bug appears, compromise can extend far beyond a single site. CVE-2026-41940 is a pre-authentication bypass affecting WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared). In practical terms, it lets a remote, unauthenticated attacker reach administrator-level control without supplying valid credentials. Background: What Is cPanel/WHM? cPanel is a widely deployed, Linux-based hosting panel. WHM is the higher-privileged layer used by resellers and server administrators to…
Compliance: Mapping the Coast Guard’s MTSA Cyber Rule to VersaONE
Here is how Versa Unified SASE platform translates 33 CFR Part 101, Subpart F into controls for compliance.
The Ghost in the Leased Line: Unmasking MuddyWater, Surgical Cyber Arm
In the high-stakes theater of global geopolitics, the most effective weapons aren’t always missiles; sometimes, they are just few lines of code.
Closing the Cloud Security Posture Management Gap with Versa CSPM
Today’s environments span multi-cloud infrastructure, SaaS ecosystems, remote endpoints, and an increasing layer of AI-driven applications and integrations. This expansion has introduced a new class of challenges—not just scale, but visibility.
Identity Is the New Perimeter. Stryker Just Taught Us That the Hard Way.
A story on how an Iran-linked group wiped tens of thousands of Stryker’s devices A nation-state attack that changes every assumption we had For years, we have treated nation-state threats as a “Tier 1” problem — something reserved for defense contractors and the energy grid. The March 2026 attack on Stryker Corporation by Iran-linked group Handala officially kills that assumption. On March 11, 2026, Stryker’s corporate Microsoft environment was hit. Employees arrived to find their managed devices wiped out overnight through entirely legitimate Intune commands. Handala claimed 200,000+ systems affected; independent reporting confirms that tens of thousands were impacted. Stryker’s…
Automating Branch-to-Cloud Connectivity and Security: Versa Secure SD-WAN Integration with Zscaler Internet Access
We’re excited to introduce an automated integration between Versa Secure SD-WAN and Zscaler that makes dual-vendor SASE faster, secure and resilient. This integration helps you secure local internet breakout, improve user experience and simplify operations
Why Identity Alone Isn’t Enough: Device Posture in Contextual Zero Trust Security
Identity-based access is incomplete without device posture. Learn how contextual Zero Trust and continuous endpoint profiling reduce standing privilege risk in Dynamic Enterprises.
BrickStorm Malware: Anatomy of a Stealth Linux Backdoor Targeting Modern Infrastructure
BrickStorm is a highly stealthy Linux backdoor designed for long-term, targeted cyber-espionage. Brickstorm is closely associated with Cyber Espionage group UNC5221, which is known for exploiting zero-days vulnerability in network edge appliances like Ivanti, F5 and MiTRE breach. Unlike commodity malware, BrickStorm is deployed post-compromise, operates largely in memory, and uses a modular architecture with custom encrypted command-and-control (C2). Its focus on Linux servers, network appliances, and embedded systems reflects a broader trend: attackers increasingly target infrastructure layers where visibility and detection are weakest.
‘Secure by Design’ at Versa: One Year of Progress
Security is a product decision, not an afterthought. As a further commitment to this principle and as a reflection of our pledge to the CISA Secure by Design goals, over the past year Versa has been putting them into practice across our platform, processes, and programs. Organized below around the seven Secure by Design pledge goals is a summary of the related new capabilities and enhancements we’ve delivered, along with a quick explanation of the importance of the changes.
Industry Insights
Defense Against Web Threats in the Modern Era
By Amelie Sutsakhan
Product Marketing Manager, Versa Networks
April 20, 2021
Cyberattacks have been ranked as the fastest growing crime in the US. Secure Web Gateway (SWG), one of the five components of Secure Access Service Edge (SASE) is key to protecting users from web-based threats while applying and enforcing security policies consistently.
Product & Engineering
Versa Titan: Versa SASE for Lean IT
By Robert McBride
Sales Engineer
March 25, 2021
Versa Titan drives unique and differentiated value for Lean IT by: delivering SASE services in a single unified solution, combing full stack security with industry-leading SD-WAN, making it the easiest solution to deploy, configure, and manage SASE services. By simplifying IT, IT teams can focus on streamlining operations, achieving their organization’s mission, and driving business agility.
Customers & Partners
5 Real Deployments of SASE
By Amelie Sutsakhan
Product Marketing Manager, Versa Networks
February 17, 2021
Contrary to how often SASE is presented as only a cloud-delivered solution, SASE is most commonly deployed as a blended implementation. As seen with the customer examples above, a number of them decided to deploy via the cloud and on-premises while others leveraged a 100% cloud model or a 100% on-premise model.
