Posts tagged ‘Threat Intelligence’
When Convenience Becomes a Command Prompt: Five Critical RCEs in Dokploy
Versa’s security research team discovered and responsibly disclosed five critical Dokploy vulnerabilities, all rated CVSS 9.9, that let authenticated members escalate to host compromise. Learn how the flaws work, why upgrading to 0.29.13 matters, and how Versa IPS signatures block exploit attempts.
From Reactive Patching to Continuous Hardening: Versa’s AI-Era Security Discipline
Versa’s secure software development practices are built for the AI era. Versa uses frontier cyber models in pre-merge security reviews, validates its software supply chain across dozens of security scanners, blocks any release with unresolved Critical or High-severity vulnerabilities, and requires engineer review of all AI-assisted code before merge.
Security Without Compromise: What the 2026 NSS Labs Cloud Network Firewall Tests Tell Us
The 2026 NSS Labs Comparative Test Report for Cloud Network Firewalls evaluated nine leading cloud-native and third-party firewalls under identical conditions, measuring security effectiveness, performance, TLS support, stability, and cost. As AI drives up encrypted traffic volumes and enables more evasive attacks, the results show that enterprises no longer have to trade protection against performance or cost. Versa NGFW earned NSS Labs’ “Recommended” rating for the second consecutive year, pairing 99.91% security effectiveness with the fastest rated throughput and the second-lowest cost per Mbps of any vendor tested.
DLLHijackHunter: Validation-Driven Discovery and Confirmation of DLL Hijacking Paths on Windows
DLLHijackHunter is an open-source tool that finds real DLL hijacking vulnerabilities, not just theoretical ones. Its canary technique triggers the vulnerable program and captures proof the hijack worked, cutting through the noise of static scanners. Free on GitHub, it helps security teams focus on confirmed findings instead of guessing which candidates actually matter.
The New OWASP GenAI Top 10 and Why Network Security Matters
Almost every risk in the 2026 OWASP GenAI Top 10 leaves observable artifacts at the network layer. This post walks through all ten categories, real-world incidents behind each one, and the specific SASE controls (SWG, CASB, DLP, ZTNA, RBI) that catch what app-layer guardrails miss.
MITRE ATT&CK vs. MITRE ATLAS: Two Frameworks, One Expanding Threat Landscape
I have been in cyber security for over 25 years. And I have done my fair share of penetration testing/offensive security and I am quite familiar with the MITRE ATT&CK framework. Not long ago, I had the chance to dig into AI offensive security techniques hands-on. I assumed we would use the standard Kali-style hacking tools and follow the usual TTPs. I was wrong. We never fired up a Kali Linux instance or used a single tool from the past 30+ years. Instead, we learned how to trick the LLM into giving us information it was not supposed to. For…
CVE-2026-41940: Inside the cPanel/WHM Authentication Bypass
Introduction Hosting control panels operate with near-total authority over a server: websites, databases, DNS, email, and the account lifecycle are all driven from one place. That privilege makes them a high-value target—when a control-plane bug appears, compromise can extend far beyond a single site. CVE-2026-41940 is a pre-authentication bypass affecting WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared). In practical terms, it lets a remote, unauthenticated attacker reach administrator-level control without supplying valid credentials. Background: What Is cPanel/WHM? cPanel is a widely deployed, Linux-based hosting panel. WHM is the higher-privileged layer used by resellers and server administrators to…
The Ghost in the Leased Line: Unmasking MuddyWater, Surgical Cyber Arm
In the high-stakes theater of global geopolitics, the most effective weapons aren’t always missiles; sometimes, they are just few lines of code.
Identity Is the New Perimeter. Stryker Just Taught Us That the Hard Way.
A story on how an Iran-linked group wiped tens of thousands of Stryker’s devices A nation-state attack that changes every assumption we had For years, we have treated nation-state threats as a “Tier 1” problem — something reserved for defense contractors and the energy grid. The March 2026 attack on Stryker Corporation by Iran-linked group Handala officially kills that assumption. On March 11, 2026, Stryker’s corporate Microsoft environment was hit. Employees arrived to find their managed devices wiped out overnight through entirely legitimate Intune commands. Handala claimed 200,000+ systems affected; independent reporting confirms that tens of thousands were impacted. Stryker’s…
What is Workspace Security?
“What Is Workspace Security? Learn how Workspace Security, operating within the broader Secure Access Service Edge (SASE) framework, unites advanced security and networking technologies to safeguard users, devices, applications, and data. From enabling Zero Trust principles to incorporating tools like SWG, CASB, ZTNA, DLP, and DEM, explore how Workspace Security helps organizations protect distributed workforces while enabling productivity and collaboration. Discover why Versa is a leader in SASE innovation for modern enterprises.
Industry Insights
How Networking Improves Your Cybersecurity Posture
By Brad LaPorte
Strategic Advisor
May 20, 2025
Traditionally, networking and security have operated as separate silos within enterprise IT. Networking was focused on providing connectivity, while security was tasked with protecting that connectivity.
