Skip to content
Threat Feed
Subscribe

Vendor

Tanium

3 briefs RSS
medium advisory

Tanium Connect Multiple Vulnerabilities

Tanium released security advisories addressing vulnerabilities in Connect versions prior to Update 25 (v5.26.191), Update 19 (v5.29.237), and Update 9 (v5.37.140), potentially leading to unauthorized access and data compromise.

Connect +2 vulnerability tanium security advisory
3r
medium advisory

Potential Evasion via Windows Filtering Platform Blocking Security Software

Adversaries may add malicious Windows Filtering Platform (WFP) rules to prevent endpoint security solutions from sending telemetry data, impairing defenses, which this rule detects by identifying multiple WFP block events where the process name is associated with endpoint security software.

Windows Filtering Platform +2 defense-evasion windows-filtering-platform endpoint-security
2r 2t
high advisory

Windows Filtering Platform Policy Added to Block EDR Process

Attackers modify the Windows Filtering Platform (WFP) policy to block the communication of endpoint detection and response (EDR) processes, impairing their functionality and hindering detection of malicious activities.

CylanceSvc.exe +15 edr-bypass defense-evasion wfp
2r 1t