BianLian Ransomware Group: 2024 Activity Analysis

Since its emergence in 2022, the BianLian ransomware group has rapidly evolved, showcasing sophisticated techniques and adapting to the shifting landscape of cyber threats. It’s among the top three most

Share
Security and Networking Teams, Meet Collaborative Engagement

For the last 20 years, networking and security teams have had quite a tumultuous relationship thanks to vastly different objectives and/or impact on the other when completing necessary tasks. Security

Share
Introducing New Security Insights Within Juniper Mist Premium Analytics: A Bridge for Network and Security Teams’ Visibility Challenges

Let’s face it, organizations often struggle to address unwanted behaviors on the network while minimizing their potential impact. Ideally, incidents would be addressed in real-time with automated responses to prevent

Share
Protecting Networks from Opportunistic Ivanti Pulse Secure Vulnerability Exploitation

  Juniper Threat Labs has been monitoring exploitation attempts targeting an Ivanti Pulse Secure authentication bypass with remote code execution vulnerabilities. We have observed instances of Mirai botnet delivery in

Share
Shielding Networks From Androxgh0st

  AndroxGh0st is a Python-based malware designed to target Laravel applications. It works by scanning and taking out important information from .env files, revealing login details linked to AWS and

Share
Juniper Networks Evolves Modern Data Center Security with the Industry’s First Distributed Security Services Architecture

What happens when data, the crown jewel of any business, moves from a centralized, self-contained data center to multiple distributed locations? It becomes harder to manage and secure. This is

Share
Juniper Networks Achieves AWS Security Competency

We’re excited to announce that Juniper Networks has achieved the AWS Security Competency. This prestigious validation is a testament to our commitment to delivering top-notch security solutions for cloud environments.

Share
CVE-2023-20887: VMware Aria Operations for Networks Unauthenticated Remote Code Execution

VMware Aria Operations for Networks is a network monitoring and management tool used to build and manage an optimized, secure network infrastructure. A command injection vulnerability has been recently reported

Share
Abused CDNs: From Speedy Content to Stealthy Malware

The global internet relies on Content Delivery Networks (CDNs) to deliver a seamless web experience for users. Because of the shared nature of a CDN’s resources, network operators must be

Share
DreamBus Botnet Resurfaces, Targets RocketMQ vulnerability

In May 2023, a vulnerability affecting RocketMQ servers (CVE-2023-33246), which allows remote code execution, was publicly disclosed. In a recent blog post, Juniper Threat Labs provided a detailed explanation of

Share