Industry Insights, Product & Engineering
AI-Powered SASE: Transforming Threat Detection and Response with VersaAI
By Dhiraj Sehgal
Senior Director, Product Marketing
May 14, 2025
Secure your enterprise with AI-powered Versa SASE that boosts threat detection and response with real-time analytics, behavioral insights, and intelligent security automation for today’s digital landscape.
Industry Insights
Securing the Open Source Supply Chain: A Network-Centric Approach
By Rahul Mehta
Product Marketing Analyst
April 15, 2025
The widespread use of OSS — from foundational operating systems like Linux to orchestration platforms like Kubernetes — has enabled rapid development and faster innovation. However, as OSS adoption accelerates with the rise of GenAI tools and platforms, so too does the complexity and risk associated with securing open source software. This blog is intended for IT and security leaders who recognize these challenges and are seeking effective strategies to address them.
Company Updates
Versa Achieves Exceptional Results in CyberRatings.org SSE Threat Protection and ZTNA Tests
By Dan Maier
Chief Marketing Officer, Versa Networks
October 24, 2024
In the crowded landscape of cloud-delivered Security Service Edge (SSE), relying on vendor claims of performance and security can often lead to disappointment. Increasingly, enterprises are seeking actual test results to validate the solutions they are considering.
Industry Insights
ISACA Survey Points to Growing Threats and Lack of Automation
By Kevin Sheu
VP of Product Marketing
October 14, 2024
This latest survey is more confirmation that an oft-mentioned reality continues to be true – that the nature of threats keeps advancing and organizations frequently find themselves falling further and further behind. Far and away, the top reason given for increased stress isn’t low budgets or lack of training or failure of company leadership to prioritize security – even though these are among the reasons cited – it’s the “threat landscape is increasingly complex,” listed by 81 percent of respondents, nearly double the next-closest response.
Company Updates
Comprehensive Threat Defense: How Versa Uses the MITRE ATT&CK Framework for Threat Detection and Response
By Anusha Vaidyanathan
Sr. Director, Product Management
September 12, 2024
Versa Advanced Threat Protection (ATP) is a comprehensive cybersecurity solution designed to protect organizations from sophisticated threats across various vectors. Versa’s ATP detection reports are mapped directly to the MITRE ATT&CK framework, providing security teams a fingerprint of attacks, which can then be used for attribution to known adversaries, incident response, simulation attacks, and other security measures.
Research Lab
Versa Security Bulletin: Update on CVE-2024-39717 – Versa Director Dangerous File Type Upload Vulnerability
By Versa Security Research Team
Threat Research & Protection Team
August 26, 2024
A medium-severity vulnerability was discovered in Versa Director (CVE-2024-39717), and a patch has been released. Impacted customers failed to implement system hardening and firewall guidelines, leaving a management port exposed on the internet.
Industry Insights
CrowdStrike Outage: Latest Updates and Best Practices
By Naganathan S J
Staff Security Engineer - Research
July 19, 2024
Today, CrowdStrike reported a significant outage affecting multiple services, including their Falcon platform. The CrowdStrike team is actively working to resolve the issue and restore full functionality. Users are advised to monitor CrowdStrike’s official status page for real-time updates and follow any recommended actions provided by the company.
Company Updates
Building Context with UEBA relationship graphs, using GraphML
By Sridhar Iyer
Director, Machine Learning & AI
May 2, 2024
Versa UEBA incorporates GraphML to generate insights and detect anomalies in user relationship graphs. Anomaly and behavior detections are just the first step. We then need to quickly pivot into building the forensics to inform response and remediation. This can involve determining the origination point of a malicious activity or an attack and building the scope and scale of a potential breach.
Research Lab
Versa Security Bulletin: Palo Alto Networks PAN-OS GlobalProtect Zero-Day Vulnerability under Active Exploitation
By Versa Security Research Team
Threat Research & Protection Team
April 19, 2024
CVEs: CVE-2024-3400; Summary Recently Palo Alto Networks announced a critical vulnerability in their PAN-OS software used in their GlobalProtect VPN Gateway, which is a feature in the PAN-OS Firewall. The discovery and public disclosure of the vulnerability and fixes timeline is currently as follows: Volexity first discovered the PAN-OS attack on April 10, 2024 at one of its network security monitoring (NSM) customers, and on April 11, 2024 subsequently learnt that another NSM customer was compromised by the same threat actor. Palo Alto Networks was then notified by Volexity that a zero-day vulnerability in its GlobalProtect Gateway was under active…
Subscribe to the Versa Blog
Recent Posts
What Enterprises Really Want from SASE Consolidation
By Kevin SheuOctober 5, 2026
How Versa Sovereign SASE Answers the EU Technological Sovereignty Package
By Dhiraj SehgalSeptember 29, 2026
Topics
Top Tags
Gartner Research Report
2026 Gartner® Magic Quadrant™ for SASE Platforms
Versa has for the fourth consecutive year been recognized in the 2026 Gartner Magic Quadrant for SASE Platforms1 and is one of only 12 vendors that met the criteria for inclusion based on the analysts’ evaluation of the VersaONE Universal SASE Platform.