Industry Insights
Best Practices for the Enterprise (Part 3) Multi-tiered Architecture
By Neil Danilowicz
Principal Architect
November 6, 2019
Welcome to the Third installment of the Enterprise Best Practices Blog. My name is Neil Danilowicz, Principal Architect for Versa Networks. This week we will focus on why the Enterprise should require a secure multi-tiered architecture for their SD-WAN solution.So why is a secure multi-tiered architecture a requirement for Enterprise deployment of SD-WAN? Historically, Enterprises would contract with a service provider to purchase private circuits (MPLS, PIP, or dedicated TDM circuits) to provide secure private connectivity between their branches and data centers. If an Enterprise required access to the Internet or remote networks, demilitarized zones (DMZs) were established to vet…
Industry Insights
Enterprises Need to Keep Edge Networks Safe
By The Versa Team
Universal SASE leaders
October 6, 2019
With enterprises investing heavily to transform themselves digitally, the threat environment has in many respects intensified and diversified. Enterprises pursuing a hybrid cloud or multi-cloud strategy, or relying on a software-as-a-service model to give remote workers access to critical applications, perhaps via a mobile device, will be potentially exposing themselves to new threat vectors that must be built into an already long list of security considerations for WAN edge optimization. As enterprises look for ways to accelerate their digital transformation journeys and to achieve greater business agility, they must match that by transforming their wide-area network to be more software-driven….
Industry Insights
Enterprise Best Practices
By Neil Danilowicz
Principal Architect
September 4, 2019
Hello, and welcome to the second installment of the Enterprise Best Practices Blog. My name is Neil Danilowicz, Principal Architect for Versa Networks. This week I would like to focus on Keys – their importance to SD-Wan and why an Enterprise should be concerned about the keys. As we all know, every Enterprise has both public and private information. And it is the duty of the Enterprise to protect private information, be it intellectual property (IP), financial information, customer subscription information, payment history, or other information that must be protected due to regulations (both industry standard and governmental). Protecting information…
Product & Engineering
Security is the Great Differentiator to a Successful SD-WAN Solution
By The Versa Team
Universal SASE leaders
July 22, 2019
NSS Labs recently conducted its 2019 security-enabled SD-WAN 2.0 group test. Versa is one of only two SD-WAN vendors, out of 10 tested, that received the “Recommended” rating. The test findings accentuated Versa Networks’ ability to deliver an exceptional user experience and low total cost of ownership with security enabled. Leveraging unbiased data to establish verifiable vendor differentiation is critical to the NSS Labs test criteria. Within the crowded SD-WAN vendor landscape, to affirm their vendor selection, customers put a premium on real-world and impartial testing, based on empirical evidence. NSS Labs structured the security-enabled SD-WAN test according to three…
Industry Insights
Mitigating Sophisticated Security Threats at the WAN Edge
By The Versa Team
Universal SASE leaders
March 20, 2019
According to several industry surveys, it takes the typical enterprise over 200 days to discover a security breach, such as undisclosed web vulnerabilities or spearfishing for email credentials, according to the 2018 Cost of a Data Breach Study: Global Overview from IBM Security and Ponemon Institute. The study calculated that the global average cost of a data breach is $3.86 million, up 6.4% from last year. The average cost, globally, for each lost or stolen record containing sensitive and confidential information is also up from last year, landing at $148 per record or a 4.8% increase from 2017. Although the…
Industry Insights
New Report Reveals Top 10 Cryptomining Malware for 2018
By The Versa Team
Universal SASE leaders
December 17, 2018
Disruptive technologies, like blockchain, usher in new market opportunities, like cryptomining. Whenever there is a growing trend, with the potential for financial gain, cyber criminals will invariably find ways to disrupt and distort these markets. Cryptomining is highly compute-intensive, using computer resources, such as CPU cycles, to mine “cryptocurrency”. Miners are paid for solving CPU intensive cryptographic challenges that validate each block of a transaction added to a cryptocurrency’s blockchain. They are paid a certain amount of cryptocurrency into their cryptocurrency wallet as commission for validating a transaction. . Anywhere there is a profit to be made, capable people will…
Research Lab
Internal Network Exposure via UPnP NAT Injection
By Winny Thomas
Principal Security Architect
December 5, 2018
Universal Plug-n-Play – (UPnP) is a suite of protocols that enables a device to discover other devices on a network, configure itself to operate in the network, and advertise its services. This allows a device to locate routers, printers and other resources on a network. UPnP runs on UDP port 1900 and communicates using SOAP messages over HTTP. The actual configuration and management interface are implemented using a SOAP-based HTTP service running over a dynamically allocated TCP port. The UPnP protocol allows management of aspects of a device’s operation to extend support by the protocol implementation on the device and its…
Subscribe to the Versa Blog
Recent Posts
